This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft (raw, json)
Hash identifier:          1iyvlUHEQMqvsxfWnk94hofM4e770Pus2eH6Iqldyfk=
Subject key identifier:   D3:85:D2:DA:5B:37:6E:D6:94:E8:55:FB:0C:56:05:F6:D2:E2:3A:E5
Authority key identifier: D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Certificate issuer:       /CN=F36C04EAAF/serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Certificate serial:       49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
Manifest number:          48
Signing time:             Sun 25 Jan 2026 05:20:41 +0000
Manifest this update:     Sun 25 Jan 2026 05:20:41 +0000
Manifest next update:     Tue 27 Jan 2026 05:20:41 +0000
Files and hashes:         1: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl (hash: Lr7ziiYM6Vfp2FeO1cVcgdg5wbayJuD+F/DFYD/RU0U=)
                          2: B44DBBD6C4A011F0BB1FE885DAE4EC9C.roa (hash: 22n46w2qwRYfa/D7JhUZRieOUn/D6egNiKVqvc6gQks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Validity
            Not Before: Jan 25 05:20:41 2026 GMT
            Not After : Jan 27 05:20:41 2026 GMT
        Subject: CN=6975a829-79ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:5a:26:e8:dc:23:8a:20:cf:ae:31:5e:38:
                    c1:50:e9:71:52:cb:a6:b2:77:fc:b1:e8:f7:d6:42:
                    7d:c5:8f:bf:fd:30:12:f6:67:46:04:bc:65:d6:77:
                    66:45:0e:18:10:97:a3:c9:76:84:75:09:b2:e3:9d:
                    1c:4f:84:9e:b7:41:80:3b:91:62:98:0a:b7:8f:f2:
                    c4:ad:ad:59:e3:52:96:1a:75:5a:c9:8c:92:a4:ec:
                    0a:fa:82:11:39:a4:a3:03:c1:10:25:db:1f:fa:a8:
                    50:7f:22:16:1b:ce:4e:04:56:a3:3b:56:d5:f7:8c:
                    53:c5:63:c1:3c:a5:22:97:30:a2:53:a1:0b:82:b6:
                    9c:99:d3:1d:bb:5b:d5:d1:b0:f6:01:a3:8e:17:69:
                    b2:24:be:e7:2b:67:78:72:c7:77:c2:90:47:e0:25:
                    b6:01:bf:9a:29:d0:16:b4:d0:4d:67:23:cb:56:c4:
                    34:72:f7:fe:47:5e:cb:f2:be:27:6b:07:17:56:1b:
                    42:b3:03:e0:8d:aa:0b:7d:90:dc:a3:f0:d2:84:84:
                    f6:56:4e:d1:b8:31:81:43:5b:91:28:eb:85:13:6d:
                    2a:80:77:9e:6a:7c:e9:fb:06:cc:3f:1d:61:bc:66:
                    78:e0:9a:c7:36:aa:3e:9f:88:cf:87:84:60:fb:e9:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:D2:DA:5B:37:6E:D6:94:E8:55:FB:0C:56:05:F6:D2:E2:3A:E5
            X509v3 Authority Key Identifier:
                keyid:D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:e2:0c:37:fc:6e:e3:37:92:30:7e:3f:ed:5f:9e:09:b3:
         ea:33:3b:a9:66:41:ce:d3:f2:d9:bf:ad:7a:c7:ec:a3:d8:bd:
         2b:11:f4:db:4d:16:4e:1f:0d:67:d1:17:72:a8:b5:28:02:1d:
         24:7c:d4:b6:a2:f7:11:d4:98:2f:e5:c6:03:58:54:a7:07:c4:
         5a:78:13:65:c3:26:8b:40:27:be:a6:77:5c:42:13:bb:90:c9:
         dc:df:b2:c4:39:55:55:e0:89:75:1b:c5:a0:51:59:8c:cc:2f:
         f6:ed:13:bc:44:ca:3f:6a:ee:ae:5d:c1:e6:3f:31:4b:bd:77:
         71:eb:a1:f3:57:07:88:b5:2b:94:1a:ca:f3:1b:ab:d1:38:f6:
         fb:35:7d:0f:5c:ea:23:d9:88:dd:8f:ad:0e:48:9c:45:93:63:
         39:13:63:d9:cf:aa:d7:fb:c9:3a:a3:fb:fe:3d:e6:02:2a:ae:
         35:20:ec:b1:82:a5:ba:a1:3a:58:20:0c:8f:1f:63:41:ce:d6:
         d5:76:0d:b7:0d:2c:3e:db:33:ba:8d:37:44:c0:98:1f:3b:19:
         84:10:c6:14:38:07:22:37:79:d2:6e:33:e7:e4:49:19:f0:2b:
         7d:1d:1b:fe:ad:c5:fa:30:cc:8e:cf:d9:68:f9:ab:8f:1b:a0:
         f3:f6:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:11 2026 by rpki-client