This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File:                     7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier:          xnZsyN7dBDe/NI3h5hhLyLgqFizFoikqmIEXaL449+s=
Subject key identifier:   BC:8E:BF:9C:9C:1B:CD:79:8C:ED:AB:2C:2D:87:12:07:72:04:28:8E
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer:       /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial:       03E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number:          03E4
Signing time:             Sun 25 Jan 2026 03:30:36 +0000
Manifest this update:     Sun 25 Jan 2026 03:30:35 +0000
Manifest next update:     Tue 27 Jan 2026 03:30:35 +0000
Files and hashes:         1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: UzwnLsqYKqzO12oOLgJJiXaRj7A1Gtb9faJ4n8oCA8k=)
                          2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
                          3: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
                          4: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
        Validity
            Not Before: Jan 25 03:30:35 2026 GMT
            Not After : Jan 27 03:30:35 2026 GMT
        Subject: CN=69758e5b-ab90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:84:d9:f6:68:56:7c:54:55:9b:61:0c:94:
                    28:f4:fa:67:d4:4c:7e:34:00:8c:63:8e:e2:52:25:
                    17:14:a6:29:05:45:23:b5:8e:d4:96:fd:39:15:7e:
                    52:21:a0:09:8f:04:b7:13:aa:eb:c5:7c:aa:e9:e5:
                    b6:b3:d3:c9:2a:6b:56:31:e8:4d:87:ad:34:fb:dd:
                    91:09:15:fb:24:e2:8d:9e:1a:e8:78:18:49:09:34:
                    3b:da:c4:75:92:ff:60:29:c5:76:0e:1f:ff:36:0a:
                    da:e3:45:fe:9f:a2:93:6b:28:05:a1:ea:14:d1:35:
                    34:18:8b:2b:4d:25:e0:75:56:03:29:36:03:3f:34:
                    96:6f:20:81:82:c1:1c:70:9d:09:0c:66:00:2f:d2:
                    86:f3:fe:61:2a:89:30:87:e1:12:f3:9d:96:55:cb:
                    d0:d9:b3:86:18:03:25:0e:7d:db:5f:7a:c2:f1:18:
                    05:50:03:e8:46:96:a9:93:c4:15:68:aa:e6:77:df:
                    f1:ad:0a:c2:36:58:c1:73:4d:a5:ee:fe:6b:b0:ef:
                    52:f0:07:81:45:40:ed:3e:4b:79:21:7c:39:fe:3f:
                    e1:4c:ed:9d:01:e7:72:96:f4:97:ad:b5:18:ae:0c:
                    bb:97:8c:fd:01:c6:52:36:96:2d:f3:9f:ab:2c:48:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8E:BF:9C:9C:1B:CD:79:8C:ED:AB:2C:2D:87:12:07:72:04:28:8E
            X509v3 Authority Key Identifier:
                keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:73:e2:91:b6:6e:f0:cf:4b:6b:d0:b3:18:86:57:6c:21:
         8d:9c:cd:d1:d2:98:b3:c8:eb:2d:b0:ff:fd:57:d8:08:b1:f3:
         eb:cd:a3:68:d0:46:a1:2f:c1:b6:03:f4:30:7d:6d:33:6a:03:
         1e:72:6c:9e:49:27:1e:93:fc:bf:e2:19:df:7b:ae:ea:35:d9:
         75:43:5d:f1:a3:0b:b6:9f:66:9b:69:c0:86:9a:3f:aa:18:20:
         f3:4a:e8:74:28:87:30:84:ae:5e:b0:49:de:b7:1c:af:ca:00:
         e2:03:4e:04:b0:b4:a8:fa:7b:c2:93:2d:f3:06:6b:d3:bd:42:
         5d:f8:18:e4:2d:44:0e:4c:ff:f5:7f:4f:c0:2c:3a:73:ac:a9:
         34:49:48:fc:50:86:cf:d5:2e:e2:64:d7:b9:2d:d2:1b:d9:aa:
         b5:ce:f3:c7:dd:12:3d:2e:b1:6b:7f:ae:16:79:ca:58:a0:75:
         9b:11:1b:1f:5c:a4:e6:f4:ea:4e:c3:aa:84:95:dc:39:f7:c0:
         8f:80:cb:f9:91:f6:78:10:8f:1c:35:9c:8c:71:d3:29:d0:05:
         e7:b4:5f:e2:ef:df:c3:77:3a:57:7d:0c:9e:03:0f:44:2f:dd:
         0e:32:79:ba:0c:aa:dc:4d:e8:38:06:30:3e:57:82:b3:eb:ea:
         4b:16:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:49:49 2026 by rpki-client