This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File:                     iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier:          GpMGnBinJVZOIfQ0EjGYmbvXpEhoJDBP7Ov9XBvoEkU=
Subject key identifier:   4C:B7:87:6A:75:6D:4A:F4:E2:CE:F9:74:C2:D4:FE:DC:DE:A6:AD:7F
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer:       /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial:       04F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number:          04EF
Signing time:             Sun 25 Jan 2026 03:02:11 +0000
Manifest this update:     Sun 25 Jan 2026 03:02:11 +0000
Manifest next update:     Tue 27 Jan 2026 03:02:11 +0000
Files and hashes:         1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: Iy+ocpH5cSwaPdV0pvAdNLHHeyUNEW+YWL4/t6mo1PA=)
                          2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3E3DAF, serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
        Validity
            Not Before: Jan 25 03:02:11 2026 GMT
            Not After : Jan 27 03:02:11 2026 GMT
        Subject: CN=697587b3-f214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:90:12:20:ea:fe:96:b6:e4:99:b6:83:2a:ed:
                    80:d4:0f:86:f8:d2:79:4e:7c:f2:86:7a:a4:8c:7c:
                    dd:4b:8b:bc:48:e9:e1:5a:f8:29:3c:75:0d:9e:20:
                    5c:3b:0b:a3:4f:96:45:eb:75:85:7f:d5:04:2d:1e:
                    78:11:e0:51:ce:e1:7b:fa:0d:95:7f:a4:4c:15:8b:
                    ba:b9:65:83:8e:6f:44:3b:1b:7c:b0:67:4f:39:e7:
                    50:32:93:fd:da:2e:f9:29:f0:ea:8f:18:44:9b:e4:
                    11:3b:aa:15:1c:c5:b2:95:b1:66:a0:4e:2d:bc:4c:
                    08:d8:fe:f8:fa:06:9a:e0:cf:a9:04:f7:50:44:f5:
                    de:84:65:00:05:64:7c:39:6a:22:80:fd:12:99:82:
                    6f:d2:8b:6d:7c:91:9b:15:b4:51:79:90:5d:27:c1:
                    7f:1c:f8:ef:13:f3:f8:4f:af:d1:f5:07:dc:6c:fd:
                    93:d7:5b:3f:d0:9d:52:93:75:c9:37:6c:85:4d:b1:
                    b0:0a:8b:1a:9d:4e:04:cf:c9:34:b2:3b:9a:8d:95:
                    5c:bb:74:be:4a:8c:ad:9e:e6:9d:76:f6:38:ea:82:
                    87:2a:63:17:c0:a3:3e:fa:a5:bd:a8:28:89:dc:13:
                    25:4e:9e:b1:75:d1:47:ef:93:35:88:20:47:c6:e2:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B7:87:6A:75:6D:4A:F4:E2:CE:F9:74:C2:D4:FE:DC:DE:A6:AD:7F
            X509v3 Authority Key Identifier:
                keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:34:c1:a9:96:c5:3e:28:63:2a:00:41:a0:1c:57:c3:74:
         e1:e6:36:19:df:c5:b4:d2:e5:38:83:a2:17:52:27:af:d3:b1:
         00:0e:08:63:06:80:d7:da:59:6d:13:da:27:71:50:66:53:d9:
         85:19:e5:8b:62:ea:d8:47:9f:e0:1f:98:fc:76:93:96:b7:07:
         68:43:9a:a1:34:92:c0:42:9f:14:25:ee:31:15:1a:6b:bf:85:
         1d:c5:5e:4a:e7:d7:c3:1c:61:5d:2e:cd:9e:66:72:da:fd:b3:
         7d:5a:5f:3a:e6:9f:c6:c4:7f:18:49:55:19:32:c0:78:0f:1d:
         a4:53:d2:db:66:f9:fd:2a:09:81:4f:83:cc:f9:0b:aa:15:32:
         9b:e4:68:bd:1e:0a:fd:31:b4:8a:a8:b6:8a:1f:6d:88:df:89:
         33:d1:b1:48:6d:1e:d7:38:54:56:90:cb:ab:ba:e5:e6:13:c4:
         77:8b:b9:4a:89:6a:34:c0:95:17:e0:9e:ef:90:93:7c:ec:4c:
         c7:d8:b6:61:83:41:51:3c:a7:7b:16:fd:0d:47:a1:b9:d9:4e:
         c1:ce:38:03:41:31:ad:b2:f8:53:28:36:08:c7:4d:f1:34:f5:
         51:a2:3e:1b:09:ed:10:8f:b5:84:19:d8:18:7f:99:a2:ab:ea:
         18:f7:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:41 2026 by rpki-client