This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File:                     nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier:          Ur7lMM3/IbxMxBzFQpNLa+2FhejXvQGSmYXlWbeqg1s=
Subject key identifier:   68:4A:E6:5F:A2:82:96:B9:11:63:93:4D:53:8C:25:F0:77:E8:2C:2B
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer:       /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number:          0317
Signing time:             Sun 25 Jan 2026 03:57:35 +0000
Manifest this update:     Sun 25 Jan 2026 03:57:34 +0000
Manifest next update:     Tue 27 Jan 2026 03:57:34 +0000
Files and hashes:         1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: EIIQc+KZRkx4qDcd5ffssAzL7snPoznP5IWKSp41Zdo=)
                          2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4CC8AF, serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
        Validity
            Not Before: Jan 25 03:57:34 2026 GMT
            Not After : Jan 27 03:57:34 2026 GMT
        Subject: CN=697594af-c68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:e7:34:2e:a9:cf:2a:40:20:0b:51:01:6f:
                    ad:15:dc:1a:6c:03:72:48:12:63:9d:5a:36:c1:01:
                    8a:ba:c0:7a:ce:f2:28:37:d9:ab:79:2a:f7:8a:87:
                    5d:f6:f5:5f:9f:ca:45:12:3e:f4:63:94:8a:48:aa:
                    24:98:f6:f8:01:45:b4:6b:2a:8f:b6:f5:4b:d9:ec:
                    d1:39:c7:1e:8f:4f:e0:bd:84:52:e8:b6:f7:c3:6e:
                    1f:9d:23:eb:35:3c:48:32:7b:15:9f:60:26:02:73:
                    30:17:05:f6:fc:3d:1e:dc:ec:7b:48:a4:d8:62:93:
                    2c:36:46:ce:74:56:ba:c5:01:cc:76:c2:51:c4:d1:
                    b6:1e:1c:34:20:ed:ee:e0:01:e2:d3:c4:6b:cd:d8:
                    31:90:40:b1:b4:de:b6:0f:03:50:d3:30:07:28:16:
                    72:b2:7f:7a:20:3d:0c:a6:85:26:20:7a:34:48:19:
                    a2:00:c0:d6:d6:82:32:6f:b3:86:d7:ed:35:f7:b2:
                    09:d5:8f:57:47:c0:5a:7c:0d:8e:22:ef:2d:ec:15:
                    b5:62:3e:e5:e9:79:87:35:e8:e6:6c:21:42:fc:07:
                    f5:44:16:94:36:9e:00:73:62:4c:f7:ec:17:44:b5:
                    80:e4:9a:ff:68:36:6c:d4:f9:95:01:5e:8e:37:28:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4A:E6:5F:A2:82:96:B9:11:63:93:4D:53:8C:25:F0:77:E8:2C:2B
            X509v3 Authority Key Identifier:
                keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:91:7b:14:25:74:b4:e0:29:4f:06:4e:5e:5e:08:ad:05:19:
         3b:2a:80:1e:ee:90:b3:a6:18:e0:b1:7a:0d:08:0d:62:bc:58:
         97:05:e9:26:07:85:65:5d:f7:c4:65:5f:3c:a4:ee:bc:38:10:
         1d:c4:9b:87:e7:4e:19:2c:cd:09:4d:f9:28:f2:c0:02:87:47:
         03:91:5d:96:07:6d:00:9f:cc:21:3e:68:1a:95:12:dc:cc:18:
         4b:c3:86:86:f1:4a:2f:a3:4e:5b:7f:01:b1:ed:9f:68:9f:d1:
         97:11:97:df:61:9d:e9:3b:fa:0b:da:ab:6e:51:fe:a3:78:28:
         f3:1e:7d:a2:89:33:5d:c7:8a:c7:f0:0d:fd:b6:a7:6b:a1:05:
         90:ff:bc:cf:3e:05:b7:72:55:d0:bf:e3:46:0a:96:1a:4a:43:
         e1:94:9a:0e:5a:77:25:04:68:23:86:e7:d8:ca:e3:88:d5:4f:
         d2:85:06:65:ae:aa:58:8e:7d:9e:00:45:27:f4:09:ca:64:c1:
         b3:9d:52:9f:5e:94:e6:dc:53:3f:0f:08:d8:16:d8:0c:a7:d7:
         56:61:a0:6e:4e:d9:e3:6c:fa:02:ac:38:05:ac:6f:3f:3e:e7:
         c7:e6:d0:de:99:71:6c:a3:a6:c4:5e:54:4a:ba:49:3b:11:25:
         3c:28:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:51 2026 by rpki-client