This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          RM5CNvr+KL6ioTXnjvhaF7S3bZYX/aT+BmNoP31ZyAQ=
Subject key identifier:   97:28:5B:C5:B7:C3:F3:1E:DC:16:95:FD:82:FF:0F:50:7A:56:42:0B
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       045A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          0458
Signing time:             Sun 25 Jan 2026 03:17:01 +0000
Manifest this update:     Sun 25 Jan 2026 03:17:00 +0000
Manifest next update:     Tue 27 Jan 2026 03:17:00 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: u7QiLQ+MRDdUcOvPk1z3shQEoeltxg7f8Rd62kXDNCw=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Jan 25 03:17:00 2026 GMT
            Not After : Jan 27 03:17:00 2026 GMT
        Subject: CN=69758b2d-3c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:87:66:81:c7:f9:e3:62:a2:27:37:06:65:
                    60:5c:45:fa:ba:26:11:3d:f2:7d:73:ef:ad:c6:fd:
                    15:8d:1b:81:8a:62:4c:00:e8:75:cc:df:8c:86:48:
                    4d:88:66:9e:2e:a5:48:60:f6:70:c4:39:df:d7:32:
                    4f:92:a6:9c:86:20:43:ec:fc:7e:57:17:b9:84:7c:
                    96:80:ee:ed:05:ef:f7:f7:e8:90:e9:aa:67:7a:2b:
                    14:0d:2f:4f:37:26:f9:22:f0:4c:97:1a:11:c0:76:
                    eb:d6:0c:56:88:48:a9:a1:92:35:48:46:f2:11:b1:
                    88:c1:7f:bd:e4:b7:b0:f1:c6:9a:8d:50:8b:31:b6:
                    cc:89:f4:78:ea:22:44:5e:eb:16:4a:08:5a:01:e6:
                    3a:ea:17:6e:91:0c:66:5f:67:1a:ed:a2:7e:ae:28:
                    23:ee:78:c3:4b:e4:88:d3:d4:06:9b:25:3e:3c:ef:
                    85:05:fa:45:2f:5b:f7:28:4f:df:5a:97:9f:c1:be:
                    47:39:0e:74:b7:b3:82:12:8e:ff:ad:84:4a:55:f0:
                    c6:49:81:92:1c:ba:67:aa:3b:dd:33:62:8e:dc:f9:
                    e4:1b:96:6b:77:c1:e9:f6:2b:be:8f:fc:9a:b8:1e:
                    6e:14:ef:8d:3b:e6:b9:7a:71:1b:e7:5c:00:33:bf:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:28:5B:C5:B7:C3:F3:1E:DC:16:95:FD:82:FF:0F:50:7A:56:42:0B
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:5a:6b:96:80:4f:9b:53:52:91:ef:6f:e4:5f:c7:03:ba:
         52:7b:f2:59:f7:68:f9:58:fc:0d:9c:22:84:9c:f5:23:08:23:
         8f:0b:4e:60:d8:aa:0d:18:8e:4b:38:b2:1b:47:49:b8:c6:3c:
         9d:91:1b:d7:dd:22:04:a3:23:fc:cf:99:d4:ad:8b:13:ab:97:
         97:bc:e3:d6:fe:b6:34:ba:ab:65:3c:33:36:c1:3f:3f:76:95:
         f4:5e:c0:a1:ff:ba:d8:d3:84:65:d4:d1:ca:40:e0:25:28:8e:
         08:48:af:9c:0c:78:78:2d:d6:bd:e4:9b:84:0c:de:59:77:95:
         27:f2:41:cd:d8:17:b0:e9:e4:7a:1f:d7:4c:62:36:f9:22:26:
         51:64:32:12:a4:9f:44:62:7b:85:9b:8c:94:e3:d2:a6:5a:65:
         08:18:be:67:89:13:6d:b1:91:00:d2:0c:cd:ca:4d:cc:65:7a:
         c8:1c:0e:77:be:df:b7:5e:78:47:24:44:12:00:1b:88:5e:da:
         08:7b:3d:fc:f1:b4:48:56:97:47:7c:25:7e:fd:3c:69:0c:c8:
         4e:67:24:25:9e:35:82:aa:04:13:51:72:40:f5:25:ea:77:b9:
         35:2b:99:54:d2:ea:5f:b6:50:d0:5b:9a:3d:58:42:23:36:df:
         63:4b:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:56 2026 by rpki-client