This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          zbIC3TmseulKSFvDrap/eABKIQl4xha9piJPOlBso+I=
Subject key identifier:   DB:9C:FF:03:FA:90:E4:F0:8F:8B:37:14:79:82:D3:07:FF:07:99:DD
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       06FA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          06F5
Signing time:             Sun 25 Jan 2026 02:08:00 +0000
Manifest this update:     Sun 25 Jan 2026 02:08:00 +0000
Manifest next update:     Tue 27 Jan 2026 02:08:00 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: pbqaAsKk46s82c+dju6JFFwAex/KuGDSHDBTIFW+fWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Jan 25 02:08:00 2026 GMT
            Not After : Jan 27 02:08:00 2026 GMT
        Subject: CN=69757b00-0540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ff:c0:05:b6:88:0b:89:a3:cb:fd:f2:d3:1c:
                    77:14:4d:70:ee:34:a1:3a:f0:6d:1f:73:6e:83:c9:
                    5a:29:cc:01:26:2b:0b:83:f0:f1:a0:da:08:bb:60:
                    f4:02:e7:76:fd:3d:e4:a0:02:08:3c:55:6a:e2:67:
                    3a:50:57:4e:6b:1b:40:18:5f:da:fc:72:1d:65:0c:
                    06:4e:49:54:46:e1:61:71:97:d7:49:0b:ea:ca:48:
                    71:4a:00:3f:82:93:df:55:27:ce:05:6a:91:46:8a:
                    6f:6d:30:33:5f:27:3c:96:9a:cb:13:ad:50:fa:ce:
                    85:ac:71:f8:6e:6c:06:0d:b3:e9:2f:22:5c:50:10:
                    3f:d9:57:49:b3:f7:59:aa:17:f7:6a:2b:2b:8c:42:
                    63:19:bf:d9:84:b5:07:03:c7:3c:f7:64:df:d0:c6:
                    fd:d0:9c:75:b7:5f:39:70:38:87:89:b1:69:9f:de:
                    e9:85:f2:bb:f9:a9:87:59:db:8f:93:bd:6b:68:87:
                    49:46:4f:ff:9a:e8:6c:7d:20:99:d9:dd:90:4d:e5:
                    2f:82:77:bd:dc:9f:6a:1b:16:34:6a:48:98:07:11:
                    ea:bc:a0:b5:2a:21:ff:f2:c7:fd:4c:f0:0e:4f:7c:
                    f2:6c:69:fd:03:cf:a8:77:37:d8:ab:06:c7:db:a2:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:FF:03:FA:90:E4:F0:8F:8B:37:14:79:82:D3:07:FF:07:99:DD
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:26:6d:ef:5a:d4:2b:01:f8:9d:1d:1c:e4:8a:3f:a4:51:
         94:c9:5b:fc:54:e7:e6:96:87:dd:78:50:00:7d:fb:4e:c4:6f:
         70:03:29:51:d1:e9:fd:3f:26:a2:bc:0c:bb:b7:d2:05:7f:94:
         0e:63:d0:9c:6a:57:54:d4:58:40:0f:34:2f:8b:25:f5:73:79:
         9d:34:7d:33:4f:2b:ca:4f:92:c0:74:8f:a2:9b:7e:cb:34:93:
         c7:28:8a:0a:a0:53:9e:ef:86:15:b4:30:3f:85:95:15:96:d1:
         5f:71:03:67:a0:2e:c7:46:60:db:8c:10:81:97:b9:a2:c7:bd:
         a1:56:e8:eb:c7:ab:ab:ef:84:b4:48:f0:d9:e9:01:92:7f:20:
         40:b3:a4:66:07:0c:b2:19:ec:7f:fd:7d:98:ac:e7:ae:85:15:
         f2:76:4e:4d:c4:76:fd:df:75:fa:46:23:c2:21:81:80:fa:68:
         10:9d:53:b3:b3:6d:38:00:34:97:e7:26:e0:77:1d:ba:66:79:
         97:27:b4:01:17:4e:97:a7:9b:1a:c1:58:11:2a:39:cb:b2:c9:
         20:73:63:93:ea:bc:7f:1c:76:1b:eb:53:4c:1a:8f:5e:69:66:
         1b:65:04:4b:93:d0:5f:05:7e:38:bf:1f:bf:f3:c3:33:a5:83:
         f9:97:02:75
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBvowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEFFNDRBRjExMC8GA1UEBRMoOEY1MDNCRDU3M0NFMTEzNTE3Q0Q2QjRDRkEzNzRB
NjJGMTVFMTJDMTAeFw0yNjAxMjUwMjA4MDBaFw0yNjAxMjcwMjA4MDBaMBgxFjAU
BgNVBAMTDTY5NzU3YjAwLTA1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDr/8AFtogLiaPL/fLTHHcUTXDuNKE68G0fc26DyVopzAEmKwuD8PGg2gi7
YPQC53b9PeSgAgg8VWriZzpQV05rG0AYX9r8ch1lDAZOSVRG4WFxl9dJC+rKSHFK
AD+Ck99VJ84FapFGim9tMDNfJzyWmssTrVD6zoWscfhubAYNs+kvIlxQED/ZV0mz
91mqF/dqKyuMQmMZv9mEtQcDxzz3ZN/Qxv3QnHW3XzlwOIeJsWmf3umF8rv5qYdZ
24+TvWtoh0lGT/+a6Gx9IJnZ3ZBN5S+Cd73cn2obFjRqSJgHEeq8oLUqIf/yx/1M
8A5PfPJsaf0Dz6h3N9irBsfbolgbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU25z/
A/qQ5PCPizcUeYLTB/8Hmd0wHwYDVR0jBBgwFoAUj1A71XPOETUXzWtM+jdKYvFe
EsEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBRTQ0LzIyMjcwRUZFQUY0NDExRUI4QzI1NzY4NkY4QUVBMjI4L2oxQTcx
WFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2oxQTcxWFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEFFNDQvMjIyNzBFRkVBRjQ0MTFFQjhDMjU3Njg2RjhB
RUEyMjgvajFBNzFYUE9FVFVYeld0TS1qZEtZdkZlRXNFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3fiZt71rUKwH4nR0c5Io/pFGUyVv8
VOfmlofdeFAAfftOxG9wAylR0en9PyaivAy7t9IFf5QOY9CcaldU1FhADzQviyX1
c3mdNH0zTyvKT5LAdI+im37LNJPHKIoKoFOe74YVtDA/hZUVltFfcQNnoC7HRmDb
jBCBl7mix72hVujrx6ur74S0SPDZ6QGSfyBAs6RmBwyyGex//X2YrOeuhRXydk5N
xHb933X6RiPCIYGA+mgQnVOzs204ADSX5ybgdx26ZnmXJ7QBF06Xp5sawVgRKjnL
sskgc2OT6rx/HHYb61NMGo9eaWYbZQRLk9BfBX44vx+/88MzpYP5lwJ1
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:33 2026 by rpki-client