This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          dgHddYcU6Ot+0rVyXoQLLN1hNFj4OLj1DT0HekwnKLU=
Subject key identifier:   6A:91:3F:27:7C:3D:66:97:F1:C3:5C:29:1C:FA:4C:9F:C4:A3:E7:B7
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       09BC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          09BB
Signing time:             Mon 26 Jan 2026 01:27:40 +0000
Manifest this update:     Mon 26 Jan 2026 01:27:39 +0000
Manifest next update:     Wed 28 Jan 2026 01:27:39 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: bYxk5rotuHMxtF71+QUcgq9WaelgpvFvTn9HnhqejoY=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Jan 26 01:27:39 2026 GMT
            Not After : Jan 28 01:27:39 2026 GMT
        Subject: CN=6976c30c-13d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:21:2f:14:f6:fa:1a:18:82:a5:0a:f1:a8:
                    74:17:e7:82:43:bc:6b:cd:dc:4f:f9:56:21:f0:af:
                    bf:4b:a4:49:2c:6c:97:05:ea:87:8a:4b:73:b6:62:
                    b0:2d:03:12:29:a0:42:42:76:9e:ba:b9:08:94:4e:
                    b9:7d:ca:bf:a7:c5:6d:ca:51:66:f5:4c:89:7b:c1:
                    9d:b5:91:92:76:e9:67:78:ad:a6:f6:b4:f3:7e:76:
                    4c:c7:57:85:80:6d:93:3d:b3:5c:2d:80:56:45:e9:
                    26:d0:62:80:3a:91:26:27:4c:8a:64:7e:22:1b:d4:
                    11:21:1c:70:74:de:3f:60:48:66:6d:cc:c4:7f:fc:
                    eb:e7:fe:cd:4a:25:62:41:60:e2:60:a8:b7:d9:c2:
                    ce:43:7a:1b:f6:b1:80:c2:3e:1b:c3:14:77:dc:db:
                    6b:8e:30:a9:14:dd:07:54:18:9e:93:e5:0d:64:40:
                    f5:f8:2b:b0:7e:9d:09:f6:12:4f:24:30:b8:ed:a2:
                    06:05:ab:a5:33:1e:f5:db:ef:a7:3f:e0:b8:ea:e0:
                    92:3f:93:d9:a0:a7:3c:8b:29:b4:92:05:37:9c:7a:
                    93:3f:88:bb:63:27:66:cc:e9:e0:86:13:59:74:3d:
                    fb:34:11:5f:2a:43:8b:8e:b5:8f:8a:3b:bd:c3:d2:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:3F:27:7C:3D:66:97:F1:C3:5C:29:1C:FA:4C:9F:C4:A3:E7:B7
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:95:aa:c5:6e:ad:c9:fc:9f:19:43:38:b5:d0:27:1b:ad:09:
         84:be:16:9b:9a:ca:44:b0:2d:ab:6e:3d:ea:5f:3b:52:c4:9a:
         6b:7c:bf:b8:e6:47:ec:05:56:bc:f8:67:24:6f:e6:61:d8:e6:
         7b:5f:b9:1c:08:e2:27:72:4f:ad:35:51:f1:6b:13:3d:7a:87:
         de:bc:d3:07:61:17:6d:d3:00:ed:a2:b7:26:64:95:a0:51:8b:
         9d:42:af:55:3a:24:73:1f:3c:d5:6e:29:b2:31:92:83:68:1d:
         c5:83:0e:7f:c1:32:c9:48:f1:82:92:0b:9f:60:20:93:1a:c8:
         0d:1c:c8:46:54:5b:69:86:47:5c:22:44:ee:bf:f4:24:5d:1d:
         92:48:71:4c:41:01:12:9a:92:d7:89:e1:e3:92:8d:7d:60:e7:
         9e:67:56:f7:5c:c8:48:05:23:e3:39:30:66:c3:04:ce:74:e4:
         29:97:2f:a5:92:2a:43:fe:7a:73:c7:1b:82:49:6e:4a:6a:12:
         cc:45:0b:03:6d:c9:9d:1a:2a:a2:e5:8c:26:57:f7:12:f0:20:
         d8:e8:50:c0:dc:23:c9:1c:43:da:32:aa:79:dd:ef:ba:e3:f6:
         ee:3d:b3:53:7d:35:d5:61:2f:6c:f8:81:98:e6:b4:d4:0d:0d:
         85:a3:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:06 2026 by rpki-client