This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          urxHfrVbMQlz1dYeGZxO0beK74NzcEcMhTlEJTNdBcQ=
Subject key identifier:   A3:FF:D1:EB:CD:58:BF:32:3E:E1:7B:4F:4C:B1:53:BA:5B:33:D8:51
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       03D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          03D6
Signing time:             Sun 25 Jan 2026 03:33:27 +0000
Manifest this update:     Sun 25 Jan 2026 03:33:26 +0000
Manifest next update:     Tue 27 Jan 2026 03:33:26 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: DTkTOHLesTQNuBhE9eNt1ypSk0KCJPwZ37Rd1Y+E8aE=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Jan 25 03:33:26 2026 GMT
            Not After : Jan 27 03:33:26 2026 GMT
        Subject: CN=69758f07-063a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:44:a5:36:47:60:b3:b4:b8:03:87:b1:e1:84:
                    0f:86:e5:46:d8:48:a4:0a:17:6f:70:ff:e9:55:5d:
                    e9:4a:95:2b:b6:f5:97:6a:8a:a1:ea:a1:f9:3d:f2:
                    51:e5:da:88:d3:a2:cb:1c:0f:9f:e4:17:22:4e:90:
                    93:22:9d:28:dc:84:0a:5e:c3:44:05:29:13:dd:60:
                    fd:c3:87:ca:e8:be:0a:74:12:0b:e0:fc:d0:fd:9d:
                    ae:9b:87:90:5e:99:0f:60:15:c0:56:1f:e8:76:8b:
                    c4:eb:11:5c:28:e5:8f:58:02:92:34:52:81:b0:6b:
                    0e:7c:de:53:1d:51:0e:b2:01:4f:58:2b:3c:39:ae:
                    ec:da:ff:c8:5c:4f:8d:41:ed:93:f2:57:a5:8c:dd:
                    db:78:97:67:67:0a:4f:08:29:e9:96:c4:10:e1:f5:
                    f7:4c:d4:e5:24:5c:c3:83:04:4c:fd:c7:32:80:3b:
                    98:be:75:98:b0:c1:24:43:83:89:d5:bf:6e:e1:f6:
                    d4:f7:93:0a:dc:ea:05:31:e2:0c:4b:35:6b:8c:3f:
                    5d:eb:e7:46:38:3a:c6:98:bc:1b:ce:5e:b9:65:c4:
                    e1:16:b1:be:02:21:49:b6:a8:5a:e9:7c:dc:e1:00:
                    da:88:ae:20:ef:3c:ad:77:87:72:af:d7:26:72:26:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FF:D1:EB:CD:58:BF:32:3E:E1:7B:4F:4C:B1:53:BA:5B:33:D8:51
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:cb:cd:50:40:87:aa:ee:91:37:46:27:53:63:b7:ff:81:
         f0:82:0c:3a:1a:1e:25:e3:eb:cb:e4:27:a4:3a:be:bd:83:d6:
         cd:56:1b:86:48:61:d4:84:57:a0:ca:96:7d:83:f8:f2:ab:6a:
         48:cd:fd:d6:1e:72:df:30:03:45:7d:67:03:f6:d3:5c:cb:fd:
         65:27:f0:ee:8b:ef:8c:5e:dc:d3:29:14:af:9d:a4:d7:31:91:
         15:27:4e:21:e8:d0:f6:60:1b:04:91:61:17:c6:89:f0:e5:df:
         2b:c0:42:27:43:c2:68:12:68:70:a4:e7:da:d9:b1:81:85:32:
         b6:9c:6f:3e:b8:61:bd:c1:9b:0e:47:9f:71:65:a1:e6:ab:57:
         d0:bf:59:fb:3d:0c:d4:cd:d5:33:9d:b6:6b:c9:9b:a0:30:05:
         c0:f7:c2:ee:51:a4:9e:91:47:9e:64:b6:b0:10:4f:48:14:de:
         ea:63:f0:35:0b:87:41:9a:af:bf:86:c6:a5:18:a9:47:2c:7c:
         0f:da:a1:a1:6f:5d:44:72:4a:e4:6c:c5:33:85:ff:a5:8b:c8:
         30:42:af:81:43:e0:24:0f:19:4b:15:78:71:4d:09:02:ba:82:
         69:c0:3a:e6:df:72:d7:d1:cd:6f:d7:9d:fd:19:7c:6c:cf:f1:
         6b:76:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:09 2026 by rpki-client