This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          4wquTy/HaLe1gSblVg2nKM9JIIvyrJHtlm5LXwI/5mo=
Subject key identifier:   A1:8C:91:6F:9A:64:CC:5B:B7:F8:6F:36:60:6A:28:11:D8:C2:DE:37
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       0321
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          0320
Signing time:             Sun 25 Jan 2026 03:56:33 +0000
Manifest this update:     Sun 25 Jan 2026 03:56:33 +0000
Manifest next update:     Tue 27 Jan 2026 03:56:33 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: uygx1sVxNfS4s9oH1ezdIyrszwEOgajqYq+ZYYujIVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Jan 25 03:56:33 2026 GMT
            Not After : Jan 27 03:56:33 2026 GMT
        Subject: CN=69759471-7ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:9f:02:89:00:40:85:3c:57:9d:97:9d:01:
                    0b:dc:b6:8f:da:89:0a:4d:87:b8:12:18:7b:dd:28:
                    e5:c5:a4:09:d5:81:29:30:b6:92:7f:85:50:ec:f1:
                    ed:e3:4f:d4:73:78:cd:a5:13:52:df:ef:f7:b1:30:
                    8f:97:bf:b7:e5:de:d8:5d:21:53:39:fe:66:ee:8e:
                    eb:31:40:53:54:19:dc:87:a5:fd:6d:4c:a6:92:77:
                    3b:15:a4:9a:60:6c:89:3a:5b:99:4f:2b:b7:2d:cb:
                    1f:89:08:69:d1:31:62:c7:0c:85:88:a1:3b:c9:2b:
                    04:6b:8c:ea:50:db:75:ab:9f:2a:68:09:3f:0d:a1:
                    d4:84:bf:11:0c:cd:06:aa:96:74:f3:c2:ac:83:71:
                    89:28:c1:9f:c1:b4:1f:1f:8b:00:9e:a0:a6:eb:d6:
                    32:d5:25:d5:bd:59:87:e2:59:6e:28:5c:32:93:c6:
                    53:73:0e:1b:e7:f5:83:e0:55:06:97:b0:66:cd:8f:
                    59:b9:70:6b:53:6e:7f:2c:08:fd:5c:d1:82:9a:4d:
                    de:eb:59:03:22:1e:89:c8:e1:32:17:49:01:8e:2c:
                    26:f5:27:76:94:c9:0f:0d:df:8a:6f:ee:a0:59:34:
                    30:46:e6:ef:52:b6:e8:ac:4c:0c:a5:cb:89:58:7b:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8C:91:6F:9A:64:CC:5B:B7:F8:6F:36:60:6A:28:11:D8:C2:DE:37
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:f9:ef:71:af:4c:9d:bf:17:c8:39:21:f3:2c:8b:ac:70:
         2f:f4:c2:a4:ef:72:e7:3c:38:bb:b0:1e:72:f7:77:25:31:91:
         89:08:04:d4:aa:ce:7b:09:15:0a:b9:fe:a5:c8:df:1c:d9:6b:
         36:25:b7:e7:0f:90:d5:1d:a0:ee:0b:77:7d:8d:3e:7d:fd:8e:
         4a:36:10:90:c5:fc:8c:e7:64:08:45:3c:ff:78:df:76:29:e7:
         91:dd:a7:1e:0d:2f:1b:40:a3:45:0f:84:be:e1:2c:15:4a:4c:
         a9:09:96:90:64:e6:37:96:79:57:88:69:21:ac:ca:bb:03:78:
         a6:d7:81:ab:22:cc:d1:6f:94:f2:4a:0e:da:51:81:75:8e:b2:
         67:23:00:f6:48:df:96:c1:fd:c5:05:cb:ce:44:d4:f4:7b:d1:
         ed:f6:6e:40:68:bd:97:ae:a0:33:62:bf:9a:52:98:06:36:0e:
         c2:a0:06:ea:a4:9d:9a:62:14:a3:e1:d3:5c:59:bb:dd:e9:8d:
         da:1f:8f:27:3f:1f:29:64:01:4c:85:1e:0d:d4:54:df:04:cb:
         f7:6b:a7:d2:0d:60:92:66:ad:f3:1c:98:36:09:5a:0d:b3:ab:
         f7:9e:c2:57:da:84:f3:a6:d0:31:f3:da:16:f0:a4:99:d8:a6:
         a8:5b:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:49 2026 by rpki-client