This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          Tn9fR1DlayppeA/FtqIiRzu1y+JommS96VdJMINSlXs=
Subject key identifier:   0A:36:1E:DE:1A:7D:6B:63:B2:CF:1D:D4:07:CF:0C:48:11:6B:7E:51
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       0704
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          06C9
Signing time:             Sun 25 Jan 2026 02:27:57 +0000
Manifest this update:     Sun 25 Jan 2026 02:27:57 +0000
Manifest next update:     Tue 27 Jan 2026 02:27:57 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: BySv4MCQWEw/9B9UC9J7NjLXAIlc947MEkrkp6p1p1M=)
                          2: F073103AED8511F098246590DAE4EC9C.roa (hash: 7/OBPMvHgaBhBjcdfmAskDW47LM3Vtw//UfK9zD6ZTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Jan 25 02:27:57 2026 GMT
            Not After : Jan 27 02:27:57 2026 GMT
        Subject: CN=69757fad-5dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:21:7b:6f:e7:35:2f:d7:0f:7a:c9:0f:ad:
                    a8:89:af:28:8e:c3:e4:83:6f:a8:ba:54:cc:ba:41:
                    4d:52:c5:8b:88:0a:9b:4c:50:48:3b:30:c6:6b:21:
                    1e:c4:39:5d:ae:08:bf:b8:5f:4e:c1:64:5e:85:4a:
                    ed:4c:00:86:e7:1a:d9:93:9b:fe:08:1a:be:a5:a5:
                    59:fd:4a:62:cd:dc:84:06:a1:48:b8:0b:71:e1:67:
                    dd:42:ac:53:e0:c3:0a:a1:af:36:f2:2b:a6:19:80:
                    72:c4:b6:87:3b:8b:8a:e4:93:57:cc:8f:19:1e:3e:
                    c3:85:ff:9b:d4:15:fc:2b:3c:2f:a3:63:36:46:ef:
                    b3:ed:61:33:bf:44:35:02:9e:6c:a8:0d:d5:3d:95:
                    ef:03:f4:fb:19:a2:78:e8:d9:b8:63:66:df:8a:a6:
                    76:e1:20:56:87:31:98:25:3a:7a:3d:1b:e0:d1:11:
                    86:a6:5d:76:17:00:a5:ea:f7:ec:73:9b:b3:81:96:
                    af:d7:c4:52:54:fe:34:a5:67:b5:7a:01:5c:26:95:
                    b8:41:6d:1e:69:ec:a0:bc:28:19:02:18:64:d4:65:
                    e4:b7:c9:a7:2d:44:04:e3:76:bf:c7:3d:c2:80:fc:
                    37:bf:d0:3e:df:13:9e:3f:ce:0b:79:bd:d6:a6:27:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:36:1E:DE:1A:7D:6B:63:B2:CF:1D:D4:07:CF:0C:48:11:6B:7E:51
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:29:28:91:bb:f7:61:bf:69:17:ea:6f:37:77:cc:10:96:96:
         ad:7e:f7:d9:64:56:9a:9a:4c:0c:cf:25:8e:b7:54:87:5c:ac:
         37:91:5f:56:61:e8:6c:3c:48:99:b9:04:bb:b0:73:b5:76:75:
         75:18:42:61:f0:d8:71:eb:9f:5a:f3:10:74:f3:6b:61:83:30:
         d0:a1:15:e7:6a:04:c1:98:c4:45:74:1d:47:aa:0e:3a:15:8e:
         2a:c6:36:50:2e:64:9f:22:27:58:1e:74:18:26:58:0c:6c:11:
         ff:ce:62:3a:73:8c:e3:e0:fa:c6:3d:dc:67:ad:0b:5f:09:b8:
         90:f0:b3:ec:cc:ef:59:fd:09:2d:92:b9:af:b0:e6:59:6f:81:
         2d:9f:2f:63:78:17:0a:9e:a8:07:96:0f:36:cb:e3:12:72:a4:
         d0:a3:89:0e:c9:2f:5b:9b:dd:9b:c7:cf:3e:cd:bc:63:7a:d4:
         45:7c:5c:ef:7a:37:2c:15:c3:da:e5:a2:42:11:d3:f0:40:bc:
         31:89:70:df:95:a9:63:42:05:62:84:b1:cb:8e:7b:7d:46:96:
         9a:b7:b5:33:fe:17:e1:1b:ce:10:90:6c:d2:cf:53:d5:33:07:
         3d:37:c8:9e:44:54:56:2e:64:c8:b4:12:be:cb:cd:b5:46:c1:
         b3:22:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:51 2026 by rpki-client