This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
File:                     4a66tLHvdNsvpuf2sMhhKwzhv9s.mft (raw, json)
Hash identifier:          lwhJkXLFt060O7+N+RB+wa31upXrbqJtaQfrKHLFvsg=
Subject key identifier:   75:ED:13:2B:5C:A0:59:CA:36:E2:9A:77:A0:B7:D1:70:2B:81:90:12
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Certificate issuer:       /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial:       0D9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
Manifest number:          0D9A
Signing time:             Fri 09 Jan 2026 01:04:26 +0000
Manifest this update:     Fri 09 Jan 2026 01:04:26 +0000
Manifest next update:     Sun 11 Jan 2026 01:04:26 +0000
Files and hashes:         1: 4a66tLHvdNsvpuf2sMhhKwzhv9s.crl (hash: iu8s7qB5GmmwVejlPXdVEVCrdOAAa5+gL+6vNDud5QQ=)
                          2: A9CE075A727B11EBB196600DF8AEA228.roa (hash: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=)
                          3: BEBDF2D279B111E6830FCB69F8AEA228.roa (hash: EouzcL5tOeyVAza9Ny4WgUhhP+v0Y2hxWM5v0/DIPwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Jan 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3484 (0xd9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDB53AF, serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
        Validity
            Not Before: Jan  9 01:04:26 2026 GMT
            Not After : Jan 11 01:04:26 2026 GMT
        Subject: CN=6960541a-e9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:3d:d3:f9:94:01:7d:63:b4:8a:99:ee:c7:
                    0a:72:f2:6b:e2:48:ef:1f:b0:d7:57:b6:29:5e:8f:
                    f5:66:06:53:b4:6a:43:7b:a4:a5:3f:ad:92:f1:fc:
                    6f:ad:d5:aa:07:9d:2c:8c:12:89:4a:64:8b:6a:96:
                    7e:0e:38:36:3c:7d:b0:bb:2f:a9:a0:2b:e8:75:38:
                    b6:f8:e8:4c:85:3e:63:4a:09:7b:4b:d6:c7:6e:f3:
                    cc:a5:13:41:77:cf:ae:a0:98:a8:3e:7d:25:15:34:
                    e1:ac:ee:c1:5c:36:8c:0b:d4:54:b4:7b:19:0c:7b:
                    9b:b0:f4:d1:90:ed:e9:f6:c9:44:99:b2:d6:fd:19:
                    48:70:3d:af:36:fd:cc:cb:7b:7b:b4:08:b8:f3:48:
                    d3:e4:99:f0:dc:0a:8b:b2:61:26:5e:70:24:c8:ef:
                    2e:1d:52:d7:3d:39:c1:69:19:3f:0d:b6:f6:0e:0e:
                    44:d9:5f:ac:39:25:d1:a2:ac:a5:02:3c:03:25:dc:
                    a4:4d:e3:e3:b4:75:db:74:ea:43:ec:7f:50:88:da:
                    fa:f4:2f:1f:86:38:a6:79:7a:4b:15:24:49:60:e3:
                    21:c5:20:4f:34:c2:fa:69:46:4a:52:a5:d0:1f:38:
                    7d:ed:07:a5:43:ac:d9:c6:ca:c3:dd:7b:36:eb:a1:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:13:2B:5C:A0:59:CA:36:E2:9A:77:A0:B7:D1:70:2B:81:90:12
            X509v3 Authority Key Identifier:
                keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:94:fa:16:a9:53:27:72:74:ff:b9:ce:c8:a7:15:eb:3a:c9:
         3b:6f:08:90:20:9a:d5:0d:c7:3c:66:dd:a3:aa:d1:2e:ab:20:
         2c:0c:48:16:e7:95:3d:09:ed:6e:65:82:07:6c:21:cf:65:7a:
         3f:70:c7:3d:63:db:7f:bf:b1:81:f4:16:e1:a4:67:48:86:03:
         9f:6e:da:6e:7a:b1:51:2d:8b:0d:dc:9d:85:e7:44:4d:30:e8:
         37:30:f6:43:62:61:0d:e5:69:cd:af:80:49:bb:4d:a6:02:bc:
         57:c3:53:5d:1b:76:b8:87:4f:2b:f3:12:30:0e:b6:d7:ad:3a:
         87:7f:f2:4f:79:71:25:02:c6:a6:84:1d:43:39:eb:88:b8:a3:
         d9:eb:36:7a:97:82:56:bc:4b:b0:53:c3:b2:05:6f:88:22:d9:
         ea:60:32:1d:9b:87:56:2f:99:00:20:83:1d:40:70:c6:6a:06:
         89:a6:a3:77:f2:28:83:ba:aa:8d:a1:df:e1:d6:21:b3:de:33:
         2f:3a:01:67:8c:9f:f6:4c:1e:b8:ed:9e:e6:74:de:56:8a:c5:
         b5:7c:6a:15:d9:44:d8:23:3c:5e:34:32:52:22:b0:cc:dc:bb:
         72:f7:50:ca:36:b4:66:c0:59:ba:9a:ff:a0:50:ae:fe:a6:50:
         2c:d7:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:48:11 2026 by rpki-client