This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          Mq+GlZRtQk+KW7asiZ6uQ93o0y4OcK+BecSBSRd/3UE=
Subject key identifier:   17:E5:21:19:1D:27:96:F5:89:D9:FD:3C:7F:3D:6D:10:C9:60:50:A8
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          01D0
Signing time:             Sat 24 Jan 2026 04:41:47 +0000
Manifest this update:     Sat 24 Jan 2026 04:41:46 +0000
Manifest next update:     Mon 26 Jan 2026 04:41:46 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: 8h8mARqfzImMSFWs/t8KxW5lHWhI57N0qdxDxaxF1wk=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 04:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Jan 24 04:41:46 2026 GMT
            Not After : Jan 26 04:41:46 2026 GMT
        Subject: CN=69744d8b-6d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:fa:04:be:39:9d:da:09:8f:e5:b0:e8:ef:
                    41:b6:8c:77:65:1e:51:1f:54:89:dd:ea:8b:f9:ed:
                    e6:61:54:ec:14:91:bf:56:33:ce:22:cd:7d:b4:32:
                    e6:fd:72:94:e1:55:c2:f8:59:9d:a0:62:91:66:62:
                    5f:9c:5b:32:72:9c:59:6f:a5:69:1b:33:b5:e3:a8:
                    bd:0a:ab:b4:4f:d4:bf:d2:99:2e:c8:05:6e:0d:25:
                    ad:3c:f2:3f:fb:b5:67:54:cd:f9:2f:b8:b7:6b:7f:
                    37:d6:a9:1d:8d:7f:bb:0f:d3:a1:49:5a:73:40:fb:
                    63:0d:e9:14:9b:74:ee:2d:95:68:a1:ca:8c:e2:e5:
                    ba:bb:20:53:72:a5:68:29:4b:4a:70:75:87:d8:93:
                    46:c2:3a:18:94:49:f7:ed:3e:68:b8:44:19:fc:23:
                    af:d2:4a:a1:05:d2:ce:0d:89:da:71:fd:4e:ef:da:
                    cf:e9:89:9c:9a:50:55:bc:8e:6f:11:ba:fd:1c:0c:
                    a8:93:f0:be:74:a2:12:5e:80:6d:0a:51:b8:0f:06:
                    1e:6e:b0:91:a4:4a:8d:14:c9:3c:84:02:8b:94:9d:
                    c2:91:dd:87:cf:20:1f:4c:d1:a2:6c:0b:fc:7d:65:
                    74:4d:5f:77:42:4c:bb:0b:83:cd:9f:70:91:f4:8e:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:21:19:1D:27:96:F5:89:D9:FD:3C:7F:3D:6D:10:C9:60:50:A8
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:0c:f1:62:55:c2:f0:c6:81:da:8e:5d:89:9c:21:2a:07:
         83:66:93:07:b0:67:b5:e6:9a:71:de:d6:c7:28:b1:d8:f5:c6:
         7f:47:45:21:97:85:f4:60:dd:a5:86:5e:40:44:f1:cb:ea:11:
         f9:db:4c:8b:fc:c6:e1:53:7e:94:2d:d1:77:04:50:47:cd:50:
         3e:4e:32:60:66:61:10:be:f3:73:f1:82:68:9e:a4:e8:2c:46:
         3d:57:92:0a:88:17:f7:15:74:db:05:03:11:72:c9:37:2a:a7:
         bb:c6:52:dc:a9:29:91:8c:86:eb:93:76:4c:b2:91:dc:4a:35:
         25:31:ee:4e:d7:e5:5b:8e:e8:6c:f0:8e:00:4e:fa:eb:d6:5e:
         bd:0d:ae:da:35:f6:84:77:d7:55:c8:0d:7f:ca:10:55:e9:c4:
         ea:d6:e0:e3:bf:1f:8c:5e:6b:5a:c9:40:4c:61:51:a3:f3:d5:
         21:38:15:be:8b:db:a2:28:0c:b2:93:5a:6a:d1:89:b4:b4:2b:
         d2:0a:eb:e4:d9:b3:cc:33:72:7d:af:a5:40:fa:2b:ff:78:48:
         28:53:ed:3f:d5:7b:ac:86:98:ac:1d:51:4e:fc:3c:ae:9e:da:
         aa:b0:f2:ef:fc:93:30:54:26:ef:9e:cf:3b:46:25:f8:cb:d2:
         6a:75:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:29 2026 by rpki-client