This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          amRATH75AUT6ACwgp+FrsKUUN4Td3Ig+N5mM6UrvAks=
Subject key identifier:   8C:CD:C7:7E:FD:64:83:6C:C2:71:53:44:CB:A4:E5:18:3C:83:69:0A
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       0683
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          0682
Signing time:             Sun 11 Jan 2026 02:21:51 +0000
Manifest this update:     Sun 11 Jan 2026 02:21:51 +0000
Manifest next update:     Tue 13 Jan 2026 02:21:51 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: FrXtzyNw0afm3NZZoh+5W+VKU07XxzOot6BbpL7/Sno=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: Jan 11 02:21:51 2026 GMT
            Not After : Jan 13 02:21:51 2026 GMT
        Subject: CN=6963093f-7cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:cb:f1:f3:d6:63:db:ee:39:81:7f:e3:ca:
                    af:49:82:f9:47:1e:19:fe:51:23:4e:2c:54:91:9f:
                    ab:e3:4e:20:55:7f:c3:da:b2:09:e7:b9:95:88:d7:
                    a9:58:f1:e5:8b:5e:a9:66:6c:4f:52:8f:70:a0:4e:
                    ab:9e:6b:8f:63:19:05:0a:2d:1d:2c:fd:f9:80:6d:
                    71:25:99:e3:6d:72:e5:41:fc:b3:c1:8c:a5:32:cf:
                    16:65:ef:c4:51:c9:70:c5:c9:dc:c1:6a:f9:6c:bd:
                    8e:00:f7:6f:93:f8:ed:53:09:80:85:5a:73:68:5a:
                    19:5b:bd:2d:80:7d:35:1b:f5:f1:3e:4a:40:42:49:
                    d4:e0:2d:c8:31:92:1e:85:5c:8a:dd:10:fc:6e:7b:
                    a0:45:1f:01:a5:37:af:6e:87:d4:7f:25:1d:55:51:
                    4e:7a:b7:66:cc:0d:48:4a:2f:aa:02:2a:c2:cb:a6:
                    67:bb:d2:d5:23:d5:48:29:82:d7:10:57:65:6c:a1:
                    c1:16:84:41:d1:4a:75:86:b1:03:c4:b8:31:97:11:
                    1c:3e:f8:ed:22:fb:67:19:45:0c:69:bc:08:66:a3:
                    a5:de:df:69:5e:14:37:5d:89:db:6f:59:54:91:23:
                    6e:f2:94:21:0c:b2:77:be:4e:49:4d:61:a8:32:db:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:C7:7E:FD:64:83:6C:C2:71:53:44:CB:A4:E5:18:3C:83:69:0A
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:fe:10:df:8a:09:c3:72:7e:c5:3e:19:50:e4:1e:b6:f4:
         1f:db:e2:20:6d:48:72:a6:cf:2d:64:28:00:94:dd:ef:02:63:
         3e:8e:f1:ae:24:65:ec:47:78:c4:87:83:d4:9f:e1:b5:92:b1:
         92:e5:ec:b8:11:96:54:e3:d4:1a:36:9c:31:62:36:67:5f:e2:
         18:55:85:da:b8:a1:02:dd:cd:70:b0:40:b3:53:2d:1c:bf:52:
         d8:05:48:52:28:c7:81:35:f3:05:bb:19:c1:89:b4:48:13:af:
         d7:40:bb:ef:ea:63:9f:a0:15:37:c3:6c:4e:c5:a3:60:50:9a:
         52:40:89:e0:09:90:ec:8f:dd:6a:05:93:f9:19:ea:85:cc:9b:
         f2:86:9f:ea:c8:cb:34:ce:90:2f:42:b0:86:47:4b:22:a3:15:
         ac:0d:20:f6:0d:20:0e:2b:f2:5e:f8:07:75:14:fc:50:25:19:
         9f:b2:93:5e:91:89:48:19:cd:09:db:b5:ba:6c:dc:b9:8e:d1:
         75:1f:45:14:d9:d2:26:b7:2f:18:ff:82:8b:2e:45:1d:c0:d7:
         00:4a:6a:2e:a3:9e:6a:5a:5c:a5:c1:a6:98:84:24:53:c8:ae:
         94:36:03:2e:0c:53:cb:2c:c6:43:e7:f9:92:c2:86:85:e3:29:
         2f:e0:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:31:57 2026 by rpki-client