This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          c0dh1fyEQ+Lv8FNuud17zCuvtGbR7lRugWYZ+vX1dxM=
Subject key identifier:   99:5A:93:0A:AB:23:77:12:D8:68:49:88:F0:86:71:C0:AA:F9:46:9F
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       0364
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          0362
Signing time:             Sun 25 Jan 2026 03:47:46 +0000
Manifest this update:     Sun 25 Jan 2026 03:47:45 +0000
Manifest next update:     Tue 27 Jan 2026 03:47:45 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: HKesc5Q42m2mD9R+fkq+/m90khSt4AG+U5WTzL1x/T0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Jan 25 03:47:45 2026 GMT
            Not After : Jan 27 03:47:45 2026 GMT
        Subject: CN=69759262-29a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:75:80:f6:af:ce:70:78:6b:f8:d8:79:55:22:
                    5d:e0:37:2e:55:08:bc:f8:f5:e6:43:5e:f0:19:54:
                    be:b1:f9:c6:78:ff:c9:5d:3b:dc:f4:b1:a7:6a:cb:
                    f0:68:b4:5f:f9:34:fd:b6:a6:c2:66:55:c6:cf:0f:
                    80:fd:0d:0b:70:d4:86:90:a7:be:da:6e:f7:27:30:
                    1e:16:f0:4e:b4:1d:85:28:32:37:34:f1:39:eb:7c:
                    31:e1:06:56:5e:6e:49:c8:8e:ce:12:2b:15:5a:cf:
                    af:bf:1f:d8:55:e8:81:c1:62:d2:7c:9d:46:a0:4d:
                    c3:0c:30:6a:79:80:74:27:8c:ae:52:be:d3:64:70:
                    2e:37:b5:94:29:c3:e6:8d:5e:19:c2:10:c7:52:65:
                    9e:bf:26:fb:7a:9c:c0:72:63:ba:e3:8b:6b:8e:3d:
                    a6:e1:09:02:43:6f:97:eb:99:22:f1:40:e5:09:dc:
                    28:07:a5:0b:3b:b2:b6:e3:bf:01:7f:db:af:05:76:
                    6d:d3:fe:af:ed:a9:92:8e:ec:e7:5d:92:5c:ca:31:
                    64:71:45:ec:c9:5d:88:83:8a:7b:43:d7:54:c6:82:
                    cc:8a:ac:a1:dd:29:cb:ed:8e:02:ac:b8:5e:59:75:
                    cf:40:2c:39:58:04:26:45:70:b3:62:00:1c:b5:6c:
                    19:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:93:0A:AB:23:77:12:D8:68:49:88:F0:86:71:C0:AA:F9:46:9F
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:79:ca:26:df:6f:82:00:cf:8f:04:b8:ee:81:e3:30:8f:f9:
         47:0d:9c:f3:c3:9a:14:7b:ef:52:37:ad:a6:dd:1f:a3:7f:5e:
         bd:17:df:11:e2:ad:34:90:cf:d2:1e:64:6a:4a:e0:0c:c9:eb:
         ed:08:08:29:47:79:79:8a:df:5d:57:32:ee:c9:b2:9e:15:71:
         7b:f9:1e:f1:a6:98:ba:bf:a1:8e:cc:fa:f0:58:a5:91:f9:0a:
         fe:55:e6:9f:32:db:99:82:b4:21:bc:14:0a:3c:21:d6:f4:d1:
         c3:aa:0d:d1:33:35:b4:1b:d4:40:7e:90:a5:55:9f:c1:fc:3a:
         4d:67:56:c5:91:04:60:a6:73:e1:fa:7e:89:14:26:00:02:a0:
         77:10:b3:28:9a:ff:0f:2f:7e:37:19:ba:99:11:6b:4d:dd:f2:
         88:f7:2c:84:b6:56:33:b1:44:53:0a:cc:6e:df:a5:c0:81:0d:
         20:0f:fa:23:e5:d4:a4:72:bc:5f:25:e0:d1:4e:b3:85:4e:17:
         ae:ae:b1:95:6c:f1:10:d1:e9:39:25:32:52:8c:d3:44:94:c8:
         99:c0:44:05:8e:da:d7:98:6d:0d:57:e2:8e:54:21:0f:36:fa:
         fd:73:0b:5f:4b:c3:4b:40:4d:06:02:eb:49:c8:0d:41:2b:bb:
         f4:d6:1d:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE5NkRBRjExMC8GA1UEBRMoODAzMDc3N0M3NEQxQUYxMjg5ODEwRTQ0RjVGRUND
OUNGMDk3M0EwRTAeFw0yNjAxMjUwMzQ3NDVaFw0yNjAxMjcwMzQ3NDVaMBgxFjAU
BgNVBAMTDTY5NzU5MjYyLTI5YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD5dYD2r85weGv42HlVIl3gNy5VCLz49eZDXvAZVL6x+cZ4/8ldO9z0sadq
y/BotF/5NP22psJmVcbPD4D9DQtw1IaQp77abvcnMB4W8E60HYUoMjc08TnrfDHh
BlZebknIjs4SKxVaz6+/H9hV6IHBYtJ8nUagTcMMMGp5gHQnjK5SvtNkcC43tZQp
w+aNXhnCEMdSZZ6/Jvt6nMByY7rji2uOPabhCQJDb5frmSLxQOUJ3CgHpQs7srbj
vwF/268Fdm3T/q/tqZKO7OddklzKMWRxRezJXYiDintD11TGgsyKrKHdKcvtjgKs
uF5Zdc9ALDlYBCZFcLNiABy1bBktAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmVqT
CqsjdxLYaEmI8IZxwKr5Rp8wHwYDVR0jBBgwFoAUgDB3fHTRrxKJgQ5E9f7MnPCX
Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBOTZELzc5MEEwNDJDNjZDRDExRUU5NTNFRDE3MDRBRDlFNkZDL2dEQjNm
SFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dEQjNmSFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE5NkQvNzkwQTA0MkM2NkNEMTFFRTk1M0VEMTcwNEFE
OUU2RkMvZ0RCM2ZIVFJyeEtKZ1E1RTlmN01uUENYT2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQecom32+CAM+PBLjugeMwj/lHDZzz
w5oUe+9SN62m3R+jf169F98R4q00kM/SHmRqSuAMyevtCAgpR3l5it9dVzLuybKe
FXF7+R7xppi6v6GOzPrwWKWR+Qr+VeafMtuZgrQhvBQKPCHW9NHDqg3RMzW0G9RA
fpClVZ/B/DpNZ1bFkQRgpnPh+n6JFCYAAqB3ELMomv8PL343GbqZEWtN3fKI9yyE
tlYzsURTCsxu36XAgQ0gD/oj5dSkcrxfJeDRTrOFTheurrGVbPEQ0ek5JTJSjNNE
lMiZwEQFjtrXmG0NV+KOVCEPNvr9cwtfS8NLQE0GAutJyA1BK7v01h0V
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:28 2026 by rpki-client