This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
File:                     sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft (raw, json)
Hash identifier:          kBNJfViBQpFMXjEaZR1sOhYtf/ojOn7bQmURnNH8vPA=
Subject key identifier:   A5:73:36:63:15:C4:CE:2F:21:7C:8A:6F:2F:DB:BE:EA:80:7D:C5:E0
Authority key identifier: B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14
Certificate issuer:       /CN=F36BD97CAF/serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
Certificate serial:       0645
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
Manifest number:          0645
Signing time:             Sun 25 Jan 2026 02:30:02 +0000
Manifest this update:     Sun 25 Jan 2026 02:30:01 +0000
Manifest next update:     Tue 27 Jan 2026 02:30:01 +0000
Files and hashes:         1: sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl (hash: jxLWLC0sfHCuG9yKeJkm3IZJD07v0s905K3cZ5dqMqM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAF, serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
        Validity
            Not Before: Jan 25 02:30:01 2026 GMT
            Not After : Jan 27 02:30:01 2026 GMT
        Subject: CN=6975802a-0476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:cd:bb:8f:29:5e:c5:b3:64:a6:38:52:f1:
                    9e:f1:a7:2e:47:41:5f:01:e7:73:d0:88:4d:e1:82:
                    21:fc:f2:74:77:08:43:9a:87:c5:c9:59:79:b2:4b:
                    ea:0a:ba:4d:fd:22:74:16:27:24:10:31:57:c7:31:
                    2e:dc:09:c3:15:0d:1a:20:a4:35:65:86:5b:84:eb:
                    d4:6f:01:00:d1:d0:b5:6f:f2:78:ec:f5:0c:0e:34:
                    0e:70:94:2e:bc:bc:c7:1e:4c:2a:c5:49:59:04:d6:
                    92:94:ce:30:14:6a:50:fe:43:d1:7b:07:d7:bc:a1:
                    ce:93:fa:f8:17:6c:a7:31:dd:24:e9:0c:b6:5a:cb:
                    d0:42:49:b6:20:25:ed:04:5b:62:97:13:da:95:d8:
                    7a:48:1d:26:77:46:b6:b1:25:dc:b6:85:73:55:51:
                    21:af:1c:89:d7:4e:86:01:9d:06:82:35:c9:1c:7e:
                    5a:b9:1d:b1:f5:f2:62:ce:fc:e8:13:91:71:f9:b5:
                    ed:f6:cb:41:81:31:f6:46:ee:d9:78:7c:bd:7a:e3:
                    a2:dd:41:bb:df:60:3a:f8:70:c5:ec:5f:63:a0:db:
                    5d:6a:43:3b:f0:4e:ce:79:fa:34:c9:44:7e:56:3e:
                    bf:7b:3c:9c:96:cb:15:03:15:b0:f2:be:32:c8:d7:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:36:63:15:C4:CE:2F:21:7C:8A:6F:2F:DB:BE:EA:80:7D:C5:E0
            X509v3 Authority Key Identifier:
                keyid:B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:61:5b:3d:0a:af:d2:be:b0:77:46:55:ef:82:4c:6b:a2:72:
         23:04:06:37:29:ab:67:bb:46:7b:c9:8d:fa:1d:0d:21:91:68:
         3a:89:cf:3c:6b:a8:12:57:f8:0e:91:6a:68:43:59:04:3a:62:
         ab:69:c5:0e:44:fc:0a:f4:12:af:5e:da:cd:07:98:12:d9:bd:
         91:1d:73:a7:b1:99:ac:76:66:a4:1b:cf:ec:fa:b3:65:b6:96:
         ce:44:86:73:29:b3:a1:38:21:11:d9:fd:1f:58:ff:b6:52:a0:
         bb:09:aa:c1:0b:ec:e7:03:ed:d7:10:78:04:e1:c9:24:0b:e9:
         ee:f7:3b:50:20:95:c1:18:e3:03:27:e7:86:2d:66:62:76:26:
         40:d5:a4:4d:23:50:82:7c:a4:d7:d6:dc:c0:20:dd:a0:82:fa:
         13:ec:c8:44:cb:a3:ec:d0:19:5e:e7:36:67:9a:f2:74:09:75:
         20:90:fc:f0:a3:c5:0b:05:ab:e5:0b:2d:a3:d9:d0:03:8c:e9:
         e0:6f:b0:f0:d5:25:3b:52:84:bc:d8:93:eb:79:ba:be:7e:71:
         2e:d1:35:ea:7f:84:7c:56:1d:f5:d8:2a:d8:3b:83:4b:6b:e6:
         5e:ad:af:97:50:40:4f:e9:2d:67:05:d7:4c:01:fb:f9:84:3c:
         3d:76:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:04:42 2026 by rpki-client