This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          Hl7Xi3vYOp4bOeg+E8HlMjx5Kzi31qiGhtSeX+urC0A=
Subject key identifier:   2C:25:20:2D:BF:2B:D4:B2:6C:4E:A6:58:65:88:80:31:62:9A:ED:DE
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       0A69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          0A68
Signing time:             Sun 25 Jan 2026 01:16:28 +0000
Manifest this update:     Sun 25 Jan 2026 01:16:27 +0000
Manifest next update:     Tue 27 Jan 2026 01:16:27 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: VUpLU4oPMHOBcPtkJYBj+9ja2vLK9xhBjsslufz6cGc=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Jan 25 01:16:27 2026 GMT
            Not After : Jan 27 01:16:27 2026 GMT
        Subject: CN=69756eec-aee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:15:f5:46:f3:bf:ce:82:55:fa:f2:70:94:
                    84:ec:ce:6f:d6:3a:22:b6:a0:71:6e:f8:fc:41:01:
                    73:36:fd:e9:48:52:9f:a0:b6:67:a5:f1:d7:95:20:
                    7e:f8:40:ed:fa:aa:c3:73:4e:e2:a4:3b:3b:54:50:
                    e0:66:bb:f3:e2:65:0c:5d:ad:69:c9:23:86:ac:e6:
                    0f:70:04:02:5b:c3:1d:4e:e9:7d:b2:fc:bd:a2:50:
                    d7:6b:be:17:9f:d6:d0:e4:33:4c:23:3c:08:09:df:
                    46:75:ad:99:4e:94:c0:fd:04:f9:93:98:1d:b8:bf:
                    31:41:bf:76:3c:50:85:cb:8d:19:0e:f1:d2:a3:62:
                    6d:17:97:07:2b:38:82:6c:06:81:49:76:6b:e1:74:
                    d6:a4:12:a9:3f:ba:11:e9:e2:3e:ea:3f:c3:18:0e:
                    9e:61:7e:e9:24:c7:30:3b:82:94:36:c9:2e:bf:02:
                    cb:a1:ba:6d:dc:9a:0b:b7:e3:b3:b8:7a:12:00:23:
                    c4:a4:6c:ec:a3:8a:dd:2d:c4:fb:8d:b8:b7:0e:82:
                    5d:fc:e5:6a:ce:fc:03:34:87:64:bd:66:39:95:eb:
                    91:01:1a:11:b5:cf:df:90:79:e7:af:2c:89:36:04:
                    cf:ce:72:70:a2:6f:ac:da:f4:40:3a:02:bd:b0:f9:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:20:2D:BF:2B:D4:B2:6C:4E:A6:58:65:88:80:31:62:9A:ED:DE
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:6d:25:f0:75:cc:4f:b7:e2:9b:ee:1c:c3:8c:a4:9c:bc:
         48:74:3c:60:71:a0:61:94:0b:df:2c:c5:a9:46:35:29:56:ee:
         f1:d1:2a:4b:44:d5:ce:86:2c:df:0f:23:fd:ff:8a:fe:1e:9e:
         9c:8f:98:99:3a:ad:30:9f:e1:4b:63:ca:d4:92:4f:a9:6c:6b:
         56:5e:7e:2c:12:96:b5:72:88:44:c4:63:af:9c:4a:c2:3d:6a:
         e9:24:48:c5:ac:9c:5b:67:76:53:b0:a1:9a:d7:cd:49:93:50:
         a9:b8:45:ab:90:b6:eb:57:8a:65:09:ff:28:6e:0a:a6:04:12:
         60:4c:84:50:c8:cf:60:2a:bf:87:f4:53:7a:1a:59:7b:19:59:
         19:a3:b1:44:1f:5f:e2:95:9f:f7:26:87:61:3a:ec:1c:05:1a:
         8e:f9:b5:3f:d3:83:c7:82:18:e6:62:f0:0b:01:9d:48:76:21:
         11:be:ab:18:a1:25:6f:b4:71:05:30:a8:56:6e:aa:f1:60:69:
         f9:4a:0a:df:7a:f5:6e:9d:ad:c9:8a:ba:ed:d5:8e:ad:3d:71:
         88:5d:cd:35:d4:a1:8d:1f:39:84:d0:b2:3c:88:d0:f6:fa:1c:
         26:8e:fd:c4:c5:e7:6e:fb:c1:cf:f5:c8:fc:bd:e2:d4:17:24:
         63:cf:d5:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk0MkVBRjExMC8GA1UEBRMoNEUyNjUwRTJBQkEzNjVCMzlDRkUxNThFQ0E0REI0
OEQ2NDJDREI2NTAeFw0yNjAxMjUwMTE2MjdaFw0yNjAxMjcwMTE2MjdaMBgxFjAU
BgNVBAMTDTY5NzU2ZWVjLWFlZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCy7hX1RvO/zoJV+vJwlITszm/WOiK2oHFu+PxBAXM2/elIUp+gtmel8deV
IH74QO36qsNzTuKkOztUUOBmu/PiZQxdrWnJI4as5g9wBAJbwx1O6X2y/L2iUNdr
vhef1tDkM0wjPAgJ30Z1rZlOlMD9BPmTmB24vzFBv3Y8UIXLjRkO8dKjYm0Xlwcr
OIJsBoFJdmvhdNakEqk/uhHp4j7qP8MYDp5hfukkxzA7gpQ2yS6/Asuhum3cmgu3
47O4ehIAI8SkbOyjit0txPuNuLcOgl385WrO/AM0h2S9ZjmV65EBGhG1z9+Qeeev
LIk2BM/OcnCib6za9EA6Ar2w+SvnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULCUg
Lb8r1LJsTqZYZYiAMWKa7d4wHwYDVR0jBBgwFoAUTiZQ4qujZbOc/hWOyk20jWQs
22UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5NDJFL0Q1QTg5MDVDRkYwMDExRThCNDk2MDEyQUY4QUVBMjI4L1RpWlE0
cXVqWmJPY19oV095azIwaldRczIyVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1RpWlE0cXVqWmJPY19oV095azIwaldRczIyVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTk0MkUvRDVBODkwNUNGRjAwMTFFOEI0OTYwMTJBRjhB
RUEyMjgvVGlaUTRxdWpaYk9jX2hXT3lrMjBqV1FzMjJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANS20l8HXMT7fim+4cw4yknLxIdDxg
caBhlAvfLMWpRjUpVu7x0SpLRNXOhizfDyP9/4r+Hp6cj5iZOq0wn+FLY8rUkk+p
bGtWXn4sEpa1cohExGOvnErCPWrpJEjFrJxbZ3ZTsKGa181Jk1CpuEWrkLbrV4pl
Cf8obgqmBBJgTIRQyM9gKr+H9FN6Gll7GVkZo7FEH1/ilZ/3JodhOuwcBRqO+bU/
04PHghjmYvALAZ1IdiERvqsYoSVvtHEFMKhWbqrxYGn5SgrfevVuna3Jirrt1Y6t
PXGIXc011KGNHzmE0LI8iND2+hwmjv3Exedu+8HP9cj8veLUFyRjz9UB
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:24 2026 by rpki-client