This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File:                     b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier:          jTaM0FiEPhXsdDGHz3A3mhbc00c+13VTm7EJFoFdWZg=
Subject key identifier:   A1:FA:A6:64:3A:31:BE:7C:68:28:8C:04:B4:F5:F9:58:56:A0:81:20
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       0583
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number:          0580
Signing time:             Fri 06 Feb 2026 02:47:48 +0000
Manifest this update:     Fri 06 Feb 2026 02:47:47 +0000
Manifest next update:     Sun 08 Feb 2026 02:47:47 +0000
Files and hashes:         1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: 9gTWFqhJLcGTZZM9ScOPlLjmwV55bNZN6/VOmbBq5VU=)
                          2: B1A16132D28A11EC8F270DC0F1222468.roa (hash: 4TQRBmeOxAbF3KLeP0SF+V9s9RzwKR9Ie0C7o3vk0Oo=)
                          3: E3D5D52AD28A11ECB4D0B0C0F1222468.roa (hash: MgA7cMYgIRFHAgD+dSaQaOo5eOVm+neEzUW6GLOT448=)
                          4: 784AE4BCD28A11EC81ED62BFF1222468.roa (hash: CkuoR2/+F6JKHq8BKZH5DTfRvZh+LqHD0UlmcfmPCMw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 02:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Feb  6 02:47:47 2026 GMT
            Not After : Feb  8 02:47:47 2026 GMT
        Subject: CN=69855654-9953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:e7:0a:10:de:d1:45:c4:d8:2e:18:c8:37:
                    81:12:f3:86:82:6d:ef:b2:43:7d:b9:84:0e:9b:1d:
                    cc:6e:49:92:64:f1:42:2f:02:60:29:fc:0b:19:d4:
                    84:f7:16:0b:50:07:b4:fe:1b:48:7c:2f:6b:b8:42:
                    fa:63:9d:b8:2f:a5:95:f6:a7:4d:fa:4b:20:11:7d:
                    ca:ee:f8:6d:8b:85:8a:86:0f:31:1b:f7:cb:2c:7a:
                    8c:32:9f:34:b6:cd:8a:4b:19:1f:93:2d:9d:c3:52:
                    08:5e:54:52:7f:db:e6:ba:06:24:8c:cb:52:98:ee:
                    19:c8:d9:12:3c:3a:0d:4b:84:dd:ad:20:2b:66:9a:
                    09:99:f4:0b:ea:51:91:32:27:e2:e1:d7:50:87:09:
                    e1:51:66:a3:aa:0c:87:8d:80:33:bd:1b:26:07:d0:
                    9b:3b:c4:41:f0:91:e7:26:d2:31:38:52:63:4b:03:
                    17:b8:8c:24:28:3c:c4:f9:db:47:21:15:5d:79:0d:
                    c6:95:bc:2d:bd:0e:7f:06:3c:21:bf:79:1c:72:58:
                    f1:ed:64:7c:c0:8f:a7:49:6f:f5:fd:b1:52:ca:ff:
                    69:9a:de:c7:f0:31:d5:90:8e:a9:4d:d4:0a:74:7d:
                    1f:a1:e1:94:0a:b4:d8:f8:4d:9e:9c:3a:41:ac:01:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:A6:64:3A:31:BE:7C:68:28:8C:04:B4:F5:F9:58:56:A0:81:20
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:f7:1e:19:64:35:75:c7:a8:f4:50:13:9b:13:53:ca:65:
         5e:27:e1:91:4a:2c:65:34:63:47:b3:b8:ce:2a:bb:b1:fb:fc:
         4f:45:1f:d6:4d:92:72:2a:f4:69:4c:79:26:f1:4b:55:17:01:
         25:2c:e9:4c:a8:d4:36:b9:f1:a9:d9:22:73:26:2b:19:49:f0:
         2b:3b:cd:2e:3a:b3:c3:b6:05:17:84:46:d6:5c:38:b8:20:8b:
         56:2a:5f:a1:eb:01:51:fc:f3:03:29:67:5e:36:a3:9b:48:f3:
         1f:65:7b:8d:85:a0:8c:d7:36:e5:b3:c9:1a:79:ad:ef:17:91:
         0b:71:26:de:e3:4a:62:9d:dc:47:cd:41:9c:58:4f:da:7a:d2:
         70:e8:ef:4a:2f:1f:c0:0d:72:24:55:74:88:4c:48:ee:b9:86:
         8b:e1:6b:a3:f1:ee:cf:43:ae:3b:81:4c:58:21:2a:0d:61:7c:
         c2:08:04:6f:1d:dd:f5:64:7a:48:54:b8:ce:54:f2:91:f2:d4:
         b8:4e:1b:29:62:9d:e2:ce:89:61:1f:c1:52:d6:11:8f:b3:1a:
         8e:5c:2f:21:9b:0b:e3:13:c7:83:18:59:bd:05:4e:a4:e0:ca:
         52:28:47:64:db:2b:d1:83:08:6e:03:63:bc:69:53:7e:0d:a5:
         4d:98:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 00:04:16 2026 by rpki-client