This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
File:                     jLiroOzpR3OblerbiB6h0NL_09A.mft (raw, json)
Hash identifier:          klx+68CYZMo6ezIlPDr6z9/M8WxEBdM+5I2pTXjPAv8=
Subject key identifier:   0A:3F:94:2A:46:2C:9F:F1:98:1F:BB:3B:E7:51:37:C2:1C:21:84:90
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       0700
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
Manifest number:          06FA
Signing time:             Sun 25 Jan 2026 02:07:11 +0000
Manifest this update:     Sun 25 Jan 2026 02:07:10 +0000
Manifest next update:     Tue 27 Jan 2026 02:07:10 +0000
Files and hashes:         1: jLiroOzpR3OblerbiB6h0NL_09A.crl (hash: QbhXFu9RcmJZf751EahDUU85XqDCO3JgxyIuutNIgw8=)
                          2: 06B9D42AF61611ECAF0145A7F1222468.roa (hash: ZkZi5c3qAfrGNQ9aUVW0NJoTh+2Y56khQsoX1Uod1CU=)
                          3: 38F20E1CF61611EC85A7D7A7F1222468.roa (hash: J5ZwYpd8zpJJL+YkWJs1rcfStoOYvR7BeBiXX5uQj5U=)
                          4: C90FF62AA8CA11EBBB067F7DF8AEA228.roa (hash: 7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=)
                          5: EBABDFC0F61511ECA6D8D2A6F1222468.roa (hash: +w3GhW+G1ceqVePvkDmbwEPcqcRRKwBS3GxP2vD4dHk=)
                          6: B74802AEB6EC11EBA8259758F8AEA228.roa (hash: APjLaXV6AoRKGJ3Woce92XxXLC4ufsyIkSG6DvxDn0M=)
                          7: 21659E62F61611EC8A629FA7F1222468.roa (hash: K3H0Xpb9HfTwe5/8TDcO+IS8XACso1/jjmZZmVkGtBc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Jan 25 02:07:10 2026 GMT
            Not After : Jan 27 02:07:10 2026 GMT
        Subject: CN=69757acf-9c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:fe:a3:89:30:98:c9:37:89:2c:b5:22:95:
                    6a:35:7c:b0:d8:78:57:8a:81:b0:6a:40:0d:78:c6:
                    54:30:d9:8a:69:b9:7f:75:66:dc:43:1f:8a:a3:bb:
                    d5:e2:23:61:b1:06:fc:b1:39:5a:80:f6:91:0d:f8:
                    9e:95:79:2d:da:9d:e4:8e:df:72:a6:fb:a7:bf:6a:
                    1b:28:09:71:61:7f:3c:bb:a4:98:9b:c2:21:b2:b6:
                    74:40:fe:68:14:81:d7:84:87:8f:de:b7:21:2b:e2:
                    65:d0:f2:97:35:cb:0b:82:a6:04:c1:2b:aa:5c:6f:
                    d8:72:57:79:13:43:66:08:9f:c6:96:b3:db:9f:70:
                    7b:70:3f:94:db:74:0f:f4:5c:42:0b:67:b3:f1:e4:
                    5e:30:01:91:90:38:72:9f:4d:2b:fe:0d:1e:5c:71:
                    9d:14:5e:5a:c7:0c:b3:37:2c:7f:e0:79:95:51:a8:
                    91:28:48:9a:00:91:c7:97:9f:b8:13:71:6a:f0:c4:
                    3f:00:90:a1:82:55:c6:82:20:2b:ca:12:c0:2f:ac:
                    73:45:54:37:46:c9:a1:f0:f6:da:ad:1f:03:2b:c4:
                    b8:bf:10:52:2a:0b:e8:92:5d:a2:10:a4:44:24:24:
