This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File:                     4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier:          36VdOu/6ILqoMdXtuZWfK8HCxeKUNiIwp2i66brP00I=
Subject key identifier:   2A:EF:26:5A:CE:95:73:B1:7D:0C:56:4E:60:2E:73:69:8A:1B:65:7A
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer:       /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial:       03D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number:          03D5
Signing time:             Sun 25 Jan 2026 03:34:29 +0000
Manifest this update:     Sun 25 Jan 2026 03:34:28 +0000
Manifest next update:     Tue 27 Jan 2026 03:34:28 +0000
Files and hashes:         1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: hz/aunqQGWwyvywOObL0+gtkuUw2UFnriFPT3ay/Jfg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
        Validity
            Not Before: Jan 25 03:34:28 2026 GMT
            Not After : Jan 27 03:34:28 2026 GMT
        Subject: CN=69758f45-a3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:db:94:3b:0f:46:0b:d2:b6:74:75:5e:98:
                    96:a6:75:7c:8f:a6:bf:d1:7f:04:93:ed:46:c0:19:
                    5f:7c:7b:4f:05:5c:62:05:f5:92:77:3f:58:1e:89:
                    fa:1e:c8:ca:08:81:14:ce:a2:c3:45:de:51:78:5b:
                    a4:22:de:a8:e8:07:a0:2a:58:86:be:c4:43:14:46:
                    f8:99:3a:dc:73:51:0e:c3:9f:8a:42:de:8d:c7:49:
                    17:ae:a6:50:d0:be:7d:4f:b4:09:16:23:f5:fe:fc:
                    02:ac:e8:09:eb:da:fd:f1:72:ac:e8:c1:59:55:cb:
                    86:df:a6:9a:96:b5:86:b9:42:1c:d6:cf:ad:4b:df:
                    24:c6:44:e3:53:13:9e:3e:f6:dc:e7:dd:bc:4a:34:
                    c7:b6:68:04:e4:90:d3:84:98:d4:f2:00:05:ec:08:
                    06:73:35:b7:ec:88:14:9f:56:01:c6:10:f5:d2:58:
                    44:b1:e0:11:f9:d9:07:69:84:17:27:93:62:1f:e5:
                    d9:b3:ce:3b:d9:33:a3:aa:32:56:01:83:1d:c9:b6:
                    7d:4d:10:a8:44:38:e4:de:fa:05:fd:86:b9:e1:df:
                    5e:a9:e5:2b:ca:cb:fd:9c:40:75:6d:72:66:ac:fa:
                    a5:bf:bd:fe:1b:8c:db:bf:d7:fb:e8:71:14:50:b3:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EF:26:5A:CE:95:73:B1:7D:0C:56:4E:60:2E:73:69:8A:1B:65:7A
            X509v3 Authority Key Identifier:
                keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:b7:a4:19:97:de:d2:e0:4d:dd:e4:b0:8e:ea:5f:b3:26:
         09:9a:74:45:db:38:ab:c5:9e:05:83:e1:0c:37:ba:e4:12:d6:
         3d:a5:c1:b2:db:36:8f:59:04:cb:75:3c:23:e1:00:94:70:6d:
         64:c5:4c:32:38:0e:dc:1a:d6:67:0d:c1:f6:c8:83:71:ad:35:
         71:da:b2:a1:1a:18:80:82:a9:7c:62:20:c3:00:3b:5b:39:ee:
         02:f9:b8:49:9e:ee:26:8f:c1:6b:82:a6:93:4f:98:2f:8c:da:
         ec:78:3e:d1:be:43:ee:63:6c:48:d0:07:ed:86:b3:d9:59:ec:
         c6:ea:69:b1:96:51:00:b7:ab:3e:e1:c9:f6:f0:74:8a:6e:26:
         fe:0a:d5:fe:46:5b:72:71:9a:0b:50:58:6d:ce:7a:14:f3:9f:
         4e:8c:e9:b2:c2:30:b6:b0:49:ab:aa:20:c4:cf:a8:cd:20:9a:
         cb:45:08:c8:1e:1d:5c:65:3e:72:0f:b4:30:1a:e3:f1:d8:12:
         78:b0:f2:f7:10:2a:b6:2a:a9:e8:8b:95:0f:2d:0e:49:f3:3f:
         0f:8c:30:98:ef:ac:ef:ed:06:d7:d7:41:77:02:b6:6c:2f:d2:
         a0:3f:c3:b2:a2:f1:bc:f7:fa:0f:28:30:be:14:34:8e:53:77:
         c5:75:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:35 2026 by rpki-client