This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          s1cxSlvgA/adwMiFKLtPiLNp21TveLFLrv0MIZyRHdk=
Subject key identifier:   D0:E6:CA:02:CD:05:67:36:EC:34:9E:14:D5:6B:EF:94:95:87:1C:1D
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       0921
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          091F
Signing time:             Sun 25 Jan 2026 01:37:30 +0000
Manifest this update:     Sun 25 Jan 2026 01:37:30 +0000
Manifest next update:     Tue 27 Jan 2026 01:37:30 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: P221REvZ1PkZLr/d9TwudrWOI9XE/cY7nr9ki6jLHbo=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2337 (0x921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: Jan 25 01:37:30 2026 GMT
            Not After : Jan 27 01:37:30 2026 GMT
        Subject: CN=697573da-5fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:d8:95:30:7a:f1:bc:32:9a:53:26:19:a0:
                    c4:e1:b8:99:97:b4:3c:5e:6c:39:6b:48:ff:71:ba:
                    9d:05:08:fb:c0:28:bb:0b:98:f9:cd:eb:3f:55:52:
                    2f:11:8b:6b:b8:98:c0:f5:48:c6:12:4e:fc:a1:d4:
                    56:03:76:65:44:31:82:4b:71:9a:ca:ec:78:a4:66:
                    cc:0e:ba:d5:06:d8:13:19:30:47:de:2f:09:34:ef:
                    1b:ee:57:72:f6:32:08:b1:94:75:bc:d1:7c:e9:01:
                    ad:92:ae:39:ff:c9:70:71:75:b0:4b:d9:10:9c:83:
                    ad:f6:e5:30:3f:5b:30:2d:11:0b:56:69:ba:cd:2b:
                    e5:04:d4:90:09:9d:a1:9d:e3:e5:be:d7:fb:dc:0a:
                    96:23:ca:f7:14:55:24:2c:de:75:90:5e:b7:74:e6:
                    8f:50:34:ff:aa:07:b8:9d:2c:1c:97:ba:02:0d:15:
                    97:4a:90:e9:e2:10:80:65:80:6d:ba:d6:e6:db:38:
                    45:31:fe:58:8a:41:ce:5f:2b:15:17:92:92:e1:ac:
                    d6:2e:41:70:27:67:74:b6:29:26:be:c3:df:4f:06:
                    9a:4a:51:34:6c:f8:b5:c9:8a:a7:47:eb:b2:e3:d9:
                    46:82:eb:63:c7:03:e7:81:7a:36:c4:d3:08:6f:08:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:CA:02:CD:05:67:36:EC:34:9E:14:D5:6B:EF:94:95:87:1C:1D
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:02:d5:93:90:68:e9:45:1c:da:42:c9:83:25:b3:d2:4c:
         73:86:86:9d:91:c6:52:ee:13:fd:66:8d:84:c2:98:45:c8:fb:
         f6:6a:1f:53:2f:5c:36:07:47:45:e2:34:cc:3f:20:ce:9f:e4:
         10:80:6c:45:63:0d:85:b7:b7:19:ad:15:a8:56:fd:c7:ed:a2:
         93:46:b7:64:8f:6d:c5:e9:b1:ae:14:b2:a3:4e:9b:4e:9b:c1:
         97:2e:c8:e7:af:53:9f:fb:fb:15:5a:ac:dd:84:4a:fb:47:1d:
         ea:5f:dc:48:34:b2:26:f2:87:6f:e4:6a:b5:90:64:40:4e:17:
         d8:0b:ad:d1:64:c1:12:d2:8c:21:ea:14:82:3c:f2:3a:3a:b8:
         e7:94:a8:08:7e:ce:30:2b:23:b7:2f:d4:03:0a:10:7b:01:a9:
         10:69:bd:35:1a:e3:8a:bc:9c:9c:a7:7a:b6:68:3b:a6:86:b7:
         e7:22:27:b6:bb:ac:cd:7f:80:08:c6:48:9f:05:92:a7:f8:6e:
         76:e3:f3:b4:cf:bf:dd:2b:14:94:ce:c2:9f:56:43:01:45:32:
         0b:7d:65:c2:25:fc:39:a0:a7:d3:5c:1a:48:6a:f9:b5:f9:35:
         17:73:89:9f:f0:a8:ec:9e:99:92:c7:3c:38:12:94:15:8a:db:
         b7:8d:f9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:21 2026 by rpki-client