This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
File:                     4CGdWkzYWCxPN-LQ3dcGt369n2w.mft (raw, json)
Hash identifier:          hHSlKYSOJ2QMnfX+vHEX0zhNPBr+TLUeeYbD55C58C8=
Subject key identifier:   AB:B3:EF:5F:28:E1:CF:19:28:47:80:5A:09:18:B3:18:33:DA:D5:44
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Certificate issuer:       /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial:       05A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
Manifest number:          0594
Signing time:             Sun 25 Jan 2026 02:42:50 +0000
Manifest this update:     Sun 25 Jan 2026 02:42:49 +0000
Manifest next update:     Tue 27 Jan 2026 02:42:49 +0000
Files and hashes:         1: 4CGdWkzYWCxPN-LQ3dcGt369n2w.crl (hash: g5RAy7k5AZn1j9Lnufy3XoPgAnrKrQvJFnsZaj9LhAU=)
                          2: 43499CAEE06111EEAD369C57775412E6.roa (hash: BqZi3Jf+58/WulzjWYWd6LnvU4vDKMabeieGFixEMoQ=)
                          3: B3406C3EE06311EE9DC9645B775412E6.roa (hash: ogaYGhijbZfnfBJbAW8m4J3DjXL9JovFwrfT8ageG8c=)
                          4: 62AAD5B8C4AD11F088EE28D5DAE4EC9C.roa (hash: V/PGdom7dT1wyeknHKrUkkzFdZubko4PFPhY+dUZjI8=)
                          5: 930D3556C4AE11F088545DDBDAE4EC9C.roa (hash: pZvKmBeXmwbStC6508pXvq67gXEFBPlOqFduOBW2GH0=)
                          6: AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa (hash: 2tRGD2oLj/HLCtH3fXvt5xrNupgPKXIIViu9/t9+M/E=)
                          7: 107A839AD49C11EE8138FA6E775412E6.roa (hash: NbPQB72+8cMeXRD62I/wbwttaa2xbNKWZ7NyDUoCiQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
        Validity
            Not Before: Jan 25 02:42:49 2026 GMT
            Not After : Jan 27 02:42:49 2026 GMT
        Subject: CN=6975832a-31a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:c2:08:cc:9b:b6:57:83:a1:f4:7b:de:13:
                    c4:63:1c:6f:ee:7e:db:30:84:37:01:fd:ed:82:15:
                    22:72:23:d6:7b:88:a2:bb:d8:4e:f1:33:d2:4f:54:
                    7f:d0:e5:af:7c:66:18:f6:ee:9e:7a:b8:a5:04:a1:
                    ce:7f:ad:41:87:14:fb:39:eb:cc:58:8f:bb:63:b5:
                    91:0e:f7:01:6a:9e:1b:61:67:08:9a:c0:ef:94:21:
                    b1:b4:f0:50:c1:89:5c:a0:45:51:8c:a6:af:be:57:
                    2c:85:75:2d:85:b9:36:04:e6:c6:ad:fd:aa:e9:a7:
                    11:af:7d:73:2e:fe:5f:86:af:51:e7:1f:a9:1f:c7:
                    72:91:78:dd:dc:17:28:0f:4a:4e:d1:ac:82:74:be:
                    f4:72:86:25:df:01:e2:fb:e8:eb:41:b5:52:89:b5:
                    50:bb:37:23:1d:67:8b:5e:04:95:0b:b7:30:7b:ae:
                    ba:78:80:4c:01:16:0a:ec:a0:f3:e6:ce:04:60:ad:
                    fb:a2:95:9f:04:08:73:ef:34:93:52:81:54:1f:3b:
                    3b:52:c8:09:6d:5f:9d:76:35:89:91:2e:6e:86:d9:
                    e9:73:56:8d:17:e6:b8:bf:f4:b6:c4:99:4c:ee:8b:
                    57:a7:b8:d5:db:d1:b5:1a:80:b9:e2:42:81:e7:1d:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B3:EF:5F:28:E1:CF:19:28:47:80:5A:09:18:B3:18:33:DA:D5:44
            X509v3 Authority Key Identifier:
                keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:a9:1c:0e:49:12:65:41:cb:4d:ff:90:9d:d2:54:c5:b0:
         76:8b:31:e5:8d:71:19:99:cc:46:5c:5d:3c:2a:32:d5:e9:f6:
         e4:00:76:10:a8:b0:01:2a:06:5e:42:02:d1:d6:27:33:5f:4d:
         c7:6d:6c:31:87:c6:6d:5b:8d:b1:e3:d9:43:cf:e7:59:84:0d:
         17:d6:2a:47:78:58:61:2a:14:d7:48:34:49:62:13:63:79:4f:
         07:3d:cd:11:ce:fb:dc:b3:f0:4b:2a:64:63:96:4f:97:30:69:
         74:69:e9:81:8d:7a:db:33:4b:17:f2:b5:4f:e0:7d:da:a2:24:
         58:80:f0:54:1a:a4:1d:df:72:b0:6f:83:c7:a6:e8:d7:3c:e9:
         f9:ad:58:ae:05:a8:2e:8e:6c:54:c9:e0:a0:29:58:3b:ab:40:
         65:48:f1:1f:03:84:97:89:cc:e8:f5:48:30:85:96:7a:ef:33:
         0f:c7:b9:75:84:da:5e:f1:f8:59:31:cf:5b:68:36:9b:c7:8e:
         b7:ea:7b:7f:09:54:c7:c6:11:b0:17:84:b1:70:1a:10:ea:14:
         d3:bf:77:4b:88:91:7d:dc:bf:63:ca:02:f2:34:bb:bd:ba:44:
         c1:94:dc:b1:21:1b:59:dd:7b:fe:cc:0c:6d:99:7c:f9:e8:56:
         b6:28:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:32 2026 by rpki-client