This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          CwbKsB8HxS2SciYI75opj+QpXljvOTZa9fn6ABht2OY=
Subject key identifier:   86:28:F3:78:FD:02:D3:3D:83:B7:BB:E9:3D:74:04:37:EB:4A:41:B3
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       046B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          046A
Signing time:             Sat 07 Feb 2026 03:16:43 +0000
Manifest this update:     Sat 07 Feb 2026 03:16:42 +0000
Manifest next update:     Mon 09 Feb 2026 03:16:42 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: R8LrTnPYRhzD7Q9kIWipKKuFdSWo2wmOIi4YVKnr5Sk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
        Validity
            Not Before: Feb  7 03:16:42 2026 GMT
            Not After : Feb  9 03:16:42 2026 GMT
        Subject: CN=6986ae9b-2908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:47:ca:02:53:ee:69:63:e8:71:48:9a:26:
                    78:0d:cb:01:aa:dd:a3:49:c5:da:5d:fd:da:4f:11:
                    56:0f:b5:18:02:ec:75:fa:e2:d2:97:62:0f:25:25:
                    ad:10:9b:6b:5a:1f:3c:8d:8e:59:e2:68:f4:56:87:
                    bd:84:02:f7:87:ff:ba:32:59:79:4d:61:a4:3b:2e:
                    00:87:9d:0c:06:ae:d4:49:c6:c2:84:6c:ec:dc:ca:
                    01:1f:f0:c4:74:dd:ef:64:41:39:fe:18:07:0d:2e:
                    d0:12:3d:18:31:0e:78:f7:9f:d7:6a:65:58:7a:81:
                    49:64:25:e2:5d:4d:4e:7d:a4:0b:94:88:7d:a7:2f:
                    a9:13:72:15:ca:59:ce:34:14:c5:8d:12:2f:22:d1:
                    77:2f:21:af:98:be:69:91:61:0e:b4:6f:05:e6:00:
                    e6:5a:7f:6f:9e:91:a7:25:97:f2:fd:1d:77:8e:4c:
                    5b:a9:82:32:5d:45:bf:b7:5e:de:b9:66:e7:b4:36:
                    37:24:b1:23:11:f8:5a:2e:bb:53:19:7d:0d:67:6e:
                    dc:2b:76:4d:18:b0:7f:a7:c0:ba:b6:33:fe:f9:49:
                    f3:9a:d5:20:66:a6:2e:19:31:f8:ac:6a:b6:5a:ad:
                    6a:7a:dd:76:54:54:7a:b1:e3:1a:58:1d:9f:66:2e:
                    04:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:28:F3:78:FD:02:D3:3D:83:B7:BB:E9:3D:74:04:37:EB:4A:41:B3
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:58:64:f1:f5:9e:97:e8:ef:aa:4b:a1:f4:a3:66:b9:d0:
         43:df:19:7b:73:78:1d:b8:51:37:70:f0:08:d0:20:4f:bc:59:
         f5:82:a0:d1:90:eb:9b:b4:99:dd:de:7e:f8:54:c7:bf:58:24:
         a1:fe:ac:2a:c8:94:1c:d5:db:9d:96:da:b7:3d:29:f0:d6:a8:
         d8:0c:86:4d:45:b5:6b:3e:cc:4e:e4:02:89:e6:93:ac:02:6c:
         ab:99:2c:a5:84:0d:39:02:ce:c4:29:c5:5e:4e:2d:cd:be:82:
         f7:c8:ed:10:dc:43:a7:3c:39:d3:15:7b:44:ab:2e:86:be:40:
         3d:25:e4:60:27:96:5d:7b:35:33:a8:47:63:6c:fe:c8:09:e4:
         82:53:34:85:12:bf:01:e7:57:c6:ac:82:dc:6a:43:9b:90:bc:
         57:b7:1e:68:f4:be:cd:2f:b7:32:71:d2:11:c3:75:64:84:80:
         f8:a0:b2:c6:b8:cf:59:09:6b:5f:2e:93:1e:09:aa:1c:bf:05:
         07:b6:15:33:a7:77:f0:0e:49:bd:9d:61:d9:1d:f0:6b:70:43:
         1d:09:4a:d3:67:90:3f:05:53:cc:8b:e1:2f:06:20:35:76:a1:
         93:fb:30:c5:86:17:09:fd:4c:11:a7:d9:62:eb:cd:fb:64:b8:
         c5:88:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 08:44:53 2026 by rpki-client