This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File:                     KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier:          zkJQ3EndhGG+Gr1sajUDV5k9LRawxOjoPgbuul9Lm0k=
Subject key identifier:   2A:2F:76:B3:5D:62:38:6A:01:6F:D2:FF:49:A2:3F:F7:4D:03:C6:B3
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer:       /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial:       09BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number:          09BC
Signing time:             Mon 26 Jan 2026 01:26:48 +0000
Manifest this update:     Mon 26 Jan 2026 01:26:48 +0000
Manifest next update:     Wed 28 Jan 2026 01:26:48 +0000
Files and hashes:         1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: 7JzXNSzFQfa79Vz2xebUlqlxgecglUFhWKc4W9rZOwQ=)
                          2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
        Validity
            Not Before: Jan 26 01:26:48 2026 GMT
            Not After : Jan 28 01:26:48 2026 GMT
        Subject: CN=6976c2d8-0f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:7b:9d:a4:47:7a:fc:05:9d:c1:77:e5:ad:
                    dc:08:f2:af:c3:e4:a2:d4:c9:2f:98:d8:6c:62:fa:
                    2e:83:ad:9e:42:c1:3f:d7:c4:32:cc:d7:c6:5a:f4:
                    40:f0:96:5e:9a:97:3c:91:b4:61:ae:bc:4c:4f:6c:
                    4f:16:77:4e:68:22:d5:0d:9c:96:ba:b2:de:41:19:
                    46:a9:44:db:23:a8:5a:e2:0a:13:26:b8:02:a3:fa:
                    8f:2b:e4:6a:c5:13:be:f0:da:73:2c:ec:1a:5b:96:
                    07:91:09:de:ea:4b:bb:6e:bd:8a:eb:97:0b:93:06:
                    2f:0c:4d:52:99:39:64:6b:f8:ee:67:cb:46:2b:81:
                    c7:82:82:dd:72:eb:88:ba:47:a5:86:a8:b3:bb:74:
                    ef:ee:b4:a7:d5:4f:3a:d6:c0:f6:dc:8f:de:a2:2c:
                    5f:c2:c3:40:1c:ee:5e:1f:15:0b:c1:70:62:41:ec:
                    d2:e1:53:0b:8d:76:88:91:6a:f6:7c:22:2b:b5:a4:
                    2c:3a:f8:5d:ae:69:04:e6:43:de:1e:c7:e7:18:b2:
                    ea:e9:a0:59:75:a6:50:ed:6b:8e:36:ea:be:83:da:
                    08:dd:10:16:71:63:d9:d0:c7:1f:6b:eb:c1:0e:fe:
                    38:f0:37:c9:82:dc:d9:39:5e:6a:c4:08:e9:6d:f0:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2F:76:B3:5D:62:38:6A:01:6F:D2:FF:49:A2:3F:F7:4D:03:C6:B3
            X509v3 Authority Key Identifier:
                keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:46:f7:ff:7f:6b:d1:ce:7b:28:20:55:d8:39:8b:44:f5:
         bd:98:ad:8e:ee:72:31:51:84:cd:12:7c:3c:13:46:82:fc:ce:
         9d:46:8d:4e:2c:d6:04:05:09:a8:b4:d0:a8:bf:5d:db:be:79:
         08:2c:4e:9e:b1:09:eb:86:92:64:6c:29:93:0e:d8:27:e2:3f:
         43:c5:e5:9f:96:3d:4d:48:31:87:25:d8:f2:55:fe:e1:89:ef:
         fa:91:0a:bc:ab:53:af:2c:91:73:42:13:a9:27:ec:b4:09:9e:
         24:af:f8:fd:76:78:ec:00:d9:90:1d:40:2c:51:6e:58:41:f3:
         d9:97:f3:07:50:a9:21:88:ef:3a:2a:e9:ae:16:c4:c8:ce:52:
         9c:c8:98:32:28:8f:2c:ad:8f:e6:33:86:3e:90:9d:44:55:2a:
         cd:19:d3:ba:2d:c9:58:a0:b3:d8:c9:ab:5f:f6:3a:c0:29:16:
         fb:7f:1b:c3:b1:28:09:16:c3:6c:97:55:14:b1:2a:26:72:16:
         37:c7:b5:a0:3c:0f:96:e2:ca:c6:2f:23:47:f9:b7:3a:95:c3:
         f8:c4:e8:ed:13:6e:97:b4:9d:db:62:c5:aa:16:b0:14:46:e1:
         22:37:f2:de:8f:c6:40:51:a6:35:0d:50:7a:6c:b7:e6:b8:85:
         99:42:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:50:35 2026 by rpki-client