This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          Bllr7E5u3qMq2JKK/IYVXgjqk9epJEy5aTVT1RUzujY=
Subject key identifier:   03:EF:9F:4A:4A:FE:B3:E0:F7:49:B5:F5:92:D7:73:C8:86:E1:E4:C1
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          0424
Signing time:             Sun 25 Jan 2026 03:23:27 +0000
Manifest this update:     Sun 25 Jan 2026 03:23:26 +0000
Manifest next update:     Tue 27 Jan 2026 03:23:26 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: i/tiS/I3xpumJvxqqGpD6aX8SmxNDAfF6GlnxVnjYuo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF, serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Jan 25 03:23:26 2026 GMT
            Not After : Jan 27 03:23:26 2026 GMT
        Subject: CN=69758caf-a450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:d2:f3:39:5a:26:00:64:04:b1:cf:d0:bb:
                    63:f5:e4:a9:6a:c3:da:ed:e1:6c:d4:fd:0d:f4:a4:
                    35:11:b4:10:25:9f:f1:c8:82:b9:22:16:ac:8b:d2:
                    7a:f2:6f:14:36:63:0c:15:07:fd:20:1e:2b:46:41:
                    5c:29:07:c0:f5:58:b7:26:9b:22:1c:9d:45:32:78:
                    0c:20:d4:e9:ad:99:3c:6b:bb:66:cf:95:9f:a0:65:
                    1f:5b:1c:e2:36:84:0d:71:24:45:77:19:5a:11:36:
                    6e:09:6b:f6:7e:51:c5:75:9f:68:c5:8d:72:49:f8:
                    f7:1d:12:00:b5:59:fd:65:96:73:12:8d:e1:4f:e1:
                    81:9a:25:85:b2:12:b0:2e:a6:82:16:c6:e8:31:98:
                    d7:33:70:b3:7f:7f:e8:cc:2b:fc:c6:54:76:8e:5d:
                    73:e7:bc:f3:10:5d:09:1f:ad:de:8c:1d:e3:0d:9f:
                    ed:25:14:e1:d9:2c:4f:86:05:f0:31:3c:e2:ca:90:
                    77:50:ee:c4:a6:54:5a:9d:e6:03:66:34:ce:a5:17:
                    55:5d:9a:ec:92:bc:f2:b2:d9:5b:f8:d9:3d:df:07:
                    ad:ce:a6:a9:b0:44:f8:47:49:87:9b:7c:54:83:09:
                    b6:6e:1c:d5:e6:f9:b8:25:fc:d1:a4:64:13:d6:dd:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:9F:4A:4A:FE:B3:E0:F7:49:B5:F5:92:D7:73:C8:86:E1:E4:C1
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:3d:29:f6:f5:9f:9d:86:28:4a:bf:5a:cc:d3:82:e0:62:
         e7:c6:71:95:4e:d1:79:a4:14:1e:da:92:e5:84:78:b8:97:b4:
         c1:ad:1e:67:18:2a:a3:98:4c:4b:1a:11:b5:9e:d5:43:c2:1f:
         35:de:69:6e:d3:c2:66:24:ee:b6:c2:bb:8d:c3:25:8e:2f:d4:
         94:ef:47:d1:13:b6:00:5a:ba:a1:70:50:6c:d6:c1:31:c3:53:
         e1:30:c2:cb:f0:f3:43:1c:90:70:a8:31:e6:77:4f:52:6e:69:
         d1:e8:8a:ff:b4:80:41:d5:3e:54:03:cc:06:b6:42:09:33:6f:
         27:23:df:39:76:24:a8:66:a6:54:c9:5d:4f:19:90:e6:72:87:
         48:dc:9c:65:a6:e7:40:bb:df:10:40:dc:0a:fc:0d:2b:52:0b:
         09:9a:05:e1:31:f3:fd:4a:14:1c:dd:80:21:a5:b2:a2:b7:d7:
         72:1a:5f:a0:90:39:e2:9e:39:a4:a5:b9:75:76:88:12:59:c7:
         3c:56:e0:c2:ca:94:17:50:56:3e:7b:33:6f:82:92:5e:83:94:
         26:ae:79:89:a9:0c:fb:83:01:8b:4f:e0:38:b8:36:8c:25:86:
         80:5f:60:ab:de:7b:5b:5d:23:e1:ae:ae:b8:d3:ca:70:91:72:
         15:21:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:39 2026 by rpki-client