This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          yHUTQPUpkt4mEFAnVMREDGCyqOryw5tVQMb2FCVrkow=
Subject key identifier:   8E:09:B3:56:94:FB:D9:AB:87:7F:E3:E7:C8:F2:E9:4B:2B:FD:05:A1
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       01F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          01ED
Signing time:             Sun 25 Jan 2026 04:37:53 +0000
Manifest this update:     Sun 25 Jan 2026 04:37:52 +0000
Manifest next update:     Tue 27 Jan 2026 04:37:52 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: HKgvJz90dimCsTj0S0gZ7Zc/gEXBx522HEqN5m0Db7c=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Jan 25 04:37:52 2026 GMT
            Not After : Jan 27 04:37:52 2026 GMT
        Subject: CN=69759e21-0fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:e4:ca:e9:a0:67:23:3f:4c:91:41:ff:b0:
                    3e:aa:aa:47:08:07:4a:dd:f2:0b:66:0a:99:1f:b9:
                    1e:5a:26:02:a4:d0:68:03:f3:02:be:f8:19:06:25:
                    5d:3f:49:50:2c:ad:49:98:1b:78:d1:2e:fd:14:ce:
                    d1:cd:85:2c:1c:44:6b:62:2c:59:11:0a:3d:e6:1e:
                    e3:29:01:73:ff:96:78:03:ba:b8:77:21:0a:3f:25:
                    e4:93:6c:91:3a:e2:1e:56:16:4e:6a:b9:86:74:d2:
                    4a:f9:6e:17:27:29:0f:65:84:d6:41:c7:b6:2e:59:
                    55:03:7a:d3:2d:1f:61:62:7d:be:cd:49:e1:80:93:
                    1a:e2:c8:94:bd:3e:19:03:45:8b:b9:70:a9:43:d8:
                    ab:e6:07:ee:6d:1e:06:76:17:00:26:8a:5f:3e:51:
                    55:d3:12:ae:b5:6d:9b:12:a2:e7:03:53:91:50:c5:
                    df:47:32:79:eb:90:b8:59:ea:e0:df:7d:f3:90:ed:
                    be:b3:ac:36:79:e9:5e:ab:44:97:d1:22:f1:18:31:
                    92:08:6c:de:1e:1f:14:4e:11:f7:16:be:87:d4:27:
                    b9:97:b4:65:15:c1:b3:57:c3:42:e7:53:bf:05:66:
                    3a:b3:19:15:33:ba:75:3c:04:fa:9a:5a:4b:74:90:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:B3:56:94:FB:D9:AB:87:7F:E3:E7:C8:F2:E9:4B:2B:FD:05:A1
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:1d:51:6b:42:49:0d:af:df:f1:76:49:13:81:3d:a0:f0:
         99:ad:04:fb:eb:70:a2:d2:03:6a:69:06:6a:e9:72:40:6f:8e:
         31:cd:7d:8e:70:5c:a3:05:42:91:60:9e:33:98:87:db:c3:a7:
         70:6c:08:57:36:44:8f:3a:3d:79:d0:a8:ff:27:be:d4:a6:28:
         9c:92:c6:ca:76:8c:f1:b2:26:e7:b2:64:55:7f:1c:1e:a8:17:
         05:36:a1:eb:b5:f4:e1:42:d7:e8:ba:03:54:7c:09:d7:87:c2:
         83:99:57:25:0a:83:07:23:e2:4d:cb:d3:e8:5d:4d:a9:52:30:
         b9:d6:5d:7a:d9:a0:ed:b4:c3:60:59:fc:bc:07:31:71:3b:3e:
         c3:74:e8:93:cc:52:11:76:b0:4c:74:bc:74:81:25:64:31:9b:
         38:04:0b:7a:6f:4b:35:a5:1b:ef:5d:55:f1:a6:f8:c1:14:ca:
         04:86:f8:61:4b:ca:d3:ef:55:e9:ce:17:ba:91:1d:81:6b:4a:
         d3:61:0d:27:3e:f0:7c:e7:e8:a1:a4:80:c1:c0:4d:c3:9e:48:
         7b:a6:74:a5:cb:08:b7:8c:e7:32:65:65:f7:b0:61:a5:4d:0d:
         6f:97:d1:e7:02:61:ec:09:b2:42:9a:28:93:96:f6:64:8d:89:
         77:a4:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:32 2026 by rpki-client