This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
File:                     j29vvKPGNM2_8Exy6bDsgG-YPKg.mft (raw, json)
Hash identifier:          W1FOWe1ghM99tjP/yatDU9WyAaK40de1SpRlTy1NDPY=
Subject key identifier:   12:A9:D7:79:51:05:12:DB:7D:FA:B3:A7:79:DE:79:1D:39:42:D8:46
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Certificate issuer:       /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial:       0502
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
Manifest number:          04FE
Signing time:             Sun 25 Jan 2026 02:58:54 +0000
Manifest this update:     Sun 25 Jan 2026 02:58:53 +0000
Manifest next update:     Tue 27 Jan 2026 02:58:53 +0000
Files and hashes:         1: j29vvKPGNM2_8Exy6bDsgG-YPKg.crl (hash: IuTLexjFUYcwFZ6ks1Ehhp2XFob6QCvbYlZDxpm0L+Y=)
                          2: FB14937C4F2711EF830F0C61762E951A.roa (hash: NKUhSMZnwRNOJiKnhnRiI1tGFsbNrt1VXb7ny/WxBiE=)
                          3: 44EF15B42F7511ED934148D1F1222468.roa (hash: SVbI5/mcJ+ND6giCV7RVPDPt1p34yK1IAdaZ9mYU07E=)
                          4: 2C1A7CD22F7411ED88A88DCEF1222468.roa (hash: Sh1RvoN24iiQuOige1NA+5ffJjIAW81e8ojWpZOFayY=)
                          5: 1B58135E2F7511ED979DE2D0F1222468.roa (hash: DSGqTaxjbT+K9lrWKUIwbu4/OZVecKFE50cHdO72jtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B57DFAF, serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
        Validity
            Not Before: Jan 25 02:58:53 2026 GMT
            Not After : Jan 27 02:58:53 2026 GMT
        Subject: CN=697586ee-7dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:0c:8c:7a:85:48:0c:d3:6f:bf:98:de:63:
                    d5:d5:31:49:43:17:ab:7a:14:16:0e:b3:6c:e7:fb:
                    e9:24:ba:e6:09:1e:2c:b5:05:72:73:5b:9b:a2:63:
                    de:1e:f7:f1:4c:ef:c6:86:f1:e7:64:11:5a:9e:f3:
                    2e:ca:b5:53:0d:ea:d9:03:4f:f6:a0:02:d3:6d:d0:
                    57:bc:de:07:cc:bb:0f:45:6e:b3:6e:46:dd:6d:b9:
                    8a:d3:0b:18:0b:22:3f:48:a4:33:76:bc:be:0e:17:
                    f0:e8:5b:c6:24:56:a5:2e:c0:dd:3a:48:5e:5a:8e:
                    3b:64:6f:d4:11:64:1a:36:9d:44:d7:5d:d0:52:31:
                    12:6a:22:26:c2:52:42:3e:53:54:90:56:e6:c1:4a:
                    52:b4:d2:de:58:a5:e8:45:a3:e1:e9:90:ea:95:3e:
                    57:72:23:87:40:52:1b:50:df:ea:bd:06:ef:06:cf:
                    11:fc:a7:9a:65:81:a4:5f:af:07:0d:a9:f2:d7:5e:
                    32:48:f0:1d:f3:b3:f3:49:f1:be:dc:85:5f:74:ab:
                    21:be:0c:1c:bc:3e:ae:e7:4e:32:65:c4:00:a9:c3:
                    a8:27:03:f2:d2:cc:72:6f:79:f6:2e:1a:24:d1:46:
                    ae:3c:c1:29:5e:72:aa:e5:fd:90:e2:e9:b0:6f:e4:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A9:D7:79:51:05:12:DB:7D:FA:B3:A7:79:DE:79:1D:39:42:D8:46
            X509v3 Authority Key Identifier:
                keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:6e:88:4c:8e:47:e3:fb:13:44:a1:8e:e6:91:18:ef:e4:
         4a:a5:f1:ed:9a:5c:32:85:ca:d1:85:e8:48:69:29:87:aa:b7:
         58:43:5e:3c:1e:ad:0a:2c:0d:19:b0:5e:d9:e8:98:8d:1d:99:
         e1:bc:ee:89:98:9c:0e:92:c3:0a:62:f9:61:d6:bc:a2:d6:98:
         25:37:cb:76:40:e4:88:0b:59:d6:a9:e7:9d:c3:49:7f:e4:6b:
         e0:b3:0c:10:dc:69:72:45:5a:1d:50:51:ee:53:47:b3:b2:79:
         78:7d:82:b5:77:34:d3:f9:76:99:7f:23:ed:33:6e:75:25:55:
         9e:c4:58:8f:73:97:a1:67:cb:d0:2e:81:7d:5f:03:e5:ef:b1:
         5c:80:d0:df:77:c5:c8:0c:a0:95:40:7a:5d:76:72:53:6d:41:
         16:d7:1d:cf:8f:1a:59:26:d0:c6:7d:86:c2:9a:1c:8c:dd:b0:
         25:27:a0:48:da:52:6e:7c:ab:bf:6c:eb:be:64:1f:2a:c5:4b:
         78:af:3e:cc:12:a4:07:2a:05:e2:0d:84:96:46:67:75:81:5d:
         a3:66:ad:af:8c:02:23:37:08:39:c4:a9:74:e9:45:cc:33:fd:
         b7:6f:e0:af:89:e2:53:9b:9e:55:78:ee:57:a1:4c:2b:d4:2c:
         9d:58:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:41 2026 by rpki-client