This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          SL8IKwrZyETj73oEPNN3vWBsqyBz4OUtJyu+H3Nm0ew=
Subject key identifier:   41:8B:F6:7C:40:AC:33:CC:0A:9B:E1:6A:C1:B8:C6:55:D2:C6:1A:EE
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       0682
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          0681
Signing time:             Sun 25 Jan 2026 02:21:48 +0000
Manifest this update:     Sun 25 Jan 2026 02:21:48 +0000
Manifest next update:     Tue 27 Jan 2026 02:21:48 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: Kk1zDQahPR3ibXGF/uwzyvbfbz8actsxVOLrsYC+6rc=)
                          2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF, serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: Jan 25 02:21:48 2026 GMT
            Not After : Jan 27 02:21:48 2026 GMT
        Subject: CN=69757e3c-caf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:63:f6:5b:69:ee:ed:fa:e2:43:68:89:15:e9:
                    d9:b5:b1:0f:e0:89:e7:20:85:69:21:81:26:5c:7c:
                    97:46:6e:dc:0f:a6:45:ec:24:66:5b:79:89:a0:4f:
                    fe:2e:d8:0e:42:8e:0d:e6:81:ea:08:99:48:cb:43:
                    94:c6:8b:6f:04:ae:88:0b:ad:b8:b3:6d:60:b8:b4:
                    ca:1a:b1:b7:c9:0d:28:5d:ce:38:7a:4a:f7:53:b7:
                    7a:34:86:59:c0:83:d6:03:41:66:50:78:c2:a5:de:
                    d7:cc:23:8c:2b:b8:6c:9e:ef:a6:8e:0d:ba:60:28:
                    b4:e1:06:0a:92:ee:b2:87:ba:a8:ab:51:27:b9:8c:
                    0f:5c:82:d3:1f:70:da:91:dd:0a:44:ce:90:29:b5:
                    93:30:03:c7:fc:83:bd:05:67:1e:a2:77:03:da:bf:
                    22:69:cd:4e:ba:79:1f:36:1c:cf:49:7a:c6:76:89:
                    b3:92:51:c1:0a:c8:23:7d:d3:78:0b:6d:27:df:5f:
                    c6:cd:9c:ab:12:7e:af:df:5b:cb:91:49:48:b4:bf:
                    ae:d5:44:c8:8c:b2:db:72:35:01:39:3e:88:bf:d0:
                    80:2b:18:65:80:2e:94:15:3d:2b:32:79:13:7b:6a:
                    c5:c8:a1:a7:c3:a4:25:5b:89:fd:e9:0a:c7:f4:69:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:F6:7C:40:AC:33:CC:0A:9B:E1:6A:C1:B8:C6:55:D2:C6:1A:EE
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:42:5b:27:f3:fe:b1:54:75:84:59:ed:e1:e9:d2:18:d3:78:
         ee:ca:cd:6e:59:2c:2b:3a:ba:19:07:87:f3:9f:41:5f:a1:f5:
         b8:66:e5:33:26:f9:19:f2:d6:64:79:d6:48:be:a4:ae:d0:f2:
         8b:82:87:1b:01:fc:ec:64:b9:01:90:89:ec:bc:d6:db:0e:ea:
         0f:fa:19:e1:b0:93:20:34:d4:d0:c6:bd:91:73:03:63:c3:1f:
         ec:69:09:5c:84:5d:27:eb:98:23:15:78:5d:0c:93:e4:00:e6:
         92:51:74:46:46:44:d6:f0:ec:e7:f8:d0:8f:c7:2a:9d:4e:5a:
         ab:a9:b8:20:f5:34:3c:e1:d7:2c:0d:3a:4b:1b:bd:aa:58:61:
         fa:8e:ad:2d:fa:c8:80:80:52:01:c0:69:8f:ee:b0:98:f3:a8:
         8f:ae:db:f5:bc:30:8e:01:62:da:aa:70:60:1c:73:28:51:82:
         4d:71:c0:6c:e2:7d:0a:ad:e1:8f:a0:89:bb:34:5f:bf:e1:07:
         26:72:d5:19:ab:9c:49:2f:e5:c3:86:d2:fe:2b:9f:01:a7:63:
         c7:af:3a:74:25:a7:7d:3a:bf:56:54:cb:a0:6d:ad:57:a4:f9:
         df:34:ce:bf:b3:d2:24:c4:89:61:d6:cd:19:0a:70:e0:13:26:
         93:c5:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:17:09 2026 by rpki-client