This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
File:                     1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft (raw, json)
Hash identifier:          sCAmP34hKHOUB2xt1qWuYZP3fL6TrVuk8VOQCyurxg8=
Subject key identifier:   15:D2:B6:E6:93:3E:C5:8B:BC:15:74:E5:63:28:54:14:F7:4A:B0:BF
Authority key identifier: D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10
Certificate issuer:       /CN=F363E214AF/serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610
Certificate serial:       09CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
Manifest number:          09C7
Signing time:             Sun 25 Jan 2026 01:21:56 +0000
Manifest this update:     Sun 25 Jan 2026 01:21:55 +0000
Manifest next update:     Tue 27 Jan 2026 01:21:55 +0000
Files and hashes:         1: 1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl (hash: NFi/a+p4NSaYyovx7EhqGDzxD6kDeH2JilzwjNMyfjA=)
                          2: 3ACCA76E7D4D11E9BA82FB71F8AEA228.roa (hash: yC1yqZLK/mn5O8oPUPstRFKqoZMenamr5HvhnVgkq2M=)
                          3: 7B80003A7D4D11E98C653A72F8AEA228.roa (hash: Pf4+vucLWS0+RlRnSnEIXgYSOdRPDXw0o293VLaPD8U=)
                          4: ECE818207D4D11E9ACBE8A72F8AEA228.roa (hash: lFX/K+uRha67tPuzFLrmfgCjnGBWbSFiv83qQNOXpEo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E214AF, serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610
        Validity
            Not Before: Jan 25 01:21:55 2026 GMT
            Not After : Jan 27 01:21:55 2026 GMT
        Subject: CN=69757034-0990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:b6:7a:f2:7b:58:03:42:cc:96:f2:f0:04:
                    be:67:52:ed:17:41:10:2a:d1:62:fe:e5:4c:50:dc:
                    ab:c2:eb:cd:e1:2c:c4:5b:24:34:84:f0:9d:2a:8b:
                    56:91:70:f7:12:7d:f0:43:49:6c:52:07:81:01:60:
                    53:7c:79:14:dd:39:2d:79:30:ce:95:bd:3d:c4:80:
                    b1:4f:70:f5:78:cb:3f:fe:96:9e:e9:16:3f:32:71:
                    04:00:d6:ff:10:75:d0:80:25:e1:f1:fd:62:a5:62:
                    d0:3d:bd:bf:b6:fc:25:bb:83:1f:6e:6e:47:30:56:
                    7f:d1:ae:16:eb:83:ab:a6:e7:58:aa:51:fe:2b:43:
                    4d:0d:53:42:94:05:d0:7a:32:42:f4:72:9d:0c:ab:
                    e8:ac:cd:2e:dc:53:cb:6f:d7:83:c0:ad:db:2b:6c:
                    6e:c3:d9:e9:0d:d5:23:ab:39:6b:ad:83:1d:82:88:
                    1c:25:79:ce:dd:5e:a3:06:70:7f:9a:01:bb:a9:04:
                    e0:7e:86:03:df:9b:b4:95:44:1f:54:9d:a1:23:dc:
                    d3:2e:0c:cd:fc:f4:74:0c:70:35:f8:96:a3:41:02:
                    15:7f:c8:cb:dd:6e:ce:60:09:7a:79:0f:60:21:9c:
                    15:61:09:46:3c:b4:59:52:fd:9a:d0:f3:ba:94:fd:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D2:B6:E6:93:3E:C5:8B:BC:15:74:E5:63:28:54:14:F7:4A:B0:BF
            X509v3 Authority Key Identifier:
                keyid:D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:f3:ea:bb:6b:61:73:df:67:aa:d7:1c:23:15:85:76:2c:
         d8:21:e7:cc:c4:59:80:4e:6e:7e:ce:0f:04:80:1f:30:04:e1:
         69:b3:bd:8c:9c:20:f7:29:64:9b:46:cd:ac:52:56:bb:60:43:
         59:c5:b3:a8:56:54:f9:1a:7c:12:70:7d:cd:94:2a:66:f8:1f:
         db:3e:ec:a2:d4:60:87:31:ae:f2:a2:c7:9c:f9:a1:21:90:21:
         3a:be:c7:e0:4d:bd:74:ca:60:9a:49:0d:36:88:40:0e:1e:53:
         fc:e2:0f:04:28:36:20:cb:2a:8e:ef:a4:38:11:be:f6:23:bb:
         cd:72:d6:98:a4:5e:be:d7:1e:1c:d5:1a:94:01:d9:7d:81:c8:
         9f:b3:95:09:86:87:5c:74:bf:2f:e8:fa:fd:ea:02:1b:c7:b3:
         b5:ab:e6:74:92:58:c0:e8:2a:62:d7:b7:e7:08:54:47:9c:4b:
         68:68:d6:4f:86:c8:45:7b:7f:99:a7:90:09:d0:b8:0a:a2:5e:
         80:64:d5:b4:e2:0d:d6:7c:a7:e5:3d:bb:14:db:ac:21:fe:94:
         b2:71:1c:48:b7:47:c8:8a:4f:0e:63:00:4f:65:03:f0:fb:59:
         82:0d:8f:61:d3:fe:dc:68:bc:77:7c:87:d3:9d:ef:8a:60:f0:
         da:d3:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:34 2026 by rpki-client