This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          1vBT/I4Ph/9WpAF2duopWnDebkB1YnQMmoiXJZKOaoc=
Subject key identifier:   2B:5C:FD:A9:FC:3F:AE:83:B0:C3:DF:AD:3F:AA:D0:2F:A6:BE:8A:23
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       0698
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          0696
Signing time:             Sun 25 Jan 2026 02:18:39 +0000
Manifest this update:     Sun 25 Jan 2026 02:18:38 +0000
Manifest next update:     Tue 27 Jan 2026 02:18:38 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: IVKt34Hfu+MTaBVl1M+scj3SQGmpv5Wd114cte2sZ5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Jan 25 02:18:38 2026 GMT
            Not After : Jan 27 02:18:38 2026 GMT
        Subject: CN=69757d7f-83e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:2c:3e:bc:73:67:27:02:5e:95:ad:47:ca:
                    06:fb:72:d1:79:16:a9:0d:32:88:9e:76:e7:93:43:
                    f8:c5:cf:16:74:53:4f:e0:cb:ba:87:4e:36:43:8c:
                    fe:8f:de:f2:58:de:1b:6b:f3:a1:e8:bb:b8:70:2b:
                    26:79:46:c0:fd:ac:25:f2:fc:60:10:82:98:2e:ac:
                    c1:89:80:23:b6:1e:9d:35:9e:a6:4a:8a:82:70:3e:
                    2f:cf:c6:d2:2c:02:25:4c:17:84:97:4b:cb:27:45:
                    45:b6:82:91:4c:cc:77:75:5e:ce:71:5b:79:bc:36:
                    b4:81:ef:21:ba:6a:f2:3b:8a:33:fc:c8:ca:46:33:
                    4c:1f:3d:a3:0f:a8:ff:e0:51:7b:de:1e:35:46:87:
                    83:a1:af:64:33:34:9a:23:2d:03:6a:00:5d:1c:10:
                    ab:a8:92:a9:5d:40:12:be:f9:83:26:4e:a0:5a:ab:
                    6b:24:c6:d0:83:60:88:62:97:b4:c9:6d:0e:83:5c:
                    16:56:12:d7:c1:51:67:cd:b5:42:64:dd:f5:8d:3b:
                    11:ab:00:32:84:26:24:33:32:4a:0a:43:17:93:da:
                    7d:e1:c6:a6:de:d0:77:34:1f:42:4b:b1:82:2e:e3:
                    87:0b:58:bc:b2:11:ff:99:c3:36:24:26:63:99:89:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5C:FD:A9:FC:3F:AE:83:B0:C3:DF:AD:3F:AA:D0:2F:A6:BE:8A:23
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:f9:0e:d6:e6:e1:7b:ba:5a:81:f6:67:e3:1f:44:51:1c:
         e3:d0:ab:59:c6:f2:2f:86:24:2f:9a:fe:c8:26:8b:b0:f9:63:
         99:4d:ba:58:b5:d0:3c:42:35:80:07:b9:b9:58:9c:f9:92:96:
         ac:af:0a:8a:19:ce:dd:75:0c:94:25:31:ba:bd:6e:73:98:1a:
         5b:37:2e:22:21:8c:e1:e1:0f:6e:2a:d3:b9:aa:3d:f6:75:28:
         57:28:cb:4e:ac:d0:35:cd:cb:9d:a3:3b:96:62:74:3c:68:76:
         fd:8a:ea:10:c3:99:da:28:35:f2:02:00:8d:0b:a0:cc:4f:63:
         b9:26:45:d6:88:6e:f0:db:fe:af:5a:c6:87:c3:58:c3:1d:33:
         10:7a:9b:82:4a:8c:ea:51:f9:a9:43:fc:ec:8b:b9:1a:0d:a5:
         e7:08:51:b8:c6:7f:90:10:6a:4a:a8:70:5c:2e:68:b1:23:f2:
         56:90:4c:c1:4e:ba:f4:63:68:ed:32:7d:63:df:5b:a1:30:42:
         a5:82:62:83:11:8b:15:f3:1b:af:da:39:aa:05:0d:a2:06:a7:
         f6:e9:d5:2a:58:3d:b4:f2:4c:84:41:80:54:52:c5:9a:f2:09:
         33:d6:3e:d2:98:97:5b:cd:94:dc:74:73:0f:fc:1c:a4:39:76:
         68:c5:20:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTcwRjRBRjExMC8GA1UEBRMoQTk0MjNGQTRDMDAyNkQyRTREQTgyMTJEMTI4RDlE
MjcwN0U4MURDOTAeFw0yNjAxMjUwMjE4MzhaFw0yNjAxMjcwMjE4MzhaMBgxFjAU
BgNVBAMTDTY5NzU3ZDdmLTgzZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEPiw+vHNnJwJela1Hygb7ctF5FqkNMoiedueTQ/jFzxZ0U0/gy7qHTjZD
jP6P3vJY3htr86Hou7hwKyZ5RsD9rCXy/GAQgpgurMGJgCO2Hp01nqZKioJwPi/P
xtIsAiVMF4SXS8snRUW2gpFMzHd1Xs5xW3m8NrSB7yG6avI7ijP8yMpGM0wfPaMP
qP/gUXveHjVGh4Ohr2QzNJojLQNqAF0cEKuokqldQBK++YMmTqBaq2skxtCDYIhi
l7TJbQ6DXBZWEtfBUWfNtUJk3fWNOxGrADKEJiQzMkoKQxeT2n3hxqbe0Hc0H0JL
sYIu44cLWLyyEf+ZwzYkJmOZiemtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUK1z9
qfw/roOww9+tP6rQL6a+iiMwHwYDVR0jBBgwFoAUqUI/pMACbS5NqCEtEo2dJwfo
HckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU3MEY0LzY5NTY4NDE2RjA1OTExRUJBRjU2RjQzQkQ4QTAxNENFL3FVSV9w
TUFDYlM1TnFDRXRFbzJkSndmb0hjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FVSV9wTUFDYlM1TnFDRXRFbzJkSndmb0hjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTcwRjQvNjk1Njg0MTZGMDU5MTFFQkFGNTZGNDNCRDhB
MDE0Q0UvcVVJX3BNQUNiUzVOcUNFdEVvMmRKd2ZvSGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcf/kO1ubhe7pagfZn4x9EURzj0KtZ
xvIvhiQvmv7IJouw+WOZTbpYtdA8QjWAB7m5WJz5kpasrwqKGc7ddQyUJTG6vW5z
mBpbNy4iIYzh4Q9uKtO5qj32dShXKMtOrNA1zcudozuWYnQ8aHb9iuoQw5naKDXy
AgCNC6DMT2O5JkXWiG7w2/6vWsaHw1jDHTMQepuCSozqUfmpQ/zsi7kaDaXnCFG4
xn+QEGpKqHBcLmixI/JWkEzBTrr0Y2jtMn1j31uhMEKlgmKDEYsV8xuv2jmqBQ2i
Bqf26dUqWD208kyEQYBUUsWa8gkz1j7SmJdbzZTcdHMP/BykOXZoxSAb
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:23 2026 by rpki-client