This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          URki6jxg54ARd4EiL/1JA7yU/bPX5V71dLWQNfOqUnY=
Subject key identifier:   44:58:AF:18:C2:59:3A:E6:6A:10:BF:0D:73:37:E7:FC:7C:5C:7D:08
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       01BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          01BA
Signing time:             Fri 06 Feb 2026 05:00:35 +0000
Manifest this update:     Fri 06 Feb 2026 05:00:34 +0000
Manifest next update:     Sun 08 Feb 2026 05:00:34 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: P1Z4DPNltvgn44ktglrNwS3lERirzm2fyrH+pElQX3Q=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Feb  6 05:00:34 2026 GMT
            Not After : Feb  8 05:00:34 2026 GMT
        Subject: CN=69857573-8db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:82:b6:3a:f6:89:cb:35:20:93:51:bf:20:
                    09:57:9b:29:22:24:3f:c6:b1:d3:af:84:de:03:53:
                    44:21:97:d1:a7:62:9d:be:0e:46:30:ef:89:21:03:
                    bf:e6:ba:39:dd:49:87:57:30:8e:50:c9:a5:d0:a0:
                    c2:56:c7:74:04:e2:d7:46:69:4e:47:c8:da:02:c6:
                    04:06:55:00:4f:2f:b0:24:34:ab:51:9b:e9:a4:b9:
                    ef:4a:2e:66:96:5c:8c:68:c8:5f:d4:22:ba:2b:d0:
                    b9:00:3c:9e:a9:a6:43:81:b9:5d:bb:b9:ed:47:46:
                    ab:4e:36:4f:cc:82:92:35:37:15:55:10:99:6d:d2:
                    0d:69:51:91:3b:8e:95:da:75:c3:55:40:52:e1:20:
                    be:a5:d3:42:e9:cd:02:5b:e3:e2:2b:4c:f1:a1:f6:
                    63:8f:ba:86:23:a5:70:d8:a0:57:13:ec:c0:a1:8d:
                    2d:cd:ec:db:0f:f5:51:52:d7:a4:a4:1b:7b:b5:07:
                    ba:9a:80:d4:71:4a:1d:5c:78:a4:1f:12:bc:e1:2f:
                    81:7c:94:14:17:6a:ff:95:e2:b5:ca:c2:eb:42:ad:
                    ad:0c:5e:01:44:24:e0:38:d5:a2:98:ba:56:99:8a:
                    24:48:17:1d:bd:33:4a:6b:16:3a:d1:23:93:83:cb:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:AF:18:C2:59:3A:E6:6A:10:BF:0D:73:37:E7:FC:7C:5C:7D:08
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:cb:94:6d:ee:db:89:38:94:25:b1:b2:51:d8:53:1f:f5:
         fd:0f:f5:e8:87:30:44:65:53:d7:96:b6:84:6d:c2:78:29:bf:
         3f:f1:9a:9e:51:62:90:b1:91:cd:bc:fb:ba:58:9e:12:f6:91:
         3f:a8:41:bf:69:2e:19:cf:d5:d6:57:5f:4e:8d:da:98:6a:0d:
         87:aa:0d:a1:0d:d3:5e:5e:ad:2d:34:33:9e:35:89:28:19:8e:
         61:d9:33:98:5d:49:39:af:bf:b7:fd:ad:58:31:ec:61:af:87:
         74:56:a1:b4:a1:c4:7c:91:11:b6:cb:b1:a5:01:3b:50:cd:23:
         19:7f:f2:78:c1:de:a4:89:6a:bc:92:cb:0a:bc:00:22:14:cb:
         03:35:ca:f4:cc:20:b8:7b:36:05:d5:49:16:d3:00:33:a3:ab:
         62:e4:44:da:05:42:48:51:e1:f7:d8:28:2b:c2:c2:b4:27:fb:
         fa:eb:88:c3:61:24:f4:fd:3b:9d:26:06:a4:28:43:e2:6f:9a:
         b8:5d:05:45:fd:48:dc:4c:4f:df:ce:47:89:1c:c8:b7:1b:f8:
         18:a9:6c:ab:db:5d:aa:03:7b:4e:01:dc:f6:93:9c:2c:31:88:
         98:e5:8c:43:44:ea:28:f4:25:1c:93:a9:0f:70:57:aa:74:7f:
         15:9c:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:28:05 2026 by rpki-client