This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          DGsvtY5liitJRJTqE/L6Gd6Rpi4QhGoZCWafEnlOKJc=
Subject key identifier:   A8:0E:C5:BE:C6:F1:98:D9:99:AF:EB:59:04:F1:AE:F7:C6:47:93:73
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       0578
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          0575
Signing time:             Fri 06 Feb 2026 02:48:38 +0000
Manifest this update:     Fri 06 Feb 2026 02:48:37 +0000
Manifest next update:     Sun 08 Feb 2026 02:48:37 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: jR6dIPbX0ye+ijoAq6XYhTjbFzzhfu4kSvRYE+xwse0=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 02:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Feb  6 02:48:37 2026 GMT
            Not After : Feb  8 02:48:37 2026 GMT
        Subject: CN=69855686-b184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:1d:10:10:79:cf:dd:12:d8:8c:bb:02:a7:
                    c8:e0:cb:db:1c:81:d3:d5:c2:55:4b:5d:73:06:f8:
                    a3:c3:e8:97:10:36:32:25:e7:45:2f:cd:4c:d6:cf:
                    d8:83:02:01:98:6f:4c:58:da:1a:6d:21:f8:d1:a9:
                    f1:22:ab:14:74:6c:34:8b:b6:1e:b0:85:9b:14:23:
                    32:2b:fd:82:71:95:ec:73:72:b0:52:9e:95:61:18:
                    5c:8a:ab:89:65:3d:66:85:67:5f:c3:20:69:f7:9d:
                    2d:bd:19:c5:e0:df:12:7d:39:40:53:70:23:78:b1:
                    d8:3b:80:51:77:9c:a0:94:61:ad:db:71:d5:17:30:
                    81:04:4b:48:16:3c:b7:2d:07:c4:01:54:b7:b2:3f:
                    d3:ac:06:c8:13:a0:3c:5d:f5:7a:5a:fb:44:b2:5b:
                    2a:04:44:66:a0:58:9f:64:30:c0:95:b8:33:f4:bf:
                    02:c5:51:7b:a7:a4:58:ec:f4:9f:7c:4b:69:bf:f7:
                    b6:49:cf:7f:6d:bf:35:e9:29:29:3d:a6:3a:89:b0:
                    7f:64:58:ac:ee:39:46:fa:27:74:55:83:3b:02:76:
                    6f:17:2a:71:a4:f1:f5:ab:08:6b:eb:4b:cc:25:e0:
                    13:1f:f8:e5:8b:e3:42:fd:57:c5:a5:3c:7b:0c:45:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:C5:BE:C6:F1:98:D9:99:AF:EB:59:04:F1:AE:F7:C6:47:93:73
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:de:59:e2:2e:19:9b:8b:30:e7:f6:1e:78:97:c9:de:ee:26:
         69:2a:fb:cf:7e:5d:29:76:2e:e0:47:a7:56:89:71:ae:fc:53:
         69:99:de:a6:59:3f:0c:fa:0f:7f:bb:36:bf:96:34:44:1e:01:
         79:c6:54:19:e6:0d:cb:6b:b4:f3:2c:fd:d0:fd:36:2f:e5:7f:
         00:94:03:61:0f:5d:6e:3e:2b:0a:60:0e:e3:7b:7f:a2:f5:80:
         6f:87:f5:6c:8e:32:09:6a:22:92:26:bb:cd:21:c8:4e:cb:f3:
         c1:15:b8:1d:79:83:ef:30:a1:4c:42:93:5d:ba:d3:62:7d:8c:
         9a:bb:09:06:92:fe:93:cd:43:fa:d1:4e:a3:d9:82:cf:dc:0b:
         53:2d:65:08:8a:94:64:92:c8:bc:f0:93:a6:51:1b:66:46:a2:
         f5:87:11:ff:e3:54:18:ec:05:38:36:a7:dc:6f:07:6f:c8:10:
         83:d3:f9:62:dd:56:dc:ae:63:a0:52:2c:7c:5f:89:4d:d7:0b:
         ee:48:33:bb:80:04:03:b4:e2:57:a2:1d:f6:f8:a5:c8:6d:04:
         8f:53:af:51:f3:47:0f:d8:d0:12:22:4e:16:48:60:08:f4:58:
         0b:1c:da:a3:ae:99:64:ab:98:56:39:80:8f:76:a4:0d:e0:4e:
         c5:87:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 23:59:33 2026 by rpki-client