This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File:                     b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier:          Yi1cUFB5CfSCuVY7Nbv01W2ELgK6EIx+j4Fet7F8jQA=
Subject key identifier:   CE:44:42:57:3C:40:81:AC:AB:F8:0A:68:67:D0:D8:CC:4C:B4:91:E9
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       0577
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number:          0574
Signing time:             Sun 25 Jan 2026 02:44:41 +0000
Manifest this update:     Sun 25 Jan 2026 02:44:40 +0000
Manifest next update:     Tue 27 Jan 2026 02:44:40 +0000
Files and hashes:         1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: L2hh5VyAegh3cixcIVqB1AkTQvtYROJJGXXYN6k+M6c=)
                          2: B1A16132D28A11EC8F270DC0F1222468.roa (hash: 4TQRBmeOxAbF3KLeP0SF+V9s9RzwKR9Ie0C7o3vk0Oo=)
                          3: E3D5D52AD28A11ECB4D0B0C0F1222468.roa (hash: MgA7cMYgIRFHAgD+dSaQaOo5eOVm+neEzUW6GLOT448=)
                          4: 784AE4BCD28A11EC81ED62BFF1222468.roa (hash: CkuoR2/+F6JKHq8BKZH5DTfRvZh+LqHD0UlmcfmPCMw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Jan 25 02:44:40 2026 GMT
            Not After : Jan 27 02:44:40 2026 GMT
        Subject: CN=69758399-6be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:d2:44:2b:b3:91:2a:a5:72:45:d9:fa:4c:
                    0f:7e:f1:2e:eb:68:4b:3c:ac:be:a5:4b:e4:70:d0:
                    ce:8c:a0:93:da:8f:ff:86:87:3c:06:aa:f3:1c:b1:
                    44:85:fd:ee:cf:f4:8b:7e:e3:0e:69:bb:0c:a1:28:
                    d7:55:6c:6e:8f:16:ea:8d:6c:9a:4a:d1:67:14:9d:
                    c5:48:44:9f:ea:e7:da:1f:7e:ca:6e:7f:34:46:31:
                    6b:3a:7b:5e:da:46:1c:72:f4:a7:57:4b:cc:e6:2b:
                    c1:a3:a7:61:cd:f5:f2:b8:b9:d8:72:1c:f1:bc:33:
                    fc:29:23:6f:77:95:70:51:5e:f8:90:28:d8:b5:ec:
                    5f:8b:de:0a:0c:bf:cd:8f:7a:09:a2:df:b2:e2:7f:
                    5d:b2:57:6c:f0:10:20:e9:d0:79:b2:f6:9f:0c:38:
                    c3:37:17:e9:a9:b1:3a:8a:c9:8e:b1:8d:a4:68:c4:
                    69:e9:ea:93:f4:e8:38:e8:42:4f:32:a1:75:87:65:
                    12:66:a6:d6:85:4a:18:f1:8c:ef:e6:a2:a5:e8:eb:
                    7c:b9:99:86:62:0a:7a:52:fc:eb:e5:b8:2f:e8:2e:
                    a6:d5:fb:7a:e4:20:41:00:a3:82:76:a7:7e:09:07:
                    1c:3b:b0:cd:5a:20:2c:a6:5c:64:3e:13:74:56:b0:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:44:42:57:3C:40:81:AC:AB:F8:0A:68:67:D0:D8:CC:4C:B4:91:E9
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:22:a7:da:9c:6f:b7:7f:9d:51:2f:38:b8:9f:e2:93:79:7b:
         b3:83:df:3e:f0:b9:eb:8e:20:6c:0e:b5:6c:bb:92:da:a6:2e:
         1e:5d:a5:3e:59:04:5b:37:b3:9d:ed:64:9b:87:59:bd:d1:8f:
         85:93:95:b6:ad:af:04:f7:09:f2:17:cf:03:cd:9e:f8:f1:36:
         c0:be:c0:ea:7a:66:ae:bd:b8:8e:28:e7:ec:4b:48:7a:8f:74:
         fe:a5:ca:06:55:a9:81:b8:9b:3f:49:03:a4:8c:dd:56:bc:e1:
         fb:e6:6e:a9:ce:50:83:13:09:84:4b:db:dd:79:b3:d5:fb:d6:
         ad:57:e4:f4:67:d1:0a:19:9f:05:86:fd:8b:6c:a6:e0:4e:b9:
         32:86:69:14:5c:8b:a9:70:7a:fd:6f:78:7c:25:d0:7c:5c:7c:
         46:2b:d4:6f:f9:9a:e1:bb:2e:88:6d:ed:59:ba:e0:cd:10:a4:
         6f:43:05:7f:67:79:b7:23:f0:4f:2d:59:c7:89:87:ed:22:76:
         d8:76:84:4f:79:1c:74:cf:0e:c7:ef:36:b6:e4:b0:13:9a:ba:
         0d:47:a1:dd:2d:a7:e9:6e:ff:69:ca:c3:19:f5:eb:c8:0c:2e:
         0b:68:bc:a2:6a:9b:d8:d1:fc:b0:5f:74:79:c1:3e:46:dc:05:
         db:e8:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:41 2026 by rpki-client