This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          cLMW1h2mLxazdE0zHVHAL2PVcJ9ibxonjYBqYaDuPhc=
Subject key identifier:   2F:E6:39:68:9D:5B:11:F2:D8:3C:58:2A:49:E3:52:2F:93:98:42:0F
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       0418
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          0418
Signing time:             Sun 25 Jan 2026 03:24:53 +0000
Manifest this update:     Sun 25 Jan 2026 03:24:53 +0000
Manifest next update:     Tue 27 Jan 2026 03:24:53 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: /qvltEGNEgb7m6BiqbIKpn/a8Fw39sLVY2F2r/Yyjf4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Jan 25 03:24:53 2026 GMT
            Not After : Jan 27 03:24:53 2026 GMT
        Subject: CN=69758d05-4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:b6:3f:29:81:77:52:fd:98:ff:aa:ad:4d:
                    57:94:7c:71:f4:e7:09:e4:b0:5a:13:35:de:04:fa:
                    62:c6:bd:6a:4a:66:81:6b:80:33:98:8a:17:bc:c7:
                    8e:ca:f5:02:6b:83:d9:25:e4:ab:86:6c:ec:80:d0:
                    4c:b8:35:64:f6:c7:43:b1:ca:39:89:54:30:c6:a2:
                    6d:3c:a4:ce:41:a3:90:af:c9:f4:7e:b9:80:d5:9c:
                    c1:df:a5:ce:35:6a:2e:30:96:38:4f:fc:87:26:cb:
                    6a:6f:e4:20:73:de:29:18:7d:f9:ce:fc:ee:52:ec:
                    12:06:10:44:5e:b7:1d:de:c4:d7:68:b6:fc:b4:08:
                    6c:c7:3e:b3:14:2e:ab:ca:d9:38:c8:cc:8c:08:b9:
                    c1:88:e3:56:23:41:06:16:57:2a:46:fc:29:d9:ed:
                    df:e9:b3:59:77:18:36:68:d1:db:69:70:ca:73:3d:
                    25:3c:13:62:ae:6a:87:6f:e4:5e:83:0f:ca:f9:00:
                    61:26:f0:06:70:0b:37:27:b6:95:33:0c:bd:a4:d6:
                    df:f7:a3:ec:24:8c:99:36:7a:c2:e2:7c:70:6d:8b:
                    ab:89:80:ae:98:5a:1e:85:3e:92:b7:52:6e:33:8f:
                    57:6d:d5:cd:38:f5:d2:53:78:5a:1a:10:fd:e5:0e:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:39:68:9D:5B:11:F2:D8:3C:58:2A:49:E3:52:2F:93:98:42:0F
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:52:e7:2c:a1:ca:62:69:4b:da:2e:9f:41:68:c0:68:11:da:
         a9:3b:04:0f:99:b4:d9:15:3a:98:be:8d:f5:34:73:08:a8:9f:
         59:49:2f:c6:78:8c:39:3a:60:6e:50:45:eb:3a:e1:60:c6:b9:
         6a:39:54:9b:38:61:60:c6:cc:be:5f:34:33:d4:a4:a3:92:ac:
         c1:e8:93:62:6e:43:8f:ef:f6:5c:2b:56:65:6f:35:25:15:d2:
         b3:5e:8a:40:f2:21:a4:77:0b:01:3a:54:a4:db:db:10:c8:fc:
         85:7e:bf:94:36:84:00:e9:df:c1:55:49:79:f8:26:05:47:01:
         15:95:2e:29:1f:0c:2d:bb:3d:84:91:2a:eb:a0:d8:11:c2:48:
         4b:ac:8b:37:a9:e8:94:31:6a:40:a4:79:9f:d4:1b:02:d1:81:
         71:30:15:2a:56:85:f4:51:89:e1:f3:aa:bf:7e:ac:6f:38:a4:
         ee:65:8f:c0:fd:78:40:b2:06:f7:11:ef:2b:a7:63:85:aa:9c:
         95:58:fe:54:ea:8a:cb:f7:bd:ef:99:45:86:cf:61:51:69:02:
         3e:2e:15:44:d6:71:65:2f:99:0d:21:c5:83:34:82:1c:da:f1:
         cd:9c:04:2b:8b:a6:5c:2d:e0:b9:43:e8:96:7a:38:f1:99:8e:
         6f:59:3a:09
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzM1ODRBRjExMC8GA1UEBRMoNkMwQjQ2Mzg0RTkzOUEyMEQ3NzgzNjQ2NTY2NDUw
MTNCNUY3NjZGRTAeFw0yNjAxMjUwMzI0NTNaFw0yNjAxMjcwMzI0NTNaMBgxFjAU
BgNVBAMTDTY5NzU4ZDA1LTQ1MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCLLY/KYF3Uv2Y/6qtTVeUfHH05wnksFoTNd4E+mLGvWpKZoFrgDOYihe8
x47K9QJrg9kl5KuGbOyA0Ey4NWT2x0OxyjmJVDDGom08pM5Bo5CvyfR+uYDVnMHf
pc41ai4wljhP/Icmy2pv5CBz3ikYffnO/O5S7BIGEERetx3exNdotvy0CGzHPrMU
LqvK2TjIzIwIucGI41YjQQYWVypG/CnZ7d/ps1l3GDZo0dtpcMpzPSU8E2Kuaodv
5F6DD8r5AGEm8AZwCzcntpUzDL2k1t/3o+wkjJk2esLifHBti6uJgK6YWh6FPpK3
Um4zj1dt1c049dJTeFoaEP3lDoVPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUL+Y5
aJ1bEfLYPFgqSeNSL5OYQg8wHwYDVR0jBBgwFoAUbAtGOE6TmiDXeDZGVmRQE7X3
Zv4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzNTg0Lzk1QkYxMDM4REI3RTExRUQ5MDI5OEZENDJGNkQ4QzFEL2JBdEdP
RTZUbWlEWGVEWkdWbVJRRTdYM1p2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2JBdEdPRTZUbWlEWGVEWkdWbVJRRTdYM1p2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzM1ODQvOTVCRjEwMzhEQjdFMTFFRDkwMjk4RkQ0MkY2
RDhDMUQvYkF0R09FNlRtaURYZURaR1ZtUlFFN1gzWnY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVUucsocpiaUvaLp9BaMBoEdqpOwQP
mbTZFTqYvo31NHMIqJ9ZSS/GeIw5OmBuUEXrOuFgxrlqOVSbOGFgxsy+XzQz1KSj
kqzB6JNibkOP7/ZcK1ZlbzUlFdKzXopA8iGkdwsBOlSk29sQyPyFfr+UNoQA6d/B
VUl5+CYFRwEVlS4pHwwtuz2EkSrroNgRwkhLrIs3qeiUMWpApHmf1BsC0YFxMBUq
VoX0UYnh86q/fqxvOKTuZY/A/XhAsgb3Ee8rp2OFqpyVWP5U6orL973vmUWGz2FR
aQI+LhVE1nFlL5kNIcWDNIIc2vHNnAQri6ZcLeC5Q+iWejjxmY5vWToJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:32 2026 by rpki-client