This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
File:                     8fHKBYLoJWPuJfCZF2si382cw2Q.mft (raw, json)
Hash identifier:          shQCEivzGqDXjhmYmZ6vjZflVaOiKuBumJGxZqEBAhs=
Subject key identifier:   57:D3:6E:D8:2C:EE:0A:16:43:C6:21:85:A6:E1:05:95:0D:AC:17:BB
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Certificate issuer:       /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
Manifest number:          035D
Signing time:             Sun 25 Jan 2026 03:48:47 +0000
Manifest this update:     Sun 25 Jan 2026 03:48:46 +0000
Manifest next update:     Tue 27 Jan 2026 03:48:46 +0000
Files and hashes:         1: 8fHKBYLoJWPuJfCZF2si382cw2Q.crl (hash: qXhgDwXhOMCydsUMBc6Tg26GRrHKTY4EGr+5ViU5lK0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C08D4AF, serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
        Validity
            Not Before: Jan 25 03:48:46 2026 GMT
            Not After : Jan 27 03:48:46 2026 GMT
        Subject: CN=6975929f-c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:a0:e4:ed:8a:fe:54:57:d4:d5:77:35:9f:
                    26:1c:28:ea:e0:29:b4:ea:e0:d6:5d:a6:19:20:3e:
                    bd:9e:c3:4d:fd:7b:2a:0b:23:ae:89:49:04:ff:52:
                    59:37:3b:15:31:be:54:73:fb:bb:76:d5:56:86:bd:
                    3f:ae:d8:c8:9e:12:90:84:b9:5f:89:d0:a7:f8:97:
                    d8:7c:e2:33:e4:79:c6:36:76:fd:b9:c3:ae:fc:3c:
                    7c:51:56:bb:dd:82:d9:06:79:a9:3b:8d:3d:ee:34:
                    57:c8:aa:9f:2e:47:e5:1e:db:18:b1:1b:3f:d3:fa:
                    fe:a4:03:c6:c6:07:d8:7f:0a:ef:53:82:22:54:fa:
                    e6:9f:cc:0a:50:ca:c4:65:5b:12:a8:2f:8f:09:74:
                    4b:78:9e:01:a3:d8:69:58:4f:e1:2e:d0:0a:6d:61:
                    67:94:42:eb:77:7b:fd:db:01:28:3f:f7:24:60:24:
                    a7:26:72:91:dc:e0:bf:a2:b1:6c:d9:3f:ff:85:06:
                    51:b4:68:34:a9:d7:9b:1d:36:5e:77:ec:a9:85:15:
                    be:f7:f8:f6:8b:0b:27:ec:f0:07:5e:9a:62:56:7b:
                    bb:48:a8:5e:54:7d:bc:cb:af:72:0d:97:a3:ae:d8:
                    5d:b2:cf:58:bd:d2:5c:b8:b8:5b:e7:b8:b9:05:13:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:6E:D8:2C:EE:0A:16:43:C6:21:85:A6:E1:05:95:0D:AC:17:BB
            X509v3 Authority Key Identifier:
                keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:b5:3d:da:e2:e2:63:0d:05:d8:85:89:e7:0e:75:71:1f:
         f3:b8:51:da:8d:ed:bd:b0:3f:a1:ac:b4:36:bb:03:71:cd:53:
         e4:8f:3d:20:10:22:3e:22:51:1e:d6:0c:fd:e7:0e:93:6d:17:
         05:a8:ad:48:3e:76:1f:2f:a7:b5:bc:5a:2b:bf:88:64:ec:c5:
         da:b2:46:03:f9:df:9b:6c:ce:35:d5:01:8b:30:f1:bf:2c:cb:
         36:ee:16:75:b9:85:4a:3f:5d:2f:49:57:9e:a2:d1:50:39:d3:
         74:42:c5:0d:6d:72:a2:14:6a:01:fd:f4:3c:ac:b0:1e:f4:b0:
         af:9c:07:64:40:77:68:c6:79:71:d5:0a:dd:ba:14:fe:45:4d:
         4e:d4:17:99:7b:77:6b:bf:c9:18:b3:55:91:cd:66:d3:40:f6:
         26:1d:4f:3c:ba:0c:bd:c3:33:8c:e8:27:5c:99:ba:3c:9f:96:
         32:36:87:46:30:7f:e5:01:dc:53:26:ac:57:92:41:21:5a:d2:
         31:81:a6:fe:d0:3f:e3:67:22:a2:86:fc:28:8c:02:ed:be:98:
         73:1a:5f:be:a1:a5:c9:45:2f:f9:88:73:f6:0b:b2:52:22:69:
         48:4a:bb:7c:71:12:d3:2a:86:cb:5c:b8:5f:e7:57:c7:08:1c:
         08:6b:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:46 2026 by rpki-client