This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File:                     3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier:          eOVUwJJCOXgM3Q7JpZ8QYgNmo/nXrCKpFBNqmK377Zs=
Subject key identifier:   32:F8:55:61:C9:C3:3E:04:F3:89:A1:68:05:21:2A:E1:11:E5:B6:D8
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer:       /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number:          01EC
Signing time:             Sat 24 Jan 2026 04:38:45 +0000
Manifest this update:     Sat 24 Jan 2026 04:38:44 +0000
Manifest next update:     Mon 26 Jan 2026 04:38:44 +0000
Files and hashes:         1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: ehPYi06IeG2GNbnxIHnrD51Ag3QWVMN9ropgKOo79ek=)
                          2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 04:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
        Validity
            Not Before: Jan 24 04:38:44 2026 GMT
            Not After : Jan 26 04:38:44 2026 GMT
        Subject: CN=69744cd5-33ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:a1:b1:74:90:4d:8d:12:96:31:cd:85:b4:
                    ba:91:21:d2:4c:13:af:d0:f1:dd:f0:5d:40:42:fb:
                    23:b0:15:53:6a:62:8b:a3:78:da:66:93:c9:18:aa:
                    ae:e4:94:0d:bd:95:7f:62:bf:cb:c6:cf:68:2d:0e:
                    b9:30:dc:a9:8b:84:16:b9:2d:2d:d0:36:74:3d:36:
                    a6:87:1a:4c:81:74:10:c6:da:b3:97:d2:2c:45:97:
                    95:9a:21:e7:73:bf:cc:cd:dc:6e:d0:cf:14:1a:c4:
                    36:58:6a:9e:0d:c5:9b:c2:35:e2:3c:12:61:f4:15:
                    6c:49:9e:c1:27:a0:58:d7:b5:ba:a8:97:50:06:ce:
                    1f:76:ff:79:d3:e4:54:83:d4:ed:ff:b3:c3:8e:5b:
                    51:e7:a0:c7:b7:a9:7e:ae:60:87:f5:1e:59:8a:f9:
                    c3:44:ac:17:85:86:9e:ab:75:84:9f:18:ae:a7:72:
                    42:2d:d3:9c:eb:d5:ca:4f:21:14:08:96:92:38:c9:
                    52:03:e0:f9:38:d3:3d:ad:25:de:f1:50:dc:d8:c5:
                    36:8c:dd:be:65:01:4d:1e:2f:a8:ef:13:59:12:dd:
                    ab:9f:d9:5b:b5:bf:7d:0d:3b:37:75:50:c7:75:e0:
                    c3:cb:3b:da:c0:63:d9:dc:47:52:24:8e:a5:56:d0:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F8:55:61:C9:C3:3E:04:F3:89:A1:68:05:21:2A:E1:11:E5:B6:D8
            X509v3 Authority Key Identifier:
                keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:ee:55:c8:33:54:63:73:b6:06:fa:1f:3d:23:46:25:c3:
         2d:54:91:27:6a:3f:34:20:43:59:23:c8:be:4b:e8:af:8c:83:
         35:d8:a6:86:01:9e:51:be:ea:5c:74:93:8b:e1:77:91:cb:58:
         ac:7f:ab:3c:37:c3:ec:ea:bf:d0:a5:a0:97:52:be:8a:70:40:
         72:d4:f5:48:f3:b5:5b:f3:a6:dd:5d:fd:2f:9b:31:b0:ac:54:
         4e:51:94:f9:97:3b:45:f1:1a:83:1b:a5:df:6a:7c:99:ee:ff:
         89:e9:6c:8e:90:e2:b3:90:6d:02:19:d7:0d:4d:fa:c1:77:f3:
         60:06:23:6d:4e:5f:e4:0d:9f:7e:8c:5d:93:df:37:35:d7:7f:
         ce:bf:8a:5e:de:02:b3:32:20:0b:2a:e3:d8:4a:60:61:76:d1:
         eb:83:37:87:4d:27:a8:ca:cc:b0:99:aa:68:36:c7:36:cc:6e:
         06:09:f3:6e:23:3c:e5:11:da:26:92:92:9b:73:75:9b:95:2f:
         83:64:08:64:b4:0a:c8:fd:cf:a3:88:cb:8f:d5:e6:f0:0a:07:
         57:19:91:8f:0f:0d:88:03:92:13:3b:ae:86:83:b0:d0:68:cb:
         a8:84:41:6f:be:c8:11:d3:c6:d5:15:f6:74:5a:7a:cd:5a:28:
         9e:43:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:42 2026 by rpki-client