This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
File:                     U0PDi98uSRgxOaWKxC8Rb6mWc80.mft (raw, json)
Hash identifier:          3bwrgDbPhB3S8oLbGudP9mSbjEwlz3O17PznbnF9yYI=
Subject key identifier:   81:3E:79:9C:79:63:1B:8B:DF:A0:20:36:CD:71:29:B1:C6:03:8B:D1
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Certificate issuer:       /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial:       0528
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
Manifest number:          0524
Signing time:             Sun 25 Jan 2026 02:54:40 +0000
Manifest this update:     Sun 25 Jan 2026 02:54:39 +0000
Manifest next update:     Tue 27 Jan 2026 02:54:39 +0000
Files and hashes:         1: U0PDi98uSRgxOaWKxC8Rb6mWc80.crl (hash: BFCk5gAXodUp2nbWFWq2yX2q34VaA/xg9pZEkp9nb0k=)
                          2: 391A826E132311ED89F578F7F1222468.roa (hash: f4iDvOghIvvKoUP+uwLCDZEkbK2gOJxg1Mz+fV118HQ=)
                          3: 8EDD8A98132311EDA5DBA8F8F1222468.roa (hash: NC2uz7SGVEzPm4cOqmNgoejzxjyFF2dCIW3kwBubs0A=)
                          4: 442E54A0698611ED8D98369BF1222468.roa (hash: v9qpDczOM2omGAxHNgOZ2CM78LXieRY5BCkv9MbsQT8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AF, serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
        Validity
            Not Before: Jan 25 02:54:39 2026 GMT
            Not After : Jan 27 02:54:39 2026 GMT
        Subject: CN=697585f0-d802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:7e:9e:f4:75:41:31:92:25:e9:b8:99:1f:
                    3f:c4:07:b8:b4:47:0e:10:25:f4:20:05:92:dd:a8:
                    32:51:9e:75:0e:6b:73:90:2d:73:24:1c:e4:3c:c1:
                    39:1c:05:87:b9:0c:7a:f0:58:dd:15:32:07:53:1b:
                    7a:cd:e3:f4:c4:0b:9e:a9:43:c3:c9:64:eb:cd:5c:
                    7b:55:e9:51:5d:0d:6e:02:32:a7:c7:00:f2:08:a5:
                    67:33:75:19:62:04:c4:76:ee:e1:b2:00:1e:a6:3a:
                    70:6f:33:cd:56:4a:26:f8:a3:f9:c9:7c:b8:8b:52:
                    bd:a0:c0:5e:36:00:fd:f4:ca:41:53:7f:8a:17:18:
                    a3:d9:de:58:01:6b:64:1f:83:10:c6:98:10:be:1f:
                    87:ce:06:39:c0:5b:05:fa:be:f9:27:66:fd:84:eb:
                    8d:7e:a1:fb:b7:71:5b:b2:8f:38:99:32:71:77:d9:
                    1d:44:5c:33:e6:dd:cc:33:09:d6:f6:15:4b:b8:20:
                    4a:36:95:fd:b5:40:08:22:7d:5b:24:e5:1b:d6:8b:
                    88:e2:a7:5c:44:30:4e:2f:46:7c:2b:aa:35:b0:da:
                    62:de:72:78:a5:e9:31:c0:1b:ce:b8:3d:00:d4:a5:
                    90:6b:7a:74:e8:c7:73:86:7b:e7:b6:2b:a1:66:da:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:79:9C:79:63:1B:8B:DF:A0:20:36:CD:71:29:B1:C6:03:8B:D1
            X509v3 Authority Key Identifier:
                keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:24:2d:32:4a:0c:aa:22:57:5c:6f:9c:55:88:8c:d0:0f:fd:
         1f:f4:dd:cc:5f:f5:aa:9e:4c:e8:7d:68:06:5d:83:1b:77:cb:
         19:d3:f6:12:dc:45:03:c4:45:8a:2b:a4:7b:6d:1e:3f:30:4b:
         0e:b4:e9:8a:34:79:5b:c7:b1:96:49:5f:71:16:c6:7f:a5:83:
         d9:09:05:0b:c2:44:fa:01:83:09:11:74:c6:90:a4:27:e0:cb:
         d3:62:4f:4a:37:e8:c6:f0:c0:33:12:84:dc:ad:7d:56:2e:d7:
         f2:e2:35:9b:38:d2:1f:f9:78:08:d1:a0:8b:34:57:5c:52:50:
         dd:5c:91:39:bb:07:7b:ff:c7:41:75:55:41:10:47:07:08:6c:
         d4:91:4e:ed:01:15:37:37:e2:86:8e:2a:cd:35:1e:ce:46:93:
         df:65:d9:4e:01:e4:e9:2c:cd:9b:f7:44:6e:c3:87:4e:46:70:
         2b:a9:c9:bd:7f:5d:b3:41:24:4e:b1:bb:99:bb:47:55:1b:b7:
         14:1c:a0:51:f8:6b:db:5e:93:a1:3f:ae:7e:91:c3:a2:ca:bd:
         f5:a1:3a:9f:87:5b:68:d1:c8:ec:55:ba:d1:d0:98:53:6b:0a:
         0e:f2:8e:a3:14:8c:ec:a4:dd:92:ea:11:80:4d:68:4f:e7:85:
         c4:fe:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:09 2026 by rpki-client