This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
File:                     PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft (raw, json)
Hash identifier:          VhiEXreyVNAchKGBE2ZexRMG1iNFT90s3RxK0qtGlEw=
Subject key identifier:   35:9C:3E:56:D7:BD:61:D3:04:B7:CF:C0:AA:76:A7:7B:1E:04:41:FA
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       0F35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
Manifest number:          0F29
Signing time:             Sun 25 Jan 2026 00:57:38 +0000
Manifest this update:     Sun 25 Jan 2026 00:57:37 +0000
Manifest next update:     Tue 27 Jan 2026 00:57:37 +0000
Files and hashes:         1: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl (hash: tLmtWN5CHBeJRQdBatUq2TeU799Y0yVMe61srVeF0wI=)
                          2: 27245A66C4C411F09B86D9E0DAE4EC9C.roa (hash: RhP+q0hcR9r0TqI0DJg5TlVHEkwdaQaUB4Vwe66w/4w=)
                          3: A19476D4C4C211F098DC65D8DAE4EC9C.roa (hash: ChEp6ZWIlk0DrDsY4PbxeB0oWgH6YxSvcg1AG3DA7vw=)
                          4: 699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (hash: MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Jan 25 00:57:37 2026 GMT
            Not After : Jan 27 00:57:37 2026 GMT
        Subject: CN=69756a82-02a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:1a:ce:61:e0:e6:60:ef:02:38:0d:6e:43:
                    51:1e:28:85:10:3f:80:ef:8a:ee:87:13:0e:86:64:
                    44:6d:02:3d:d5:15:0d:b2:4a:ae:b0:ed:53:74:63:
                    f3:9a:cc:5b:ae:3d:9e:07:cd:5d:25:5d:23:f4:d2:
                    fd:db:39:01:0c:04:4a:8f:9a:31:1c:31:40:d2:81:
                    64:d9:bd:8c:40:27:d6:be:06:61:e1:3e:5b:8c:5c:
                    ca:8c:45:93:e3:2c:ee:c2:e9:aa:c3:01:ea:8c:99:
                    6a:8d:a6:cd:96:5f:41:81:63:5a:c1:f5:3c:ce:80:
                    5a:6e:be:ee:f5:f1:33:1a:4b:f2:93:1e:04:35:95:
                    2d:3f:cd:5f:ba:be:80:5b:ae:14:b4:c3:cf:ed:8a:
                    f4:eb:73:80:bb:b0:0c:b1:a0:7d:40:42:71:e7:8c:
                    bd:8c:22:b8:88:a2:a7:a2:71:da:05:92:61:14:68:
                    2a:a3:a1:91:5f:75:3a:08:71:c0:3d:0f:06:da:2d:
                    9a:4c:02:d1:7e:c9:01:cf:6b:18:e3:4e:bf:27:df:
                    8f:29:7b:47:a7:6a:d6:87:81:81:79:99:e1:99:02:
                    d5:99:f5:13:e0:16:06:95:a8:98:29:e2:8d:de:0b:
                    e9:9a:4b:53:17:19:cb:1e:6b:6c:73:9c:fd:c4:b1:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9C:3E:56:D7:BD:61:D3:04:B7:CF:C0:AA:76:A7:7B:1E:04:41:FA
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:31:4e:d3:e6:43:11:6a:c7:1d:a2:47:ca:23:74:39:16:
         2e:2e:1e:e2:c8:68:b6:82:72:c4:5c:22:80:5e:5d:67:b0:bc:
         86:31:e8:25:d4:66:3e:55:da:8c:b1:01:fe:95:d5:8b:4e:e0:
         7f:ee:65:2b:28:d2:57:2b:c9:ab:4a:e5:f9:dd:e6:f7:9e:c7:
         52:f2:58:cd:2b:cd:db:46:04:98:f8:d4:93:8a:da:2e:2c:bd:
         a1:ed:bd:aa:bd:0d:4e:a3:f8:08:bc:27:fd:1c:0c:7a:27:46:
         22:d4:34:ad:5e:7e:f5:9d:be:42:f7:ae:f7:a9:1f:6a:7b:0b:
         86:f9:1c:1e:24:95:aa:c8:df:7b:fe:83:d3:df:c1:a9:e8:39:
         25:7f:0e:85:51:da:f9:a1:b7:72:76:5f:f4:fa:e2:fa:c1:a1:
         fb:e1:e8:00:44:34:9d:5d:91:65:f7:dc:41:24:d7:36:87:51:
         3e:89:31:55:bc:a4:c8:08:d5:8d:b8:00:47:ac:60:a5:14:0b:
         31:b3:9e:e1:5f:c0:ea:b8:1e:73:69:cf:0e:a0:52:e7:f5:46:
         e2:8e:11:6f:47:e5:05:e1:8a:30:6d:cf:55:66:3a:77:0a:ca:
         c6:31:a3:31:9d:4c:09:0a:c7:00:60:97:43:9d:88:98:0f:60:
         e8:74:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:32 2026 by rpki-client