This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File:                     B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier:          4R9n9tctT21dtSm7DfdXwJTcruJZvs6B1AjUVxhC5WE=
Subject key identifier:   86:AE:8A:CE:51:E5:72:9C:50:58:D6:DE:15:70:23:BB:EB:08:FA:E3
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer:       /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial:       013A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number:          0139
Signing time:             Sun 25 Jan 2026 04:54:36 +0000
Manifest this update:     Sun 25 Jan 2026 04:54:35 +0000
Manifest next update:     Tue 27 Jan 2026 04:54:35 +0000
Files and hashes:         1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: SAvofeV8OudnRxnhGMQdIwehxBbAKNWJSRBwCbnk2+4=)
                          2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
        Validity
            Not Before: Jan 25 04:54:35 2026 GMT
            Not After : Jan 27 04:54:35 2026 GMT
        Subject: CN=6975a20b-1451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:7e:81:1c:64:6d:82:3f:14:6f:e4:ae:eb:
                    9f:d1:90:2c:7a:e6:47:74:56:dd:fa:47:67:3b:1b:
                    61:6d:b7:9b:ff:90:f5:be:58:bc:30:32:61:7d:8f:
                    fa:da:58:5b:2d:81:6b:58:9a:42:c3:6f:b5:bc:9a:
                    e2:03:ca:b5:03:f6:6c:66:f9:5f:01:7d:b4:9d:c6:
                    79:6d:89:92:e6:ec:4a:46:d8:eb:a3:46:4b:c7:26:
                    4a:1f:69:1f:64:54:7f:e6:41:06:3e:93:79:70:4f:
                    44:13:5d:e2:c5:64:d5:ba:90:66:8f:43:db:a4:2a:
                    54:9d:69:31:0a:34:35:08:88:eb:dd:29:2b:14:72:
                    75:8c:75:f3:0f:88:57:8a:51:25:2f:bb:61:3b:25:
                    42:d3:2b:8d:77:6c:f5:92:de:3b:7b:92:92:75:84:
                    91:79:84:f7:27:77:81:c6:46:65:54:83:39:dc:d1:
                    36:0e:9e:df:03:28:6f:00:af:98:8e:2c:5d:31:5c:
                    94:8a:fb:e3:52:7d:e8:cc:da:03:f5:4c:25:68:e5:
                    22:79:be:77:d9:1f:ea:41:6e:ab:fa:2a:64:29:b8:
                    50:fe:d4:1c:31:b6:1b:d4:9c:e4:14:13:b4:6f:7b:
                    7f:4e:17:39:83:05:81:48:a4:86:c0:55:4c:ef:b6:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AE:8A:CE:51:E5:72:9C:50:58:D6:DE:15:70:23:BB:EB:08:FA:E3
            X509v3 Authority Key Identifier:
                keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:55:2d:0a:b1:2f:fc:14:b4:be:6b:dd:cc:69:8a:62:a2:
         dd:02:a2:b1:17:42:67:d1:45:98:dc:f1:c0:3c:9c:c2:c5:e9:
         f7:5d:c9:d0:b8:ea:3a:ed:2b:72:80:9f:1f:95:40:79:79:b2:
         ea:c2:58:54:5b:25:ae:5b:a4:bd:cc:68:35:c3:9f:84:4c:96:
         da:3e:4c:cb:a2:8b:a8:e8:f0:88:be:6f:90:50:11:92:df:a0:
         73:f0:1a:61:82:ba:e9:36:99:dc:73:38:f6:7a:9c:a5:9c:d9:
         02:3e:e3:86:71:74:43:80:12:4e:88:79:2d:76:9a:a0:8f:46:
         83:41:dd:36:18:92:9b:ef:9f:ee:ec:b1:3c:48:bd:f5:ec:e6:
         a2:cc:65:0d:40:3d:2b:62:51:60:55:b7:66:7f:1b:73:37:da:
         c6:31:b5:55:20:27:d3:d0:81:ff:ef:dd:48:4f:9e:33:ef:1c:
         61:99:b8:cb:53:ab:ad:2a:a5:d0:8f:01:91:12:74:6b:16:43:
         fb:01:d4:a2:59:32:13:b3:65:f0:c1:4b:75:79:96:b9:6a:21:
         ff:67:71:56:37:ea:0b:9e:33:2f:8d:50:59:58:22:9f:1d:ac:
         22:c0:61:2d:f3:c7:4b:d7:81:1b:f0:0b:fa:e8:0c:94:94:03:
         8b:f2:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:01 2026 by rpki-client