This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          Ev0NX3TbtXX5GOKKz+LwdLolTmshUvZycht2M7Nu6BE=
Subject key identifier:   79:F2:FB:82:2C:22:8C:24:D3:57:2F:CD:7A:2F:E5:2C:7A:24:DC:B4
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0DA2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0DA1
Signing time:             Sun 25 Jan 2026 01:05:07 +0000
Manifest this update:     Sun 25 Jan 2026 01:05:07 +0000
Manifest next update:     Tue 27 Jan 2026 01:05:07 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: wiWqe2CwAsXSL7kkn24FonIRGr6CG+Z+8Uaqddh0SA8=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Jan 25 01:05:07 2026 GMT
            Not After : Jan 27 01:05:07 2026 GMT
        Subject: CN=69756c43-8963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3a:6b:e7:49:c7:f9:db:f7:8c:f7:3a:32:33:
                    a7:4a:36:10:f4:77:77:17:b5:49:62:6d:c8:cf:e5:
                    e7:7d:e0:55:1d:6f:c9:9b:e2:bc:56:8d:a3:99:d8:
                    05:0a:b5:93:d9:db:56:e1:c9:57:f1:82:34:f6:41:
                    04:e8:c8:45:25:16:8a:87:a2:4d:81:55:4b:73:8e:
                    28:55:c3:99:ac:66:96:70:00:bf:40:f4:70:4e:65:
                    ee:3d:fe:9d:2b:57:ce:f6:2a:f6:af:97:7b:b5:8e:
                    ee:4e:c3:99:82:b6:86:79:36:d5:32:ca:31:a8:c3:
                    7a:da:b9:3c:ae:44:81:91:1a:67:d0:ce:a0:29:3a:
                    eb:ea:92:b7:c8:8f:df:37:28:22:ae:3e:f9:a0:31:
                    1f:9e:13:a1:f0:a7:13:b3:a9:4b:8e:72:7e:c7:96:
                    c5:58:4d:5a:e8:5f:4d:6b:96:cc:67:93:e1:7c:74:
                    6b:28:0f:1e:0f:e7:83:5d:19:1f:f2:9f:d6:56:b8:
                    0c:e0:da:96:d6:cb:6b:3b:f2:8a:d4:92:9d:0c:01:
                    ef:90:ba:c0:24:c1:42:cd:c2:d9:f9:6c:be:49:4b:
                    80:4a:b2:46:ba:c7:a9:a6:b7:6a:f4:fc:67:47:9d:
                    ba:65:eb:54:06:51:ec:17:ae:f0:68:9d:34:35:90:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F2:FB:82:2C:22:8C:24:D3:57:2F:CD:7A:2F:E5:2C:7A:24:DC:B4
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:31:a5:89:39:2f:f5:5d:61:3a:db:ed:6d:b8:1c:e4:96:e4:
         4d:c8:c1:80:a7:b2:af:60:2f:5b:16:c2:1b:3f:c5:1d:8d:ea:
         f0:ad:97:05:64:17:d5:8f:45:d2:32:fc:91:6b:54:71:48:27:
         2c:2e:e9:3d:32:ea:f4:d3:ba:61:b2:e8:cb:7d:cf:43:05:2c:
         d0:34:7e:4c:91:aa:ff:32:b6:a0:94:7b:49:9f:db:b9:75:51:
         b6:6d:f4:b6:2e:0c:36:54:d5:6d:9c:8d:e7:12:d0:7c:53:54:
         46:e6:8d:87:43:e8:c8:c6:52:92:b9:a9:79:38:ed:60:09:5d:
         c6:0f:76:ac:9f:75:eb:c7:33:14:c0:2c:a9:1b:60:53:bb:ac:
         5f:4d:1d:8f:51:76:cf:b4:78:9b:00:0d:02:30:98:cd:c4:6a:
         0b:6c:c9:a6:ec:eb:74:d1:04:08:ff:32:fc:0b:2e:72:b0:29:
         39:12:58:cb:e4:db:ee:91:33:ca:fa:c3:68:6e:5b:67:13:5d:
         8d:6a:cb:d9:85:ee:27:10:76:a2:80:ac:ca:bd:84:f9:52:59:
         98:ef:15:1d:d8:f6:b7:62:86:71:04:04:2d:75:b3:db:a0:5d:
         88:4b:96:9a:00:5d:7e:b2:14:9f:e1:d8:d2:fb:1f:f4:97:56:
         c8:5a:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:31 2026 by rpki-client