This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
File:                     ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft (raw, json)
Hash identifier:          C4WCYRdv3mOPKT6hXFhOWeIXlPiT/FFrXQYOqFhnkwg=
Subject key identifier:   DF:B9:A3:70:43:35:CE:18:B1:D9:EC:7E:EF:75:18:B2:07:8B:32:03
Authority key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74
Certificate issuer:       /CN=F36DD266AF/serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
Certificate serial:       0C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
Manifest number:          0B
Signing time:             Sat 24 Jan 2026 05:29:47 +0000
Manifest this update:     Sat 24 Jan 2026 05:29:47 +0000
Manifest next update:     Mon 26 Jan 2026 05:29:47 +0000
Files and hashes:         1: ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl (hash: yKhtD1VdwT7PWR/dc+U1R7pAXDXlWmHBKnU559Fyxi8=)
                          2: CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa (hash: i/Wi+caUXTG32H1sLXk5LlvkMGbjcNs/nOtlDeXv2gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 05:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
        Validity
            Not Before: Jan 24 05:29:47 2026 GMT
            Not After : Jan 26 05:29:47 2026 GMT
        Subject: CN=697458cb-d987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:0a:95:b9:e7:3c:f7:6c:b4:05:9f:f7:6c:
                    40:81:1a:e0:c0:cf:23:3f:ae:41:44:df:ae:b7:7c:
                    8d:90:6f:19:57:a8:29:80:c0:15:56:64:57:17:e0:
                    f4:17:6c:13:07:91:72:7b:1f:72:79:ba:bb:9d:28:
                    6b:6d:5d:b4:fd:60:0e:6d:63:90:11:6b:87:af:40:
                    b8:34:5a:bf:a3:c2:f0:3f:7e:9f:c0:6e:18:85:7b:
                    53:7a:5b:4a:66:e0:b9:0e:39:18:6e:1f:1e:d2:95:
                    62:d7:e5:37:a1:b9:a9:8f:3f:24:5e:c1:0f:0c:19:
                    83:00:8b:cd:3c:59:46:6c:36:1f:27:e5:a3:60:c5:
                    c8:b7:e8:d7:6b:9d:3d:7c:cf:4e:0c:a4:45:03:6c:
                    03:39:d9:28:c6:a5:22:44:2a:39:fb:13:33:b5:93:
                    8d:37:c2:93:9f:0b:94:df:e8:6f:3f:4a:32:0a:5c:
                    70:44:69:3c:5a:53:d1:de:45:fa:b6:32:07:73:c4:
                    54:b4:61:c5:09:c1:cf:a8:a2:09:e3:f7:47:cb:e3:
                    62:46:9f:7c:2e:8b:fa:e2:54:88:42:fa:75:20:f6:
                    67:de:cf:a9:e7:26:bc:d7:01:1a:56:55:c1:c6:5d:
                    c5:35:7d:3b:4d:09:61:d3:ae:9e:75:d5:f3:1d:9d:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B9:A3:70:43:35:CE:18:B1:D9:EC:7E:EF:75:18:B2:07:8B:32:03
            X509v3 Authority Key Identifier:
                keyid:22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:e4:2a:2f:e9:09:cf:8c:d8:fb:76:37:ed:21:64:f3:37:
         39:e0:40:20:25:5e:21:6a:05:39:b2:68:88:3a:e7:1a:05:ca:
         b9:ea:93:47:b7:44:83:74:bf:1f:bc:d8:a4:b9:df:51:c5:d4:
         e5:8d:2f:36:2d:76:44:d5:7e:93:2c:05:1e:d3:01:26:fa:9d:
         6f:12:89:7f:c5:8e:67:f2:3b:bb:4f:3b:ab:f0:ae:24:b8:fb:
         cc:07:fa:d7:96:fe:41:1b:86:d1:50:dc:f4:10:6c:c3:be:f8:
         da:d9:85:95:2d:4d:ba:64:29:1c:22:4c:e4:17:2e:80:5c:cd:
         70:5b:74:06:34:84:44:15:d7:5b:f2:97:6f:70:d9:a1:e6:3a:
         9d:87:48:10:8f:f8:33:b7:93:af:43:c5:30:65:32:59:93:02:
         c6:ce:ee:5b:30:97:c0:9f:e5:db:21:29:af:1f:b9:f2:fe:5f:
         95:25:3a:50:52:39:52:ee:38:b5:2e:23:07:ea:0b:4a:c0:d9:
         48:fb:66:18:15:6c:72:27:e2:c3:04:9d:51:c1:c0:27:a7:5c:
         98:46:7e:b9:d1:31:8f:33:25:5f:05:41:b5:b7:10:87:6c:ed:
         75:8d:b2:21:89:77:14:d0:e2:db:85:92:0c:30:c2:af:a4:79:
         ad:fa:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:16 2026 by rpki-client