This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          ihtbrGLh9dz7m4sEw7qpWIGXtuxFslLFWjQ1tuhiQFA=
Subject key identifier:   F7:06:3B:98:12:E4:21:36:BF:65:8C:44:DF:E0:D0:00:49:76:27:53
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          48
Signing time:             Sun 25 Jan 2026 05:20:05 +0000
Manifest this update:     Sun 25 Jan 2026 05:20:04 +0000
Manifest next update:     Tue 27 Jan 2026 05:20:04 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: MyC2J+qNgSR92UK4yatj+cHzbMgVxX7IyloioIqMfis=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Jan 25 05:20:04 2026 GMT
            Not After : Jan 27 05:20:04 2026 GMT
        Subject: CN=6975a805-8bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:25:dd:3c:fd:6a:ea:80:94:4e:68:e5:c8:
                    71:75:a5:bd:d7:38:55:a0:9f:79:bf:cb:2a:ad:74:
                    a2:e3:ab:70:d8:0f:79:16:be:fc:15:1c:2a:0c:f3:
                    8b:32:2d:24:9c:b4:0c:ff:90:42:3a:b3:de:52:75:
                    42:04:5d:dc:e1:16:5e:6c:58:cf:2a:09:70:04:94:
                    45:e7:33:f4:13:42:47:31:56:ba:78:71:90:dc:e5:
                    b9:c2:89:99:09:d7:7a:6d:78:01:5f:33:9b:2c:de:
                    e4:e9:3b:79:06:37:66:c9:64:e3:69:6d:1f:ae:93:
                    b7:f8:56:cf:b6:a8:08:c5:ff:e9:ca:de:f6:66:a1:
                    1c:d6:20:8e:fe:e3:d0:82:8d:2e:b7:6c:01:3c:06:
                    4f:83:fe:a3:bb:b2:1a:46:28:3e:13:72:3a:48:d2:
                    c2:b0:0f:f9:77:b2:4a:d8:1c:ff:a8:39:8e:c0:8e:
                    0d:2d:7f:d6:7f:52:07:ca:49:9a:56:91:17:c7:c2:
                    f6:95:12:a6:17:6e:d9:06:69:76:36:0d:ca:8b:da:
                    1e:8d:11:08:2e:d8:02:48:80:69:c4:16:d1:72:59:
                    84:8a:e4:2e:42:bb:87:26:4e:4a:25:c2:3d:61:da:
                    ef:04:5d:e9:0e:7b:ea:cf:65:4c:ee:55:19:6c:47:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:3B:98:12:E4:21:36:BF:65:8C:44:DF:E0:D0:00:49:76:27:53
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:30:5e:b8:67:31:46:10:00:c4:ac:5b:a3:09:ff:c4:17:f1:
         a6:e4:ec:c3:2f:eb:28:c6:90:74:59:57:c1:84:b1:77:e7:b7:
         e4:75:a2:c6:68:83:2d:ba:b5:9b:cb:b3:6d:2d:18:37:54:7a:
         43:12:bd:6c:7a:cc:31:dc:03:e5:01:66:1c:34:24:b1:83:9d:
         2e:87:a5:38:ca:b3:c6:69:7f:3a:4d:90:92:35:63:b8:85:04:
         ba:f4:09:cf:9b:68:79:dc:f7:cb:27:ab:f8:64:5e:05:01:4b:
         33:48:bb:7b:04:8c:1f:98:2a:cd:a3:52:07:1f:90:2b:ce:1e:
         fd:a3:34:2d:4e:6c:9e:dc:0e:8c:1c:1a:7f:52:f4:b2:89:d0:
         8b:d5:03:4c:3c:8b:bd:d7:02:57:9f:8d:6c:d8:f7:8e:32:f8:
         b1:6e:b5:7c:95:c0:9e:32:81:73:7e:90:4e:e4:00:5f:67:7e:
         25:3f:e5:3e:16:88:86:fa:c5:f4:97:46:6b:9d:c0:4f:0b:ab:
         2a:82:5f:a3:15:04:60:fe:aa:36:57:75:a5:d7:2b:fb:05:54:
         d4:bd:1d:6e:e7:5f:e7:d8:44:7b:7c:7e:33:2c:00:d5:09:1a:
         d2:0a:7e:8a:6e:38:72:b6:b1:6a:49:95:43:2b:62:17:e0:69:
         f7:c3:eb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:38 2026 by rpki-client