                    e0:91:45:b7:2c:7e:9c:88:0f:37:de:6c:40:58:d6:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:94:2A:46:2C:9F:F1:98:1F:BB:3B:E7:51:37:C2:1C:21:84:90
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:93:75:a6:f9:32:78:5d:db:4b:24:31:8f:40:83:77:f9:
         62:9a:a1:27:ba:bd:8d:54:6f:42:8d:fc:a2:5e:5d:00:6f:9e:
         03:b5:a9:0e:df:19:81:0b:14:fb:a1:11:74:85:f3:e9:82:83:
         d4:9f:be:bd:0f:9f:93:20:ce:ea:ac:77:7f:75:8f:4b:99:d5:
         cf:55:09:2b:21:20:c7:c4:db:35:40:4d:83:1a:10:a2:f3:58:
         4b:84:a9:a8:7c:0f:a2:1b:b2:23:cb:70:a9:93:e1:3d:c2:4e:
         c7:70:46:98:35:a5:67:c7:bf:40:22:3e:b6:06:f7:3b:46:81:
         9f:14:01:ba:46:fa:e6:a4:c2:50:85:c9:df:53:e8:dd:5f:8e:
         63:30:52:60:8d:ed:e6:b2:9d:d3:05:b5:a5:a9:a3:6f:87:86:
         86:b5:c9:c0:1e:06:0e:51:ce:0d:22:6b:ad:9e:a2:c6:eb:e8:
         d4:f2:4d:38:ce:5d:71:5d:8a:80:57:f8:63:5f:d1:80:2d:11:
         58:9b:df:e8:f1:4f:dc:dd:d4:a4:fd:a7:33:5d:26:a7:27:31:
         fd:0b:70:7e:54:21:f0:41:c1:30:25:0d:20:34:81:d6:ae:a6:
         49:51:af:09:34:5e:9a:ae:ad:5f:77:1a:cb:c5:f1:3e:df:11:
         e9:10:31:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk3RjBBRjExMC8GA1UEBRMoOENCOEFCQTBFQ0U5NDc3MzlCOTVFQURCODgxRUEx
RDBEMkZGRDNEMDAeFw0yNjAxMjUwMjA3MTBaFw0yNjAxMjcwMjA3MTBaMBgxFjAU
BgNVBAMTDTY5NzU3YWNmLTljNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKVP6jiTCYyTeJLLUilWo1fLDYeFeKgbBqQA14xlQw2YppuX91ZtxDH4qj
u9XiI2GxBvyxOVqA9pEN+J6VeS3aneSO33Km+6e/ahsoCXFhfzy7pJibwiGytnRA
/mgUgdeEh4/etyEr4mXQ8pc1ywuCpgTBK6pcb9hyV3kTQ2YIn8aWs9ufcHtwP5Tb
dA/0XEILZ7Px5F4wAZGQOHKfTSv+DR5ccZ0UXlrHDLM3LH/geZVRqJEoSJoAkceX
n7gTcWrwxD8AkKGCVcaCICvKEsAvrHNFVDdGyaHw9tqtHwMrxLi/EFIqC+iSXaIQ
pEQkJOCRRbcsfpyIDzfebEBY1gQzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCj+U
KkYsn/GYH7s751E3whwhhJAwHwYDVR0jBBgwFoAUjLiroOzpR3OblerbiB6h0NL/
09AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5N0YwLzQyODU3RjA4QThDQTExRUI4NzdGRDA3Q0Y4QUVBMjI4L2pMaXJv
T3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pMaXJvT3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTk3RjAvNDI4NTdGMDhBOENBMTFFQjg3N0ZEMDdDRjhB
RUEyMjgvakxpcm9PenBSM09ibGVyYmlCNmgwTkxfMDlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtZ5N1pvkyeF3bSyQxj0CDd/limqEn
ur2NVG9CjfyiXl0Ab54DtakO3xmBCxT7oRF0hfPpgoPUn769D5+TIM7qrHd/dY9L
mdXPVQkrISDHxNs1QE2DGhCi81hLhKmofA+iG7Ijy3Cpk+E9wk7HcEaYNaVnx79A
Ij62Bvc7RoGfFAG6RvrmpMJQhcnfU+jdX45jMFJgje3msp3TBbWlqaNvh4aGtcnA
HgYOUc4NImutnqLG6+jU8k04zl1xXYqAV/hjX9GALRFYm9/o8U/c3dSk/aczXSan
JzH9C3B+VCHwQcEwJQ0gNIHWrqZJUa8JNF6arq1fdxrLxfE+3xHpEDGv
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:25 2026 by rpki-client