This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          i2QiBBDTyMbdzYWMQL7mgOpo/FcfCnaO2UGM4GiAyDg=
Subject key identifier:   21:41:03:8D:F8:86:7A:36:57:21:3B:BA:D1:95:DF:05:4F:04:01:85
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       077C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          077A
Signing time:             Sun 25 Jan 2026 01:58:16 +0000
Manifest this update:     Sun 25 Jan 2026 01:58:15 +0000
Manifest next update:     Tue 27 Jan 2026 01:58:15 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: YhWB2I4E9Vs9iJz5Y9eAoAnyXNHJTYwu6ambLyF3qFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF, serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Jan 25 01:58:15 2026 GMT
            Not After : Jan 27 01:58:15 2026 GMT
        Subject: CN=697578b7-dd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:34:03:09:de:2e:a6:31:20:72:c4:05:57:
                    62:a1:66:7f:1d:49:bd:0d:4b:fe:54:54:28:d8:cd:
                    cb:17:51:ef:ad:75:02:e6:3c:2e:4f:b2:d2:6e:f2:
                    db:91:59:a4:ce:7c:8a:02:ec:e1:7e:b3:ed:85:34:
                    12:cb:82:6a:3c:d4:64:82:c4:ff:73:76:5b:73:4f:
                    28:d0:a2:33:5d:55:35:1e:ed:ec:64:a1:55:35:72:
                    94:1a:a5:72:33:41:a5:36:41:25:c8:cb:99:7c:37:
                    62:6a:41:b2:d6:f5:42:cf:b4:02:e2:20:fa:e9:d9:
                    a0:1c:73:d5:35:86:3a:f0:51:ab:6b:39:f8:6e:39:
                    49:e6:f1:b9:b9:0d:7c:13:95:48:8a:67:da:32:27:
                    15:56:03:88:e2:73:2d:94:cc:20:5a:98:6e:21:c3:
                    fb:31:da:90:48:c3:8e:0b:3d:d2:a5:5d:3b:69:02:
                    eb:c5:e0:e8:ce:c1:19:0c:44:66:09:69:10:06:f4:
                    b9:88:4e:96:ed:aa:4a:f9:e9:ea:9a:42:58:f3:52:
                    f7:a5:03:40:40:17:4a:b8:90:e5:2e:13:36:d9:e8:
                    ed:34:1f:7c:29:01:9c:0e:cd:77:75:f7:6b:bc:73:
                    39:9c:ea:44:37:ce:09:5c:97:1e:6a:a9:3c:30:4e:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:03:8D:F8:86:7A:36:57:21:3B:BA:D1:95:DF:05:4F:04:01:85
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:db:81:84:7d:ef:b5:eb:47:96:c0:ac:5b:96:56:81:13:
         c5:e5:00:7e:46:9b:6a:5d:3e:1f:13:56:63:a2:ce:39:c3:87:
         fe:a3:fe:0b:c4:47:c3:7f:6b:ad:32:1f:8d:53:60:0c:86:e8:
         84:1f:f1:62:09:c6:f7:1a:52:04:ec:f2:6f:bf:53:6e:1a:b5:
         ff:e4:c3:e2:72:79:2b:3f:d9:a5:f5:ed:ec:85:53:d4:d2:c1:
         e6:11:cc:e3:cb:5e:c8:c1:2d:84:6b:ec:3c:32:df:dd:fc:30:
         eb:85:58:72:c0:d4:c4:d7:3c:92:47:8b:fd:e1:fd:85:21:bb:
         eb:fc:fd:da:21:3c:3f:92:b5:f9:3e:9e:9c:e2:5a:a8:ae:f8:
         74:04:a2:eb:8c:4a:e9:31:81:bd:f0:44:8e:39:8e:de:dd:42:
         2e:08:be:4c:6b:a6:7a:29:71:71:81:11:88:50:2b:3e:a5:29:
         0f:a7:01:84:41:50:ac:06:ff:f9:a4:6a:0b:d7:27:9c:6c:51:
         aa:3d:fe:90:ee:93:b2:8d:1c:da:1a:14:bf:3e:62:ec:3f:90:
         c1:d8:ba:ea:8d:6f:75:0a:93:74:c0:6a:ce:f5:79:62:38:e7:
         96:bd:c4:8b:3a:9f:c3:97:60:e6:73:bd:da:76:d2:10:9d:40:
         65:30:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:58 2026 by rpki-client