This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          ZgXoPXNAIFzfgouOF/62bttrobvtCMjUI49UIRlrnpI=
Subject key identifier:   3F:84:5D:CD:E7:29:66:A1:AF:0A:DD:C9:1E:7B:36:98:EA:3D:CD:B5
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       01AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          01AB
Signing time:             Sat 24 Jan 2026 04:46:17 +0000
Manifest this update:     Sat 24 Jan 2026 04:46:16 +0000
Manifest next update:     Mon 26 Jan 2026 04:46:16 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: nj+o62dgS5Uth4X7BpY3htlkRrpxjctHpAErsf8zifw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 04:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: Jan 24 04:46:16 2026 GMT
            Not After : Jan 26 04:46:16 2026 GMT
        Subject: CN=69744e99-da7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:aa:9f:10:83:4d:c1:03:83:fe:e2:e8:2a:
                    7d:df:02:76:64:1a:c9:22:b2:f5:52:ca:8c:8a:94:
                    a2:0e:25:1f:2f:0c:e1:44:99:16:18:e2:cf:5e:82:
                    2a:11:3f:27:67:66:fd:5e:ff:ef:de:9e:8c:b2:3f:
                    74:22:ed:d8:7c:5d:8f:3d:af:38:fb:dc:1f:92:3d:
                    13:26:3a:eb:9a:c5:7d:38:7b:ea:32:3c:3e:e3:b9:
                    d5:ca:6e:75:e0:41:86:6a:a1:74:62:32:68:15:81:
                    e6:73:ea:75:e6:a1:84:a9:51:ec:26:86:6e:fd:d5:
                    cf:20:b6:d9:88:a7:80:e8:86:76:60:6e:ed:57:5d:
                    b1:37:c5:ff:5b:35:86:17:25:e7:76:18:93:24:6c:
                    88:dd:3e:c1:b6:07:52:cf:73:e7:7e:b5:68:c1:bf:
                    18:11:5a:27:02:e4:c2:ae:40:b1:43:88:b8:c3:05:
                    11:d5:9e:ca:dd:64:38:92:7f:df:e4:9c:26:10:40:
                    d3:a6:83:68:4a:8a:34:51:75:fd:44:fe:8a:3e:49:
                    72:af:00:49:29:34:08:4a:83:54:45:bc:74:9d:62:
                    a7:d7:ed:3f:12:63:19:72:ec:d7:95:8c:c5:98:d3:
                    8e:35:81:d3:e7:8f:3d:9f:31:92:79:c2:e8:1e:0f:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:84:5D:CD:E7:29:66:A1:AF:0A:DD:C9:1E:7B:36:98:EA:3D:CD:B5
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:8a:47:70:27:17:3b:c3:fa:81:3a:92:a5:b7:b4:dd:53:
         ce:7b:9c:8a:23:14:20:a7:93:1f:6f:9f:86:e6:d4:f6:3d:bb:
         eb:f7:79:fa:6b:a1:f7:4b:19:d0:d6:8c:c4:5f:13:f8:f5:8f:
         70:30:e9:97:c2:ff:56:54:46:d8:a1:02:8e:30:2e:62:5b:a2:
         66:38:c7:3d:22:25:c2:0a:38:fa:10:3b:f3:ec:bc:06:05:11:
         ce:37:3a:47:04:97:e6:b5:18:d8:bc:fa:5b:53:18:d2:97:f0:
         75:3f:51:1c:89:92:5a:bf:c8:6f:46:fe:1e:5b:5b:e0:17:4d:
         e8:ef:98:f2:0c:f1:97:ed:f5:65:e3:e3:67:c2:9f:e8:ee:2b:
         da:67:ed:17:27:32:f7:2f:18:6c:c1:25:6e:1b:4c:0f:c0:6f:
         ce:c0:eb:bb:b5:01:2d:e8:a4:61:99:b6:34:74:20:ee:5e:0e:
         31:46:fe:5d:99:22:6e:4d:84:2c:a1:48:04:52:04:1a:db:22:
         25:2d:fa:1e:36:9b:43:64:06:13:d1:37:9e:27:6a:84:0a:f2:
         2e:2e:a2:7d:8d:96:a0:af:f0:bc:7f:9c:c5:b4:2f:14:81:27:
         ea:a3:f6:ab:31:ae:8b:74:6a:1a:a5:18:52:5f:c1:f0:51:03:
         9b:80:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:45 2026 by rpki-client