This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
File:                     4CGdWkzYWCxPN-LQ3dcGt369n2w.mft (raw, json)
Hash identifier:          yg0sDdbG4X1/Y5Ictu/kf33r+q42wq43bH5m/UPnFig=
Subject key identifier:   26:1A:90:B2:F7:5D:34:79:22:33:F9:EA:57:74:A5:FD:1D:37:31:5E
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Certificate issuer:       /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial:       0597
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
Manifest number:          0587
Signing time:             Mon 12 Jan 2026 02:45:49 +0000
Manifest this update:     Mon 12 Jan 2026 02:45:48 +0000
Manifest next update:     Wed 14 Jan 2026 02:45:48 +0000
Files and hashes:         1: 4CGdWkzYWCxPN-LQ3dcGt369n2w.crl (hash: 3vaSvvh5Q6Bp/QHqzzcU/K2d+5/LE5AyPCcFxwe906A=)
                          2: 43499CAEE06111EEAD369C57775412E6.roa (hash: BqZi3Jf+58/WulzjWYWd6LnvU4vDKMabeieGFixEMoQ=)
                          3: B3406C3EE06311EE9DC9645B775412E6.roa (hash: ogaYGhijbZfnfBJbAW8m4J3DjXL9JovFwrfT8ageG8c=)
                          4: 62AAD5B8C4AD11F088EE28D5DAE4EC9C.roa (hash: V/PGdom7dT1wyeknHKrUkkzFdZubko4PFPhY+dUZjI8=)
                          5: 930D3556C4AE11F088545DDBDAE4EC9C.roa (hash: pZvKmBeXmwbStC6508pXvq67gXEFBPlOqFduOBW2GH0=)
                          6: AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa (hash: 2tRGD2oLj/HLCtH3fXvt5xrNupgPKXIIViu9/t9+M/E=)
                          7: 107A839AD49C11EE8138FA6E775412E6.roa (hash: NbPQB72+8cMeXRD62I/wbwttaa2xbNKWZ7NyDUoCiQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 02:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
        Validity
            Not Before: Jan 12 02:45:48 2026 GMT
            Not After : Jan 14 02:45:48 2026 GMT
        Subject: CN=6964605d-02b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:7e:f9:32:c5:f3:92:03:45:72:31:0d:3e:
                    3d:b9:53:8e:eb:11:88:cb:9c:c1:c4:f6:42:5b:77:
                    f4:5c:2e:bf:a6:df:2b:8f:f1:55:aa:5f:fa:8d:46:
                    69:39:14:3b:3a:56:43:8b:32:f9:28:80:bc:af:5a:
                    f6:13:c1:f3:11:1e:5b:7f:73:25:27:f2:65:7a:7a:
                    8f:bf:bd:1f:0b:bf:13:84:82:01:a7:b2:88:10:e8:
                    5b:50:f1:f4:88:11:65:ff:19:03:ea:b3:84:85:dd:
                    ec:85:d1:73:cc:05:cd:4e:68:4b:e7:d2:c3:96:02:
                    70:3f:e5:d7:ca:1e:27:7a:5d:7d:77:c2:b8:dd:22:
                    b6:47:1f:33:e9:84:e5:0a:7e:b8:c7:42:33:84:3a:
                    a2:d1:a1:ac:e3:89:bc:b0:f8:14:88:98:76:12:1c:
                    84:9b:82:a9:0a:15:45:5f:c4:bb:d0:5a:b9:f8:66:
                    71:d1:4c:a2:ca:a5:82:a5:ef:e5:82:1b:02:2c:83:
                    cf:84:64:6d:f7:8b:72:fc:e1:72:4b:2a:38:ce:f3:
                    cd:e4:c6:f1:1b:61:f2:f3:fa:aa:5a:f7:9b:28:2e:
