This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
File:                     hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json)
Hash identifier:          dxQnG6wbSEUtWRyZHP0bx/jDfBrqmIYdd/64t4jUZIA=
Subject key identifier:   4F:D6:E1:B1:DA:E7:49:9A:5B:C2:71:52:57:42:BC:ED:C9:A4:D9:25
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       0F3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
Manifest number:          0F2C
Signing time:             Sun 25 Jan 2026 00:56:02 +0000
Manifest this update:     Sun 25 Jan 2026 00:56:02 +0000
Manifest next update:     Tue 27 Jan 2026 00:56:02 +0000
Files and hashes:         1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: CKsKV9WkEqhQ7HmGIpwFxmEUPWBCqsebmV5bc4dDGNA=)
                          2: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3902 (0xf3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
        Validity
            Not Before: Jan 25 00:56:02 2026 GMT
            Not After : Jan 27 00:56:02 2026 GMT
        Subject: CN=69756a22-3e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:62:b7:ef:47:99:9a:50:e8:39:13:9c:09:
                    c5:d9:5e:f2:e8:6c:f0:88:71:c8:13:af:d4:8a:47:
                    9f:8e:5d:53:ad:7d:bd:dc:86:f2:32:48:05:56:bd:
                    32:c9:aa:23:ed:37:f6:db:ad:52:cf:0d:24:f7:5f:
                    c0:fe:05:c0:d5:18:e2:7b:8b:64:6c:d6:99:67:52:
                    24:72:ca:86:98:32:ed:ae:e6:07:be:97:16:93:e6:
                    36:59:d0:a7:4e:59:5a:e2:e8:9c:29:78:f3:a1:de:
                    83:bd:50:92:bb:15:a6:84:fd:64:2a:3c:75:16:ae:
                    5a:96:4c:d1:10:1c:f1:2f:c3:25:43:72:d5:59:e0:
                    21:8d:ca:7d:06:60:bc:7b:9f:7b:7b:b6:08:04:c3:
                    cf:4b:43:10:41:69:5d:a4:69:73:98:be:3f:47:e6:
                    23:13:2f:68:47:a6:67:56:7f:ca:a4:a4:56:de:d0:
                    04:2f:42:08:55:ce:36:8e:86:3c:1f:99:f2:98:5d:
                    1d:7e:01:11:c4:74:7e:3f:e9:cb:62:12:73:22:8d:
                    36:b2:93:2f:40:78:41:70:aa:75:d4:a0:39:d3:b3:
                    e8:cc:ef:bc:67:60:53:7f:0a:91:2f:e7:13:78:b9:
                    99:e1:24:2b:20:12:d6:0e:5a:f8:ba:2e:e6:91:09:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D6:E1:B1:DA:E7:49:9A:5B:C2:71:52:57:42:BC:ED:C9:A4:D9:25
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:0c:db:92:c3:aa:4c:4a:ef:1c:4c:20:79:ed:3e:ac:19:
         27:34:d8:8e:ae:cc:9e:54:03:69:98:a3:db:95:ab:9c:a8:bb:
         c4:0b:91:98:66:ae:44:de:67:f8:74:f9:bd:84:48:dd:b1:d9:
         c6:7d:b5:4a:44:ff:66:f0:37:e7:dc:08:98:7c:b2:b0:90:f4:
         9d:1d:25:9b:8c:e0:8f:66:fa:cd:09:05:bf:37:8c:e0:23:c1:
         7a:54:41:1d:7c:31:73:c0:8e:24:e5:d4:5f:23:8e:ec:92:52:
         54:5c:4b:fe:ce:85:70:33:39:0f:83:e8:35:03:b4:3e:86:27:
         82:0a:0c:4c:1a:34:da:c1:bf:7e:4f:5b:4c:2b:fd:8e:ab:3e:
         9f:02:b8:d0:13:5b:1a:79:ec:63:85:3a:b1:70:4e:45:0a:c9:
         ee:28:ab:28:2b:73:d3:36:36:19:3a:bb:39:aa:0f:f6:a9:0d:
         96:85:aa:bc:c0:23:bd:3e:68:38:30:79:b9:1c:3b:ab:97:4e:
         95:bc:a3:ad:a9:e3:c2:dd:a2:87:a1:76:d4:5a:7b:ab:fd:9e:
         f1:28:bb:da:17:0d:0b:21:54:94:d1:f6:1a:f1:1b:dc:8f:e4:
         ad:cb:af:65:a1:fa:3b:75:57:aa:38:cf:2e:5a:9d:62:37:f6:
         5b:45:5e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:26:35 2026 by rpki-client