This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
File:                     k4vok1GoGkLfhHvzkxNy0JgwREY.mft (raw, json)
Hash identifier:          m/lWxdCPXOpHtSSgcCKXHdBpn1kLQ9CHI2UcRVyreyM=
Subject key identifier:   4C:B0:53:2A:87:06:B4:0F:48:41:8C:45:6A:31:9C:07:47:95:C9:1E
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       0904
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
Manifest number:          08FC
Signing time:             Tue 13 Jan 2026 01:41:27 +0000
Manifest this update:     Tue 13 Jan 2026 01:41:27 +0000
Manifest next update:     Thu 15 Jan 2026 01:41:27 +0000
Files and hashes:         1: k4vok1GoGkLfhHvzkxNy0JgwREY.crl (hash: XiPi4fAUu7f81kkw2oIBOwO25fcb57dng2Dl5rFTVk0=)
                          2: F9B24804FDF611EDB9858F624AD9E6FC.roa (hash: XgiYHOYx4wcOXrZza9zqvfH5aFmrwXDAfxqyTM9D+GI=)
                          3: 3455CE3C6B3911ED8B33D1C3F1222468.roa (hash: toOai8ZBR3vTvdHeg3LaLL6gpVJazukKbGn3v/cuk0k=)
                          4: 4C042A44496311ED9930A0F9F1222468.roa (hash: e9ujQQYc0OEqAyhghA9cLn0dfJy3UKXs4mNrpCrPXck=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Jan 2026 00:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Jan 13 01:41:27 2026 GMT
            Not After : Jan 15 01:41:27 2026 GMT
        Subject: CN=6965a2c7-22d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:da:48:b1:be:a6:8b:41:85:7e:94:53:ee:
                    92:03:5a:cc:47:f1:f4:d9:9c:7f:42:c4:69:d0:88:
                    38:9d:d1:8a:e6:80:0b:85:84:5a:e6:7c:04:3c:93:
                    14:1e:07:24:be:8a:9d:56:b0:b1:71:87:49:2d:84:
                    fc:51:34:20:ce:ff:a0:8a:a1:af:14:0b:5f:09:47:
                    0b:50:4c:3b:6e:ee:e2:8a:09:06:de:a6:db:1f:34:
                    b1:3f:c6:68:62:b3:9a:7e:78:d7:5d:90:31:06:c9:
                    ff:f4:5e:ff:fa:30:b6:68:54:00:21:a0:cd:c3:7e:
                    e6:9b:a1:56:ea:fb:a4:48:95:8b:9b:23:5d:37:d4:
                    23:97:df:f7:a2:d1:10:0e:8e:b0:e5:ad:c0:31:f6:
                    6f:aa:36:0b:a3:74:d4:c8:d8:48:df:7c:0a:ab:ed:
                    c4:7a:94:21:8f:ac:da:32:b7:e0:40:2b:29:a0:e4:
                    d4:3e:26:ef:1a:0e:f8:a4:ac:a9:49:dc:dd:97:74:
                    1f:6a:c4:3c:85:de:ca:04:77:89:35:e9:69:ce:05:
                    31:1b:0f:77:24:1e:81:cc:42:03:9a:62:97:50:63:
                    11:0e:90:4d:3f:6e:e8:4a:fa:4f:33:17:29:d7:33:
                    c1:f9:ea:a3:fe:f4:0e:d6:c7:b1:f8:be:62:52:24:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B0:53:2A:87:06:B4:0F:48:41:8C:45:6A:31:9C:07:47:95:C9:1E
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:3a:70:4f:28:aa:11:05:b5:d9:24:8b:04:3b:c0:94:b0:
         8e:95:1a:1f:8c:55:7a:c7:5c:f2:e6:c1:5d:9e:61:e5:78:17:
         2a:02:6d:ce:eb:cd:6a:36:8b:33:e7:1b:aa:24:6b:ba:c4:95:
         ee:c1:e5:f1:e5:d2:9f:9e:99:62:4d:45:36:d4:19:76:3c:c6:
         f2:f2:e9:3e:82:c7:81:d2:e6:8e:0f:f0:b9:6a:29:27:d5:89:
         dc:a5:25:30:2f:23:d5:2a:59:88:c3:76:21:61:32:4a:12:eb:
         18:c5:78:09:40:b6:d9:23:53:7b:af:8e:2f:8c:d1:64:e2:2a:
         fc:fa:4f:21:76:e2:c7:85:11:0a:f8:d1:f0:2f:cf:6e:82:16:
         c4:76:4d:25:e2:fa:8d:55:7a:09:f0:41:c5:38:38:8e:be:ea:
         f5:38:ec:37:99:aa:34:79:c3:e2:92:73:4d:ab:26:38:ba:68:
         30:b0:1c:5a:25:48:da:51:f0:24:50:3c:bd:eb:22:55:f2:de:
         12:04:99:75:b9:26:42:81:a0:cf:77:aa:cf:b6:1b:4a:23:f4:
         02:50:6b:8a:31:9b:b0:52:af:c3:1d:be:33:84:36:4f:f5:b6:
         a1:d0:b7:ae:2d:4a:7c:71:56:77:b2:65:0a:b5:c4:e4:fb:e4:
         81:26:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:18 2026 by rpki-client