                    ab:eb:71:ed:4c:83:71:dc:8f:f3:48:01:67:d7:a3:
                    32:82:54:a4:0b:46:55:3d:d4:e8:a4:58:49:d6:96:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:90:B2:F7:5D:34:79:22:33:F9:EA:57:74:A5:FD:1D:37:31:5E
            X509v3 Authority Key Identifier:
                keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:9a:8d:96:ac:a9:33:fc:5b:02:91:76:89:6b:5e:73:e0:
         5a:05:04:33:a8:d6:cc:d9:19:a8:d2:6c:04:36:89:c0:c9:5d:
         b1:c1:12:a7:84:6f:2d:bd:ef:be:10:99:f0:3e:f5:67:ad:e3:
         f4:b7:8f:ef:86:63:6c:fb:82:ec:c1:3d:72:30:74:35:30:f4:
         1e:01:24:43:2a:ad:30:3d:77:dc:27:a3:6d:0e:3d:16:80:c0:
         e1:9e:f5:e5:a0:d0:50:4f:e2:1b:83:7c:b2:9f:d4:55:46:5f:
         97:73:4c:ae:26:81:5c:ea:85:c9:98:68:f6:00:dc:b6:b6:0e:
         f7:f8:56:fb:01:da:d2:89:ff:da:a7:7b:20:dc:64:d6:f3:11:
         3b:94:cf:f0:15:d8:6f:0a:f5:d8:7f:ed:48:f5:8b:5e:9d:26:
         7c:34:1a:3d:31:3b:6f:16:d5:20:7f:84:60:83:d2:a8:9c:5d:
         64:97:f9:a4:7c:ac:bb:e4:97:cd:28:68:ec:46:70:18:82:3d:
         99:d3:9a:77:c0:61:c6:18:76:d6:fe:1b:74:8c:83:f9:4e:24:
         e6:1b:57:f2:83:2c:f7:7d:aa:0c:7e:44:95:72:fa:c8:ac:ef:
         c9:74:16:ab:18:20:16:52:60:72:cd:ee:88:dc:0b:c2:6c:7c:
         15:d9:09:0a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYzQzJBRjExMC8GA1UEBRMoRTAyMTlENUE0Q0Q4NTgyQzRGMzdFMkQwRERENzA2
Qjc3RUJEOUY2QzAeFw0yNjAxMTIwMjQ1NDhaFw0yNjAxMTQwMjQ1NDhaMBgxFjAU
BgNVBAMTDTY5NjQ2MDVkLTAyYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCp5375MsXzkgNFcjENPj25U47rEYjLnMHE9kJbd/RcLr+m3yuP8VWqX/qN
Rmk5FDs6VkOLMvkogLyvWvYTwfMRHlt/cyUn8mV6eo+/vR8LvxOEggGnsogQ6FtQ
8fSIEWX/GQPqs4SF3eyF0XPMBc1OaEvn0sOWAnA/5dfKHid6XX13wrjdIrZHHzPp
hOUKfrjHQjOEOqLRoazjibyw+BSImHYSHISbgqkKFUVfxLvQWrn4ZnHRTKLKpYKl
7+WCGwIsg8+EZG33i3L84XJLKjjO883kxvEbYfLz+qpa95soLqvrce1Mg3Hcj/NI
AWfXozKCVKQLRlU91OikWEnWlqJbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJhqQ
svddNHkiM/nqV3Sl/R03MV4wHwYDVR0jBBgwFoAU4CGdWkzYWCxPN+LQ3dcGt369
n2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2M0MyL0IzOTBFOUU4Qzc4MzExRUNCMTk4Mjg5NEYxMjIyNDY4LzRDR2RX
a3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRDR2RXa3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjYzQzIvQjM5MEU5RThDNzgzMTFFQ0IxOTgyODk0RjEy
MjI0NjgvNENHZFdrellXQ3hQTi1MUTNkY0d0MzY5bjJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXrZqNlqypM/xbApF2iWtec+BaBQQz
qNbM2Rmo0mwENonAyV2xwRKnhG8tve++EJnwPvVnreP0t4/vhmNs+4LswT1yMHQ1
MPQeASRDKq0wPXfcJ6NtDj0WgMDhnvXloNBQT+Ibg3yyn9RVRl+Xc0yuJoFc6oXJ
mGj2ANy2tg73+Fb7AdrSif/ap3sg3GTW8xE7lM/wFdhvCvXYf+1I9YtenSZ8NBo9
MTtvFtUgf4Rgg9KonF1kl/mkfKy75JfNKGjsRnAYgj2Z05p3wGHGGHbW/ht0jIP5
TiTmG1fygyz3faoMfkSVcvrIrO/JdBarGCAWUmByze6I3AvCbHwV2QkK
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:47:58 2026 by rpki-client