This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
File:                     2F_mgUS9YwNoWB-XESFackVW1NQ.mft (raw, json)
Hash identifier:          9uyQPEL+HW6T8IRmJyyeqwM1wY0W7TqywFC7YCLCGBY=
Subject key identifier:   C7:4B:16:6A:9E:7B:DD:6F:37:57:D0:BF:91:95:90:9A:10:C0:90:2C
Authority key identifier: D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4
Certificate issuer:       /CN=F36A1FBCAF/serialNumber=D85FE68144BD630368581F9711215A724556D4D4
Certificate serial:       12
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
Manifest number:          12
Signing time:             Sun 25 Jan 2026 05:26:11 +0000
Manifest this update:     Sun 25 Jan 2026 05:26:11 +0000
Manifest next update:     Tue 27 Jan 2026 05:26:11 +0000
Files and hashes:         1: 2F_mgUS9YwNoWB-XESFackVW1NQ.crl (hash: h6ULHhZhkMsJ9ni4Rc3RTlYEV1Y8YWfNkcd+yWVbS5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1FBCAF, serialNumber=D85FE68144BD630368581F9711215A724556D4D4
        Validity
            Not Before: Jan 25 05:26:11 2026 GMT
            Not After : Jan 27 05:26:11 2026 GMT
        Subject: CN=6975a973-d132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5e:9b:34:49:13:37:d8:49:15:12:9f:05:24:
                    31:4a:56:8c:08:08:ca:f1:1a:b9:e3:bf:80:86:ee:
                    ba:0c:57:0b:c4:c2:c7:75:8b:90:a6:f5:16:ac:2d:
                    3d:4d:62:c3:94:8f:d4:5e:26:eb:df:6e:27:80:37:
                    1b:d8:94:29:3e:e0:20:7f:61:c8:01:f4:a2:03:e4:
                    f6:00:f2:2a:ab:14:2c:8c:a6:6d:bf:4e:7e:35:05:
                    ed:61:72:99:8c:ec:45:d9:65:b6:92:83:9d:f3:da:
                    56:08:1b:ce:96:00:da:f9:20:17:99:70:33:8a:a3:
                    8e:e3:40:f1:20:e4:66:61:17:8f:cd:63:69:22:6f:
                    6e:d6:af:e0:eb:95:74:d1:41:32:27:bb:67:61:30:
                    a0:fe:4a:33:56:aa:d0:4a:9f:7c:3d:2b:65:39:6d:
                    12:e0:69:9e:6e:b3:03:e4:2d:06:c8:9a:54:45:77:
                    1b:25:8d:d3:71:b6:1c:cc:c0:70:8e:7c:06:db:89:
                    25:a0:fd:11:55:d7:52:e5:1e:40:b8:94:d7:aa:e2:
                    af:5d:1a:d5:16:bd:88:c9:1e:1a:ad:e5:77:03:03:
                    d8:ed:7e:0c:f1:8f:9f:25:c4:b1:19:98:12:d0:c8:
                    61:2a:9d:79:a7:ea:5b:4e:38:89:0c:0e:ee:e3:ae:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:16:6A:9E:7B:DD:6F:37:57:D0:BF:91:95:90:9A:10:C0:90:2C
            X509v3 Authority Key Identifier:
                keyid:D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:de:6b:21:0c:e2:ae:be:af:b8:76:03:6e:71:6f:f2:c4:ca:
         d6:d2:18:fc:dd:85:0b:45:48:48:c5:11:87:26:70:25:4d:b9:
         1d:4d:bb:41:94:8f:4a:9a:4a:1f:d6:51:3f:2a:8a:e7:7e:c9:
         48:a9:c2:07:44:c0:83:96:0b:b1:b5:a6:7b:77:44:ac:c1:8e:
         ae:22:4a:16:07:be:94:18:fa:ab:4f:2d:3a:a5:e5:e8:23:dc:
         98:be:80:17:ca:5e:00:c3:ce:5f:47:05:75:49:d4:be:61:0d:
         f3:a8:43:87:c6:c1:89:ff:0b:f3:a9:cd:04:c2:cd:d6:b7:8a:
         da:cf:31:e5:9e:e4:12:ad:d0:00:24:04:28:2f:bf:5e:79:a8:
         12:b0:f7:be:7e:a9:4e:ed:a8:52:be:94:1b:9e:63:51:a1:81:
         7f:85:3a:72:dd:b8:43:5b:21:79:22:06:f0:3e:72:30:cc:08:
         b7:93:c8:9f:86:89:6d:37:79:1a:e7:9c:c3:81:a3:05:cb:7f:
         64:6d:c6:2e:d9:e0:49:b6:af:52:86:58:cc:8d:f0:cf:b2:9b:
         99:97:ec:8a:de:7a:8a:61:11:e2:0f:bf:de:b3:a3:8f:ff:22:
         2e:e9:53:46:08:47:60:7e:8a:a0:46:8e:aa:da:75:c3:52:aa:
         58:a9:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:13:54 2026 by rpki-client