This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          qnoOOedlosAsEc9nylieJGo/oM6VuG4iekKr9Ti/9bs=
Subject key identifier:   3C:90:3A:AA:B4:0D:62:CB:C9:63:B7:52:4C:B9:5E:06:43:84:8D:DA
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       05BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          05B9
Signing time:             Mon 26 Jan 2026 02:39:29 +0000
Manifest this update:     Mon 26 Jan 2026 02:39:29 +0000
Manifest next update:     Wed 28 Jan 2026 02:39:29 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: PY2DsrV7sVb4MNjte+hbqBxF/6H1QQKVBouFFYUSC+I=)
                          2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: Jan 26 02:39:29 2026 GMT
            Not After : Jan 28 02:39:29 2026 GMT
        Subject: CN=6976d3e1-55de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:f4:74:1b:58:4c:ab:96:bf:b1:e7:17:4a:
                    d6:2a:98:ac:78:45:f3:d3:0e:47:bf:18:30:6c:ef:
                    b5:83:f9:67:4d:e8:f7:44:67:4e:37:62:6e:90:f6:
                    b0:24:c2:13:ce:76:04:17:40:a7:25:81:17:f9:65:
                    6d:24:70:3d:1e:9e:bc:e8:33:12:46:88:10:8d:5d:
                    d1:39:35:9c:cc:2c:4e:61:d3:ab:e4:3f:05:d9:fd:
                    e7:01:14:d2:50:f0:68:ce:00:a4:08:5b:19:7b:01:
                    f2:b3:ce:a1:ff:ee:c8:9a:f9:41:9c:fc:b4:03:9b:
                    c8:25:93:3b:75:1d:36:88:f4:57:fd:d1:ff:cd:1b:
                    10:b2:88:dc:c7:ff:e9:fe:41:74:a7:e3:d6:97:bf:
                    d2:5c:12:19:d0:18:42:38:b4:61:e8:93:8e:32:34:
                    54:09:62:75:70:d7:30:01:77:81:04:c8:a5:fa:a6:
                    60:7f:5d:18:70:ab:1d:99:1d:11:fd:eb:8b:31:12:
                    b2:95:7f:18:54:03:f0:12:9f:3b:50:0d:7a:ff:92:
                    55:c0:94:ad:9d:70:5a:fb:ab:cd:d2:64:63:80:7c:
                    1c:47:66:df:cd:d0:70:e6:5a:c4:8a:be:96:5c:cc:
                    91:93:44:e2:0b:02:e0:b1:31:7e:75:95:87:19:d4:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:3A:AA:B4:0D:62:CB:C9:63:B7:52:4C:B9:5E:06:43:84:8D:DA
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:6d:6e:70:77:6f:d4:c4:4f:5d:11:b5:4c:d1:7c:18:41:91:
         6e:10:c1:cc:af:2d:85:a8:ce:9d:b4:ff:12:50:23:64:47:c7:
         3b:1d:29:e8:27:0e:fb:3c:cd:a5:aa:af:cb:5c:de:3b:7b:4c:
         35:5f:c5:0d:ed:75:3f:ff:ba:72:b0:ca:5d:37:3e:79:bb:a5:
         60:e3:14:71:44:cc:de:c2:87:6d:c7:d5:e6:4e:ea:02:94:83:
         ac:c8:40:5b:60:8e:fc:a7:27:0c:57:29:b3:34:b2:7e:e6:03:
         24:b6:ae:fb:03:46:bd:5d:1f:fd:b8:fd:38:db:84:72:18:38:
         b4:b8:85:a1:71:1b:0a:01:c4:9b:50:44:35:c3:14:78:d1:52:
         b2:26:98:51:47:21:a5:c4:14:c4:85:f9:38:2a:17:cd:1a:6c:
         a4:32:0f:ed:e8:37:ff:9c:93:f2:28:69:81:c9:06:4c:de:ab:
         00:4f:5f:09:24:85:81:bd:b2:79:98:2f:5e:98:92:d8:69:eb:
         f2:07:25:e4:1d:91:83:5a:34:af:a5:a1:cd:a0:d6:12:5b:79:
         15:c1:0b:11:b4:45:29:c5:fb:c9:99:c4:3d:fa:58:da:8f:ac:
         32:4d:0c:7f:1b:db:5b:68:15:1b:1f:37:f0:26:1c:15:d0:56:
         ec:f1:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:57 2026 by rpki-client