This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          HIgOtuEpKZ1+M6go9HvPBbg5wX2G+9OgSo7wJ1iZeXc=
Subject key identifier:   D7:5F:8B:B0:88:66:90:00:26:5E:21:87:3C:4A:FB:26:50:92:A8:21
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       0482
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          047F
Signing time:             Sat 24 Jan 2026 03:09:28 +0000
Manifest this update:     Sat 24 Jan 2026 03:09:27 +0000
Manifest next update:     Mon 26 Jan 2026 03:09:27 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: yeczpYfs6NMhOvudTBVzkh7C+qwQ4AH7d/Ng2QLTUn8=)
                          2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
                          3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 03:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Jan 24 03:09:27 2026 GMT
            Not After : Jan 26 03:09:27 2026 GMT
        Subject: CN=697437e7-91c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:4a:8d:f8:e5:83:e5:76:48:76:6c:0f:5f:
                    7e:1e:1b:88:69:88:98:b5:f9:c0:87:db:34:3a:f6:
                    55:8f:44:73:ae:6a:d8:e9:25:a0:ae:fc:b6:84:17:
                    2c:29:07:67:9e:94:6a:88:7c:35:01:a1:d1:9a:67:
                    53:d8:c8:3f:5a:59:d0:89:8d:27:cc:ab:19:c9:a2:
                    ba:5c:f7:f9:75:8a:94:96:34:6b:89:7a:70:c9:00:
                    aa:c8:d2:4e:02:99:7f:fa:d7:c8:d8:b1:a2:f0:96:
                    b3:8b:ff:6f:2f:78:31:46:86:2e:6f:e7:9d:74:7a:
                    70:01:d0:07:96:2e:fb:d6:35:09:4e:ad:ff:58:a1:
                    c6:2b:23:85:51:1f:e7:ab:10:e1:f0:05:29:ec:c2:
                    1a:41:f2:35:b8:f4:62:14:7e:7c:8c:98:b4:35:fc:
                    71:75:a7:32:29:f2:a5:4f:50:29:42:0d:52:03:26:
                    66:d1:ea:13:b3:cb:b1:4a:84:63:ea:7b:53:f9:36:
                    fc:0f:1e:3b:e0:25:79:a5:27:85:c8:04:4f:c4:da:
                    1e:c7:57:e4:99:f8:42:8c:2a:29:32:a8:71:04:12:
                    ab:4f:28:83:fa:ea:03:a0:c7:93:f9:7e:31:20:46:
                    9d:a5:ed:96:de:a0:12:77:e4:0d:9b:7b:2d:94:60:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:8B:B0:88:66:90:00:26:5E:21:87:3C:4A:FB:26:50:92:A8:21
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:35:8b:64:c9:08:74:79:55:60:47:68:4b:f2:f6:6a:00:03:
         36:4a:93:d9:40:d7:0c:66:85:3a:89:2e:fd:af:ec:80:ff:88:
         37:09:4a:19:40:0f:67:d1:e4:93:6a:f7:3a:b5:c9:cd:70:75:
         36:5e:37:6a:c1:35:90:9d:0f:ca:41:5e:36:2a:d2:e8:f2:51:
         94:c5:c8:02:8f:fe:ad:84:6e:7b:ae:21:62:9a:d9:29:f7:4d:
         a7:bf:dc:b2:6b:94:2f:77:70:b6:12:1e:9e:15:57:96:46:38:
         36:1f:8c:31:f9:6f:2b:d5:5d:2b:a3:35:41:f9:3d:ec:84:01:
         39:27:af:59:88:6f:73:cb:52:0b:96:98:9a:09:d3:00:38:f8:
         e2:c5:c4:a2:c6:e9:32:ac:2a:dd:81:cb:ee:a6:ce:5d:7f:c5:
         c3:d7:c5:7f:b1:7b:23:e6:3a:f7:38:9f:00:e0:4f:25:00:8a:
         b1:fe:da:30:87:61:fe:86:fb:45:6f:e8:14:d7:f4:be:47:e8:
         cf:d8:1f:99:2c:23:44:6e:5d:37:8a:2f:1b:f2:35:ac:57:bd:
         6b:7c:53:da:93:45:54:a9:7b:36:28:85:f6:1f:62:a5:40:42:
         89:4b:ca:1b:89:59:a9:e2:50:88:3c:89:15:27:e9:6e:2d:8e:
         a7:c1:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:12 2026 by rpki-client