This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          xmBlS2XiEacCVtszR4oZXMYyiIMC/SZZM1vPLLrW/5I=
Subject key identifier:   B6:80:BF:C1:69:AF:6C:BC:E5:B3:E9:04:70:6A:74:00:C8:15:FE:6B
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0F74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0F72
Signing time:             Sun 25 Jan 2026 00:51:28 +0000
Manifest this update:     Sun 25 Jan 2026 00:51:27 +0000
Manifest next update:     Tue 27 Jan 2026 00:51:27 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: PKUYKBvTIJTFuH/CK0hnP7i+LHrV2jwRM+URCWNjl2w=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3956 (0xf74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Jan 25 00:51:27 2026 GMT
            Not After : Jan 27 00:51:27 2026 GMT
        Subject: CN=69756910-9fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:8f:a9:a4:81:62:14:18:60:49:23:d1:a1:
                    e3:97:4b:91:a8:41:49:4e:fc:a3:9f:42:24:63:27:
                    4a:73:35:e2:ac:9d:24:66:cf:d2:34:6e:b9:ce:94:
                    31:f8:ef:d7:79:06:7a:2f:81:45:7d:ab:83:3d:04:
                    c8:e1:fb:bc:d3:d3:17:ae:65:fa:6b:4e:1e:52:8e:
                    1a:9f:68:c2:d7:5d:ea:7f:cf:6f:da:f8:1c:80:92:
                    a8:b9:20:64:28:ca:10:75:05:23:c2:9a:7e:1f:d4:
                    88:4c:49:14:55:00:d5:57:2c:25:6c:c9:5f:35:45:
                    ea:de:2a:ca:ea:73:91:b4:11:c6:19:b4:1e:cb:22:
                    5f:52:f0:f1:d6:30:b7:c4:4e:d0:ed:3f:4b:91:8e:
                    37:b3:1d:62:6f:04:d8:bf:54:3c:66:0e:8f:3b:25:
                    d8:0a:b2:9a:68:bb:f1:61:96:82:e9:e0:18:ef:a8:
                    45:a1:e4:c7:e6:d5:d6:a0:43:7c:7d:aa:f6:06:f9:
                    fd:f3:cc:46:ca:8e:12:72:10:0d:91:12:a7:5b:1f:
                    50:95:be:9e:09:b4:6e:98:de:33:91:9d:fe:a2:b3:
                    98:73:cb:ff:ab:fe:bb:40:35:2e:5b:fb:87:ff:45:
                    00:b7:dc:59:2d:d9:4c:5f:22:85:85:d8:4f:7c:d4:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:80:BF:C1:69:AF:6C:BC:E5:B3:E9:04:70:6A:74:00:C8:15:FE:6B
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:cd:ff:15:df:52:80:76:8d:76:7e:4d:4f:02:45:be:88:
         0a:9f:50:ff:c7:07:08:72:0e:09:cc:bb:b4:a3:9c:b5:06:fe:
         c3:ec:fc:9a:dc:d5:e8:83:81:08:38:05:c2:8b:c7:06:c4:c4:
         af:1b:3d:ef:d2:c4:83:66:08:f0:22:6f:d8:e4:90:19:4d:d6:
         0b:85:8e:8d:fc:b2:ab:e5:4f:6d:be:39:f2:6f:7c:fc:3a:96:
         03:03:54:11:c0:b3:97:a7:ae:88:be:19:51:96:db:36:2b:db:
         91:32:a8:11:d5:fe:f2:b9:83:5b:b3:3b:e9:73:1f:4d:2a:41:
         ef:ab:f2:01:99:b1:b3:25:4a:a3:e9:d4:70:ff:9c:3c:08:60:
         f6:fe:2d:e7:7e:96:f0:5d:fa:22:14:2c:9f:59:5b:9a:7b:f1:
         1e:08:ba:cc:76:84:97:4f:ab:1e:bd:e4:c3:12:71:2b:58:3f:
         6d:cd:f0:f9:fd:25:6a:66:b6:f9:0a:7b:89:c8:27:3a:d6:67:
         36:71:e1:6c:4f:9d:5e:d6:07:bc:3b:bc:ef:9f:99:ed:c0:94:
         b7:4f:7b:66:75:15:1f:e7:b6:6a:7c:41:2b:0b:66:c3:35:0b:
         77:8a:a2:48:b9:bc:3e:f6:16:f0:9b:24:90:9e:ca:d9:a6:0d:
         b2:c2:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:35 2026 by rpki-client