This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File:                     XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier:          WZ3qGaTKPPIdesYRyVWTX7jUWg/ZBUWMY5YI8yDOIH0=
Subject key identifier:   12:1B:A9:C2:57:C2:D5:74:B8:ED:F2:B2:D7:0B:35:BB:A2:B4:1E:76
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer:       /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial:       050B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number:          0509
Signing time:             Sun 25 Jan 2026 02:56:18 +0000
Manifest this update:     Sun 25 Jan 2026 02:56:17 +0000
Manifest next update:     Tue 27 Jan 2026 02:56:17 +0000
Files and hashes:         1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: AvQtzHdd2eE1+BbtEygKY8eWxYEij5l48ivSTT86grI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
        Validity
            Not Before: Jan 25 02:56:17 2026 GMT
            Not After : Jan 27 02:56:17 2026 GMT
        Subject: CN=69758652-f7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:04:8a:87:68:c8:03:c0:e2:c4:01:c5:d3:
                    59:0c:67:87:df:ff:88:d7:34:6f:a9:f8:1b:35:ce:
                    69:4d:94:cf:a4:d0:98:5b:3e:2d:7b:71:eb:98:11:
                    bc:a2:47:25:21:b5:ac:ac:a6:0a:8b:80:40:53:d8:
                    9f:81:3d:2f:a7:cc:3a:34:83:64:64:d3:9c:03:65:
                    ca:cf:32:16:fa:5e:dd:d4:4a:73:da:95:2c:a7:58:
                    ca:60:25:52:70:33:f0:fc:0f:f7:64:0f:f7:b7:b4:
                    85:9d:5b:1b:62:66:04:ab:a5:00:f3:2c:38:da:c8:
                    7b:a4:30:68:3a:cd:97:f0:17:76:6e:22:7b:0f:a3:
                    6e:99:c7:26:ca:ec:2c:2c:27:a4:07:9a:8b:74:45:
                    c2:24:cb:c9:ba:45:64:ad:ce:19:40:46:c7:54:f7:
                    7d:9e:25:c4:c8:64:7e:64:61:34:9b:32:4c:bd:bc:
                    f9:50:ce:7f:aa:d0:76:8b:60:84:65:4c:26:ab:f7:
                    6c:37:93:66:7d:86:d8:9b:30:73:d0:0a:c4:df:05:
                    2c:d9:e9:d6:7f:2c:0e:07:61:87:e2:9d:a8:95:2e:
                    ae:0f:69:12:6b:cd:26:a0:25:33:32:31:de:65:16:
                    4e:a9:53:71:cc:8a:a5:c8:e3:99:6f:9b:e1:16:11:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:A9:C2:57:C2:D5:74:B8:ED:F2:B2:D7:0B:35:BB:A2:B4:1E:76
            X509v3 Authority Key Identifier:
                keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:fe:2f:f3:0d:d1:ac:3e:f8:b0:85:6e:ce:c6:3d:03:df:
         a1:d0:02:1f:61:44:6b:c6:fb:9c:fd:3c:39:5e:c2:7a:37:78:
         51:f0:9b:05:0e:02:6f:22:8a:09:b2:c4:b6:5d:88:00:04:cb:
         2c:32:1f:0a:64:34:95:46:f2:e6:49:55:4f:0d:2e:33:4d:8a:
         04:47:11:3b:b7:0f:08:cc:bb:0c:24:a8:34:be:d8:7e:b9:2b:
         1c:00:ef:aa:cf:66:43:6c:33:15:a9:67:26:ca:a4:b5:54:f6:
         57:fe:f9:12:52:75:d3:8a:d6:4c:ca:16:ff:41:05:74:98:6e:
         51:c7:85:9b:e9:a3:39:cc:64:23:40:40:56:c5:b0:f2:94:f4:
         ab:77:75:79:87:b9:b8:1b:52:c6:9a:af:ec:57:fe:bb:ff:18:
         c1:61:33:f8:82:47:7f:e6:dc:2d:67:d0:4f:a2:7f:d7:d0:16:
         89:b9:8c:41:de:36:e6:a3:72:cb:9e:26:1a:2f:1d:83:1f:9e:
         bc:ac:73:bf:07:1e:58:27:21:6f:cb:8f:f1:38:61:a3:d5:e6:
         f1:71:cb:77:a2:5e:96:36:c1:5d:32:61:0d:56:99:94:51:88:
         33:c7:8d:8c:95:f8:8c:5a:97:08:4d:8a:31:32:71:32:17:b9:
         dd:a8:f7:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBQswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODI2MTVBRjExMC8GA1UEBRMoNUQwRDYzNkY1MTU5NEU2MzY3RjlDQUIyRDE0MzhG
RDNBMUM1RERFRjAeFw0yNjAxMjUwMjU2MTdaFw0yNjAxMjcwMjU2MTdaMBgxFjAU
BgNVBAMTDTY5NzU4NjUyLWY3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7mwSKh2jIA8DixAHF01kMZ4ff/4jXNG+p+Bs1zmlNlM+k0JhbPi17ceuY
EbyiRyUhtayspgqLgEBT2J+BPS+nzDo0g2Rk05wDZcrPMhb6Xt3USnPalSynWMpg
JVJwM/D8D/dkD/e3tIWdWxtiZgSrpQDzLDjayHukMGg6zZfwF3ZuInsPo26ZxybK
7CwsJ6QHmot0RcIky8m6RWStzhlARsdU932eJcTIZH5kYTSbMky9vPlQzn+q0HaL
YIRlTCar92w3k2Z9htibMHPQCsTfBSzZ6dZ/LA4HYYfinaiVLq4PaRJrzSagJTMy
Md5lFk6pU3HMiqXI45lvm+EWEexlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEhup
wlfC1XS47fKy1ws1u6K0HnYwHwYDVR0jBBgwFoAUXQ1jb1FZTmNn+cqy0UOP06HF
3e8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyNjE1Lzc3NDYwOTAwMjQ5RTExRURBNDhGMDk4OEYxMjIyNDY4L1hRMWpi
MUZaVG1Obi1jcXkwVU9QMDZIRjNlOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hRMWpiMUZaVG1Obi1jcXkwVU9QMDZIRjNlOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI2MTUvNzc0NjA5MDAyNDlFMTFFREE0OEYwOTg4RjEy
MjI0NjgvWFExamIxRlpUbU5uLWNxeTBVT1AwNkhGM2U4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHoP4v8w3RrD74sIVuzsY9A9+h0AIf
YURrxvuc/Tw5XsJ6N3hR8JsFDgJvIooJssS2XYgABMssMh8KZDSVRvLmSVVPDS4z
TYoERxE7tw8IzLsMJKg0vth+uSscAO+qz2ZDbDMVqWcmyqS1VPZX/vkSUnXTitZM
yhb/QQV0mG5Rx4Wb6aM5zGQjQEBWxbDylPSrd3V5h7m4G1LGmq/sV/67/xjBYTP4
gkd/5twtZ9BPon/X0BaJuYxB3jbmo3LLniYaLx2DH568rHO/Bx5YJyFvy4/xOGGj
1ebxcct3ol6WNsFdMmENVpmUUYgzx42MlfiMWpcITYoxMnEyF7ndqPft
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:43 2026 by rpki-client