This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File:                     X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier:          KLNLpW6fCnZ++uwEPikR67sEJ2/ckoCs70ifRpbgGO8=
Subject key identifier:   43:99:03:B6:9A:4B:E1:50:A2:84:79:6A:2C:4D:D9:4B:4D:13:BD:62
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       035C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number:          0356
Signing time:             Sun 25 Jan 2026 03:50:24 +0000
Manifest this update:     Sun 25 Jan 2026 03:50:24 +0000
Manifest next update:     Tue 27 Jan 2026 03:50:24 +0000
Files and hashes:         1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: OVBAUUkSZdZm4GWjKHgpLz1VDTywZHC3VLZGmBgD5EI=)
                          2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Jan 25 03:50:24 2026 GMT
            Not After : Jan 27 03:50:24 2026 GMT
        Subject: CN=69759300-2eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:e9:d3:10:4b:59:29:2c:c0:06:3d:14:dc:
                    16:08:77:57:9a:f4:67:c9:f8:d7:5d:1e:e4:a8:74:
                    ff:16:24:a7:ed:fa:0a:af:d3:d1:d3:61:5a:30:e4:
                    02:89:5a:b1:e1:d8:75:6d:6f:f8:77:e7:d6:93:c2:
                    4f:59:03:4a:01:c2:e9:59:1d:1b:b9:c0:96:85:1c:
                    2f:7d:2a:89:c0:2e:96:3e:5b:93:df:a8:c8:89:7a:
                    3c:e3:e1:dd:b4:9b:d5:b0:8f:89:f2:ff:4f:1e:c5:
                    3d:01:74:39:b9:a1:59:ce:d6:5a:fb:f1:52:a3:98:
                    11:ba:39:00:95:c0:5e:0f:f5:7f:2a:11:47:a7:4a:
                    92:50:c5:66:4e:79:6a:a9:86:53:19:ed:4b:04:e3:
                    be:2e:5d:be:5b:c2:e9:1e:2d:a4:25:22:ff:31:bf:
                    50:74:b0:e6:43:30:02:ba:53:35:0c:04:db:0b:27:
                    37:b1:d2:49:6b:de:9e:0b:65:39:33:68:65:99:d9:
                    fd:1a:85:5c:4d:19:7f:15:ba:2c:b6:14:6e:cb:3e:
                    ad:36:e4:8b:a2:89:c6:cd:2e:97:4c:f1:5b:7b:19:
                    cd:47:1d:8f:3e:9e:14:5b:db:6e:af:54:d7:ab:56:
                    26:d4:26:2c:fa:f6:fe:65:f4:34:e9:de:bd:a1:f1:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:03:B6:9A:4B:E1:50:A2:84:79:6A:2C:4D:D9:4B:4D:13:BD:62
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:5f:13:fd:4e:1d:0c:39:cf:b7:e0:94:92:09:e8:40:d8:
         bd:54:bd:2f:83:44:cf:13:14:b0:89:6c:b2:3a:53:25:95:08:
         05:fd:9d:17:2b:37:ca:b4:b1:6b:88:44:59:b9:fe:3f:f8:47:
         46:b4:47:ba:5d:90:53:64:08:7a:e4:c0:93:85:dd:97:b2:4f:
         5a:12:e0:64:d9:e7:20:88:51:5e:44:c4:c9:d6:ee:69:d6:c8:
         28:f5:5c:99:6e:4d:5a:15:e8:94:cf:3a:df:70:23:38:69:08:
         49:0a:57:cd:88:59:61:b9:20:70:fe:95:b0:9d:49:a5:00:8b:
         55:72:0a:94:02:6a:b9:78:cb:68:e4:60:66:30:d5:83:ec:97:
         57:b7:1d:f7:2c:45:8a:23:94:c4:d3:de:84:cf:73:6b:dd:62:
         78:42:a4:aa:b4:22:34:fd:c3:88:26:8e:75:b2:31:1f:96:91:
         5d:5c:e0:d1:fd:a5:d8:24:0a:26:ed:d9:de:e7:bb:60:9d:5e:
         c6:ea:be:56:d5:de:88:dd:03:81:bc:5a:b4:aa:77:0c:0a:fa:
         9d:6a:ce:94:d3:73:64:b4:e8:1c:28:8c:61:49:09:8f:4b:01:
         68:78:94:39:06:fd:12:6d:2f:ac:db:bb:2c:15:48:92:e1:bf:
         2c:f0:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:35 2026 by rpki-client