This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
File:                     IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft (raw, json)
Hash identifier:          XB1PV0hknGelZsGNDfAgNkl4YWidEaKcjmiZG7IaRcc=
Subject key identifier:   12:52:DA:62:DF:66:A5:F8:3E:A6:E5:92:75:DA:FD:5B:FC:E7:B8:A1
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0557
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
Manifest number:          0554
Signing time:             Sun 25 Jan 2026 02:48:22 +0000
Manifest this update:     Sun 25 Jan 2026 02:48:21 +0000
Manifest next update:     Tue 27 Jan 2026 02:48:21 +0000
Files and hashes:         1: IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl (hash: CdVzjOREb2SZTSz2CSahP7EIHkW9bLSq/DBHepGs18s=)
                          2: 2AE6A618901511ED97E821A8F1222468.roa (hash: l6cBhURgmoDE6HHZxn6Sr3D0gRmA3gv1jsIUfHqy/fE=)
                          3: 341444A4EE0611ECA47D4F8CF1222468.roa (hash: 5YbdNBfbmz1C6LgL/EGyM06dpl98H6mogKseSBeoHI4=)
                          4: E33731DE901411ED873666A7F1222468.roa (hash: DQCVLS0+9ICNcSNGa3FetGyRMxihYZeODa4YHrZFCDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Jan 25 02:48:21 2026 GMT
            Not After : Jan 27 02:48:21 2026 GMT
        Subject: CN=69758476-d1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:0d:fe:8b:d5:c7:12:63:f5:3c:a8:df:61:
                    3d:30:bd:d6:47:95:5c:37:68:3f:69:0a:1b:2b:c7:
                    6a:b5:04:c0:31:87:34:57:51:a0:ab:91:95:2e:a4:
                    0d:3d:87:ab:29:f9:5c:22:4f:6a:0f:11:36:6f:6a:
                    60:f2:d6:a1:33:32:ce:5c:6a:f8:ba:87:9e:80:84:
                    45:42:fe:ca:ea:73:63:71:97:72:f9:0a:8b:d6:76:
                    73:21:9f:60:76:80:bc:b6:bc:0e:55:d4:bf:05:4e:
                    21:3a:d8:f8:04:a9:46:9c:ca:e5:d4:7a:97:e4:1c:
                    d3:ab:4b:28:68:bd:0e:90:63:46:bb:b9:d3:5d:76:
                    e8:ae:76:28:ce:0e:83:40:3c:2d:d5:71:d4:b3:be:
                    85:df:47:1a:60:47:da:10:ea:13:88:3b:a0:c5:ca:
                    ac:83:04:c6:81:36:f7:ab:c2:e0:30:6c:1a:04:9f:
                    75:7a:8f:84:14:44:bb:f8:2d:5f:c7:d6:7b:cb:b3:
                    fb:c6:a7:5b:ea:c9:9b:eb:80:1f:38:0d:27:6f:56:
                    59:72:09:87:02:05:7e:68:56:bd:8e:ce:d4:3c:da:
                    53:19:7b:c0:cc:df:a4:9b:a2:b9:3a:ec:21:e0:08:
                    e3:93:c4:71:af:21:7d:4b:e5:03:ee:b7:b2:d7:85:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:52:DA:62:DF:66:A5:F8:3E:A6:E5:92:75:DA:FD:5B:FC:E7:B8:A1
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:16:dc:86:5f:b1:a8:e6:31:4f:15:59:6c:45:f1:4a:62:85:
         f9:05:93:81:40:5e:90:9a:72:47:64:f0:ad:f2:99:4f:19:53:
         fa:6e:c8:98:a3:a7:1b:59:62:da:76:78:23:1e:69:fc:b9:74:
         fe:d8:86:b3:d9:1e:5c:4c:23:c5:76:e6:99:b4:cd:4b:59:78:
         04:ba:39:f5:56:c2:ab:db:43:42:c2:14:71:a7:d1:fe:cb:8d:
         86:25:bc:74:08:58:56:89:ee:03:b5:09:50:31:56:d2:c6:1d:
         e8:f7:6f:6e:db:61:8a:b1:81:4f:8e:13:1b:89:47:b6:32:12:
         2c:35:9a:23:5d:b0:03:12:a4:ba:95:1a:36:be:bd:3e:32:b0:
         39:df:5d:ee:b8:cd:a1:14:63:7d:42:10:17:20:25:08:64:1c:
         6f:00:06:67:91:33:de:00:53:3a:12:11:f5:00:49:8c:97:3d:
         e3:5e:08:da:45:a1:a4:7a:ff:62:aa:d7:46:df:e0:6c:5d:31:
         c6:c5:a2:8d:b2:e7:d7:29:2b:63:f2:d5:ff:57:70:fd:14:24:
         10:e5:83:6c:da:87:fc:33:f2:c0:3f:52:b8:78:46:54:ad:9b:
         e7:fd:4b:7f:8c:b5:36:4f:5b:f3:c0:16:6c:0d:2d:11:21:91:
         ff:5c:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:04 2026 by rpki-client