This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          cIYVJsJpC0J9A5ABNagIYgSL/3Q8+PCxgd681vk4Js0=
Subject key identifier:   23:D5:5E:08:27:43:86:03:17:9C:4E:6B:46:EC:F1:8B:9A:A9:7D:DE
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          044F
Signing time:             Sun 25 Jan 2026 03:17:38 +0000
Manifest this update:     Sun 25 Jan 2026 03:17:37 +0000
Manifest next update:     Tue 27 Jan 2026 03:17:37 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: rgYBMVwSrBCuJ7hlb3vJbyA/pWqgMArjLi4+y4zZUiE=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF, serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Jan 25 03:17:37 2026 GMT
            Not After : Jan 27 03:17:37 2026 GMT
        Subject: CN=69758b52-f4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:5b:d7:2c:3b:69:d8:30:a5:b9:77:6e:6a:
                    36:3d:f7:21:af:72:4a:49:2f:a3:d0:6f:23:de:ef:
                    77:2e:83:15:9c:62:20:1e:0a:f6:52:8f:65:ca:1f:
                    ef:b9:de:74:97:90:d5:9a:25:a1:52:f5:11:17:ca:
                    61:1b:14:f3:e1:d9:66:5d:39:f9:d4:2c:05:6b:42:
                    31:4d:8c:cc:aa:fb:56:a9:05:af:76:bd:c9:fa:38:
                    90:40:41:6b:79:d7:97:e1:7f:49:06:ea:0a:9f:cd:
                    d7:a3:61:a6:f7:0b:43:96:10:da:98:5c:3c:d1:f4:
                    5e:84:41:4b:88:0e:70:29:2f:f7:7a:26:7a:b9:f0:
                    86:8e:78:0f:ee:54:04:b4:e9:4e:e4:de:c1:91:8c:
                    3f:3f:fb:0b:d9:d6:0c:c5:29:51:10:55:75:84:74:
                    58:ae:b5:67:f3:64:e3:58:0d:b8:05:2c:12:2e:37:
                    28:d7:4d:d8:45:59:5a:a3:75:0f:4f:58:fa:da:2a:
                    40:cd:cd:e8:17:5f:8d:f2:8c:69:80:f0:5d:fc:7b:
                    f4:e9:7e:bb:56:ce:e9:f4:ae:e4:bc:cc:7a:d2:94:
                    4b:20:e2:2f:bc:09:d8:96:46:3f:6f:f7:d2:cd:c6:
                    51:7b:a8:a9:b8:ac:4e:78:1e:28:30:72:e3:04:ef:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:5E:08:27:43:86:03:17:9C:4E:6B:46:EC:F1:8B:9A:A9:7D:DE
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:d6:99:37:3a:19:71:c4:51:e7:ed:fb:e7:3b:0f:6c:86:
         84:e3:cd:aa:e3:5a:85:ac:73:38:cd:a6:62:14:fb:f1:3f:6f:
         5a:27:3d:9f:ee:e7:b0:01:f4:1e:51:ba:c1:5b:23:49:34:fe:
         ca:69:c1:3e:4e:ec:4d:5e:11:b1:2b:f9:d5:84:33:ac:27:71:
         20:fd:e2:93:d8:d9:16:6b:30:47:54:e1:4a:cb:b3:73:a5:bb:
         0a:a7:7f:7e:af:d1:c2:ce:7b:30:27:60:fb:34:f0:a6:d9:b5:
         9e:78:7b:f3:bb:56:4b:c8:32:79:64:92:f3:1b:bc:3e:a2:f6:
         79:9c:b9:fc:1a:f6:42:e8:cb:6d:6b:1c:04:11:37:0c:23:9e:
         61:19:ff:62:50:f5:2e:f3:a1:f0:23:e8:fa:69:f2:e5:c2:f7:
         53:76:15:34:5a:93:a3:ce:50:9a:64:67:6d:50:16:c8:17:25:
         3d:d3:8e:16:79:4f:97:a9:cf:02:0e:a5:78:92:af:d6:47:d5:
         de:94:77:6e:d1:2a:29:bb:57:76:42:dd:78:26:ba:d6:0f:c6:
         44:f3:92:3f:45:57:aa:6e:b1:94:58:44:a6:a1:b5:ba:7c:b7:
         cc:38:15:95:10:48:cb:35:e2:d3:15:14:44:5a:52:98:ce:13:
         23:71:1e:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTg1NEZBRjExMC8GA1UEBRMoOEJFNDAzNUJFQkM5QzgzNDI4QjVBMjdCRTg1QkFD
OTY2RDc2RTVDQjAeFw0yNjAxMjUwMzE3MzdaFw0yNjAxMjcwMzE3MzdaMBgxFjAU
BgNVBAMTDTY5NzU4YjUyLWY0YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwYlvXLDtp2DCluXduajY99yGvckpJL6PQbyPe73cugxWcYiAeCvZSj2XK
H++53nSXkNWaJaFS9REXymEbFPPh2WZdOfnULAVrQjFNjMyq+1apBa92vcn6OJBA
QWt515fhf0kG6gqfzdejYab3C0OWENqYXDzR9F6EQUuIDnApL/d6Jnq58IaOeA/u
VAS06U7k3sGRjD8/+wvZ1gzFKVEQVXWEdFiutWfzZONYDbgFLBIuNyjXTdhFWVqj
dQ9PWPraKkDNzegXX43yjGmA8F38e/TpfrtWzun0ruS8zHrSlEsg4i+8CdiWRj9v
99LNxlF7qKm4rE54HigwcuME7zL9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUI9Ve
CCdDhgMXnE5rRuzxi5qpfd4wHwYDVR0jBBgwFoAUi+QDW+vJyDQotaJ76Fuslm12
5cswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE4NTRGLzVFODdDMDQyQjczNDExRURBOEQ0Q0NBNEYxMjIyNDY4L2ktUURX
LXZKeURRb3RhSjc2RnVzbG0xMjVjcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ktUURXLXZKeURRb3RhSjc2RnVzbG0xMjVjcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTg1NEYvNUU4N0MwNDJCNzM0MTFFREE4RDRDQ0E0RjEy
MjI0NjgvaS1RRFctdkp5RFFvdGFKNzZGdXNsbTEyNWNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByLdaZNzoZccRR5+375zsPbIaE482q
41qFrHM4zaZiFPvxP29aJz2f7uewAfQeUbrBWyNJNP7KacE+TuxNXhGxK/nVhDOs
J3Eg/eKT2NkWazBHVOFKy7NzpbsKp39+r9HCznswJ2D7NPCm2bWeeHvzu1ZLyDJ5
ZJLzG7w+ovZ5nLn8GvZC6MttaxwEETcMI55hGf9iUPUu86HwI+j6afLlwvdTdhU0
WpOjzlCaZGdtUBbIFyU9044WeU+Xqc8CDqV4kq/WR9XelHdu0Sopu1d2Qt14JrrW
D8ZE85I/RVeqbrGUWESmobW6fLfMOBWVEEjLNeLTFRREWlKYzhMjcR4C
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:25:00 2026 by rpki-client