This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
File:                     zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft (raw, json)
Hash identifier:          R+UbPW84bW/pHptzPSScYNe+Sh8jkAJKwkWphR53gWg=
Subject key identifier:   63:68:20:BA:3E:F2:5A:50:82:13:A8:08:25:9D:F7:3B:8C:45:B3:C1
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Certificate issuer:       /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial:       0266
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
Manifest number:          025F
Signing time:             Mon 26 Jan 2026 04:17:39 +0000
Manifest this update:     Mon 26 Jan 2026 04:17:38 +0000
Manifest next update:     Wed 28 Jan 2026 04:17:38 +0000
Files and hashes:         1: zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl (hash: tiKoTWXa/HmmrtUhcoYsC/Vu4TUbHDfp7qBPWctNi3E=)
                          2: F3466CD22EEE11EFAB930A67762E951A.roa (hash: +dYtbycLkkem/RCdq5G5Tibdi9nPBFznIh17vDpR0yI=)
                          3: AA5E7D162EEE11EFB786B466762E951A.roa (hash: 7ctEzn08E4DJ3uFce48dpoQ1eMqIiYfX70Em/++n2wI=)
                          4: C10CD8A62EED11EFBB91475E762E951A.roa (hash: +GopixwYFgxwApDEisDd+3N08mZ9XQbjdM+uCxLPgTY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AF, serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
        Validity
            Not Before: Jan 26 04:17:38 2026 GMT
            Not After : Jan 28 04:17:38 2026 GMT
        Subject: CN=6976eae2-22a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:0d:56:df:63:82:d0:ba:de:f7:51:80:b8:
                    0f:fa:9d:24:da:be:f7:f8:3c:41:26:84:e5:89:50:
                    6d:d2:96:74:6e:42:7d:94:8d:76:dc:a9:08:9b:dd:
                    81:35:db:c8:4c:d8:6e:e7:d4:fd:3a:b7:dc:4b:e1:
                    e9:54:bc:9b:07:3f:2d:50:7b:b0:ee:fa:2f:69:96:
                    2c:36:c1:3e:0b:28:59:0f:4d:7b:e1:e9:7e:29:c5:
                    fe:1e:08:24:39:40:df:12:b1:7c:9d:2f:cb:ff:20:
                    5a:13:6d:5a:c1:ef:69:67:56:1d:93:cf:d2:9c:ab:
                    6d:29:2e:3b:4b:df:93:a9:65:ce:c3:4a:0f:fc:b7:
                    04:7b:71:05:6f:b7:e4:d2:e5:56:68:61:b8:46:8e:
                    25:41:ce:90:16:8a:87:00:f2:bb:c2:b3:ff:a5:cf:
                    06:04:36:22:ab:10:ff:35:ba:ac:69:9f:dd:6d:50:
                    77:2d:7b:ee:59:c2:88:65:41:2d:a4:3e:26:c1:4b:
                    17:fa:64:00:45:ca:ec:0f:db:22:70:76:7f:85:60:
                    ed:bf:f6:9f:2c:25:3d:94:f1:b4:3b:d7:60:d2:09:
                    a3:58:a1:18:a1:f0:38:51:46:5e:f7:91:f2:90:b5:
                    06:39:21:bd:c9:b8:d9:01:b8:84:28:8b:d4:53:27:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:20:BA:3E:F2:5A:50:82:13:A8:08:25:9D:F7:3B:8C:45:B3:C1
            X509v3 Authority Key Identifier:
                keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:62:81:96:16:b9:c1:a3:5d:c9:e6:5b:db:9a:c7:18:a3:
         8e:e9:86:d1:9f:db:2c:cc:09:c8:e7:10:c8:b8:7b:ef:cf:78:
         31:f2:8f:8f:3e:c8:a3:3c:ec:61:16:c1:ca:92:82:9f:12:7b:
         50:1e:bf:29:9c:04:3c:7e:73:11:21:bd:1b:a2:67:e6:81:99:
         d6:7b:28:35:40:e6:a6:48:ee:80:67:2c:07:1b:97:66:b1:ad:
         48:b6:95:4b:ea:b6:dd:f6:53:83:6e:e8:18:cd:c8:6f:cb:65:
         ae:01:8b:02:35:15:8e:91:fc:fe:ed:f3:65:ba:e9:2d:4c:c5:
         21:e1:00:eb:a7:fd:30:98:c2:97:b7:57:1f:5f:6a:13:9d:23:
         84:10:48:78:a5:99:cf:d6:57:9d:9f:b8:30:3b:0e:95:97:50:
         60:b6:bf:9b:84:2a:6b:f3:c1:4a:c0:1c:22:c1:e1:97:37:96:
         7a:08:5a:5d:5f:68:a2:32:f7:4c:15:39:de:0e:13:21:cd:64:
         32:42:02:cf:a2:3b:42:6f:df:32:b9:f2:22:f4:31:59:2b:c0:
         0c:3f:a8:ee:4c:71:d7:ad:d2:b9:4b:f4:1a:71:1a:46:da:ce:
         d1:e8:3a:e3:0c:ae:f2:0e:4d:a7:8a:4f:c4:70:d8:29:63:77:
         35:73:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:51 2026 by rpki-client