This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
File:                     5GfUsiPAgVQKkfIRfW5UihuCiew.mft (raw, json)
Hash identifier:          iVvmXcEanP09cZqCFChBXR2dilL1qGdxmEulUyXAV1Q=
Subject key identifier:   39:79:4A:6D:24:5B:11:8D:79:FB:11:93:51:6E:97:9F:4A:46:C5:5D
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Certificate issuer:       /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial:       0568
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
Manifest number:          0564
Signing time:             Sun 25 Jan 2026 02:46:20 +0000
Manifest this update:     Sun 25 Jan 2026 02:46:19 +0000
Manifest next update:     Tue 27 Jan 2026 02:46:19 +0000
Files and hashes:         1: 5GfUsiPAgVQKkfIRfW5UihuCiew.crl (hash: L4oN+7KdFwx0v5ZI+d6MhdzxZLB0KgR3YAkwQXNcmKs=)
                          2: 04EDE310BFC711F0A31BB5E6DAE4EC9C.roa (hash: 0QychqzlMIzWQM6dar4QBq1yYOt0ya+7aLt7+P0MnUM=)
                          3: 52526144E26C11EC955D66B3F1222468.roa (hash: wsdzu4KpztjrJvczumWwqzotF/Rua7W27u+H+9K+kyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
        Validity
            Not Before: Jan 25 02:46:19 2026 GMT
            Not After : Jan 27 02:46:19 2026 GMT
        Subject: CN=697583fc-0c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:39:59:d9:0e:e5:c5:e5:5a:f4:cd:0c:1f:
                    18:43:d7:fe:3d:68:1a:f5:cb:02:5b:66:be:ab:9e:
                    04:bd:b8:06:91:10:57:a4:92:8d:51:40:32:18:8c:
                    d9:00:3b:5a:bf:7c:81:31:29:28:3f:70:b3:b0:ce:
                    ba:72:cf:85:36:3b:39:f6:bd:7f:d0:98:f2:0b:b1:
                    c4:2b:a1:71:42:4c:da:78:6f:4e:f1:cb:3d:a0:52:
                    d1:75:be:bf:40:bb:e7:09:de:2c:63:64:44:ef:bf:
                    68:97:91:ff:90:85:4f:07:99:65:84:13:1e:34:5f:
                    85:53:55:3d:76:c5:ee:b5:6e:89:ac:1f:a2:ad:98:
                    9d:30:6e:96:0c:5e:0e:24:ef:62:70:de:35:5e:0a:
                    16:16:4e:7d:29:6f:0d:78:ac:25:44:11:95:6a:cd:
                    4d:30:13:1a:cc:70:86:26:5a:53:83:dc:eb:af:2c:
                    18:0b:b5:e4:18:ae:81:eb:50:0c:9d:0d:98:02:27:
                    84:2d:ab:a9:ba:a0:1e:fb:d2:73:9b:32:ab:45:5a:
                    fd:b8:45:2d:99:19:d3:4c:43:91:3a:67:41:ff:13:
                    67:d4:f1:cd:ce:07:4f:d7:e6:8a:b2:83:b8:82:d7:
                    2a:00:11:2b:4a:89:97:a8:88:91:cb:7d:4c:38:63:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:4A:6D:24:5B:11:8D:79:FB:11:93:51:6E:97:9F:4A:46:C5:5D
            X509v3 Authority Key Identifier:
                keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:f8:fe:65:96:38:a6:51:a3:39:ad:cf:20:f7:9c:38:21:
         ff:5b:c0:0b:d6:eb:7c:e4:9e:b2:99:60:7b:60:9c:37:9c:d7:
         a1:40:48:96:e1:fa:02:d2:b7:68:a0:6b:21:15:da:59:2c:9f:
         8c:0a:e1:fb:6b:72:cd:5f:95:83:95:ea:9c:fb:9a:d2:37:a3:
         f0:c0:bc:26:2e:c6:20:c2:35:e3:39:d7:d4:da:8b:87:fa:fe:
         08:9d:9f:64:56:71:90:5f:f3:c0:be:a3:36:b7:7b:98:26:97:
         d8:9e:de:95:8c:fa:f2:0b:93:6b:df:a1:ca:93:f3:9c:08:01:
         77:bc:57:4f:4b:57:2b:b9:8c:0b:5a:0b:f0:3f:53:5b:8c:bc:
         af:1e:aa:ae:f0:cf:50:bf:f1:3b:88:1b:e9:8a:60:2e:b0:04:
         bb:d5:62:e5:b4:44:61:df:1b:08:9d:61:50:d0:b1:85:ab:c4:
         12:3c:7b:b6:c4:95:cc:f2:6a:11:9f:49:b6:de:66:07:08:c8:
         ca:3b:16:58:ae:41:f9:73:f9:e7:a0:a1:ef:42:4b:f7:4a:dc:
         bf:de:7b:d9:e9:81:23:ca:34:07:be:10:c6:42:34:72:fa:d5:
         a7:58:3d:3c:6b:01:7b:51:1b:a1:26:35:00:79:dc:60:b0:95:
         4c:c9:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:30 2026 by rpki-client