This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File:                     zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier:          Hlfu0pRWCPhkGPZYjWX3TFM9R7zqKuXrJWb7IysuMWs=
Subject key identifier:   12:1F:50:C7:92:E2:98:AF:38:30:D6:21:B1:E6:F9:6C:6C:E2:EC:87
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer:       /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial:       0582
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number:          0581
Signing time:             Sun 25 Jan 2026 02:43:02 +0000
Manifest this update:     Sun 25 Jan 2026 02:43:01 +0000
Manifest next update:     Tue 27 Jan 2026 02:43:01 +0000
Files and hashes:         1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: cJByzf+geyS4zA3husAP0UpQvyoRY4RD+g/sK7Gjyn8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D70D9AF, serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
        Validity
            Not Before: Jan 25 02:43:01 2026 GMT
            Not After : Jan 27 02:43:01 2026 GMT
        Subject: CN=69758336-d8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:eb:f9:71:99:0d:98:59:3e:d6:21:a0:58:
                    a0:b2:f0:88:a0:80:ed:f9:a8:d6:03:8a:75:4b:e7:
                    eb:75:8a:68:fa:7a:67:2b:fd:c8:55:73:31:a0:5c:
                    ba:f1:4f:40:12:2b:e6:5d:2d:41:78:93:26:48:d0:
                    fa:c1:1e:13:fb:f1:66:3c:ba:7d:61:fc:45:6d:c4:
                    c1:60:83:0b:9c:53:0f:f7:f2:1d:a2:3d:48:81:29:
                    a2:c3:33:dd:b3:28:86:74:c4:fd:18:29:e6:f9:e5:
                    53:34:23:98:49:ed:63:4f:17:53:e1:23:e5:78:e6:
                    c3:45:8b:d7:03:ea:2c:23:8a:3f:47:57:83:07:99:
                    d0:fd:3f:3b:20:54:8f:12:ac:7b:dc:97:03:d8:6e:
                    d1:7b:25:f4:fe:fc:27:7c:4b:33:6a:65:d4:eb:aa:
                    e5:bd:22:80:2d:74:66:27:44:66:b4:ea:7f:bd:31:
                    38:38:aa:5e:bd:1c:12:a8:ac:7b:45:39:16:ba:81:
                    c6:a2:86:85:6d:de:0f:c7:52:7f:fc:ff:c4:f4:78:
                    e1:0b:bf:bc:bb:01:d4:5d:e4:06:3e:5f:75:e2:8c:
                    0a:f7:9c:85:6e:45:a3:f0:2b:f9:d1:91:96:aa:a1:
                    14:61:58:33:45:19:02:d8:ee:d8:02:ab:7f:2b:cd:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:50:C7:92:E2:98:AF:38:30:D6:21:B1:E6:F9:6C:6C:E2:EC:87
            X509v3 Authority Key Identifier:
                keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ca:68:15:9d:05:5e:d1:e6:5e:f7:30:81:31:d1:0f:76:95:
         f9:c9:83:b7:2d:75:20:c4:8b:cc:46:a6:2a:1b:2a:ba:c6:cf:
         6f:56:2c:aa:4b:00:b6:00:5e:01:53:05:e7:a2:bc:ee:23:e8:
         e3:4e:7f:2c:ad:93:24:1a:52:8c:01:dd:e5:43:b8:ec:11:3b:
         9e:64:ea:0a:7d:26:fa:e3:f5:5a:54:10:a6:e0:32:23:3e:2b:
         cc:8d:41:46:41:e7:62:de:e1:e0:22:41:6d:ce:cc:44:0d:dc:
         f2:2e:2c:54:d6:64:cb:79:26:17:f1:9e:e4:e8:73:08:79:6a:
         40:39:8f:97:a4:b9:64:96:78:31:23:d3:61:f4:a5:55:1b:ab:
         e9:80:c8:8c:7c:c1:0e:bb:23:47:58:ca:1d:78:fc:6d:30:de:
         96:01:0b:94:b3:b4:58:e8:2a:78:6d:65:ba:51:07:49:48:13:
         09:02:87:06:a9:a6:52:16:4f:a2:ca:a5:5b:97:1d:2f:96:cd:
         9b:25:48:b4:fb:be:0f:32:74:d4:ff:85:42:6c:16:69:f2:81:
         0f:4a:72:a5:a0:ec:65:0a:f0:c5:1a:c1:43:b9:31:d9:10:f0:
         52:e8:bd:62:9f:75:c7:50:84:b5:7a:2a:fd:7d:d0:df:fd:43:
         b8:ad:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:29 2026 by rpki-client