This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
File:                     zFDm0Igy-da0ktsaCun0dMNadjo.mft (raw, json)
Hash identifier:          gEBS7TNacOj0KmBGJTKvwGD+kpVVP2HNZRXJUsm6QNY=
Subject key identifier:   9A:8B:29:5C:72:39:4B:73:5F:74:AB:F0:E0:C3:51:EA:42:C3:9D:60
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
Manifest number:          0D
Signing time:             Sun 25 Jan 2026 05:27:12 +0000
Manifest this update:     Sun 25 Jan 2026 05:27:11 +0000
Manifest next update:     Tue 27 Jan 2026 05:27:11 +0000
Files and hashes:         1: zFDm0Igy-da0ktsaCun0dMNadjo.crl (hash: sY/VUFdW5wXxZrpGA3lHoTUmFYN0B9KqBPm683Fg9eU=)
                          2: 890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (hash: jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Jan 25 05:27:11 2026 GMT
            Not After : Jan 27 05:27:11 2026 GMT
        Subject: CN=6975a9b0-7d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ea:97:72:3c:ff:e9:50:80:d8:c9:b9:12:2a:
                    f5:53:4e:08:3e:e4:b3:24:73:a3:07:e7:40:e0:ad:
                    c8:37:63:93:5e:00:a3:c6:3d:be:51:af:95:d1:4d:
                    0d:82:c7:cb:4c:3b:c8:98:5e:19:2c:cd:33:5c:26:
                    e6:25:40:75:8d:97:66:77:19:c6:c4:ac:b3:d9:51:
                    32:56:a0:e3:9e:d6:10:d2:5e:fc:30:1c:74:ec:7a:
                    45:cc:11:82:1b:a8:ca:8f:ce:a3:1c:d6:07:9c:4a:
                    cc:94:2d:69:d0:c9:86:81:f4:13:1a:59:17:c5:da:
                    98:1d:c8:6c:f7:67:31:3f:b8:14:bf:d7:28:ef:a4:
                    7e:28:90:46:c9:a5:17:fb:2b:54:86:8c:4c:fd:d3:
                    1c:d0:02:8a:a7:a7:b9:c3:7c:96:d1:ab:72:6e:98:
                    b4:c0:42:c4:14:2d:9a:08:1f:a4:a4:07:44:62:b4:
                    ce:a3:90:07:65:d8:c2:ed:ea:06:63:4b:1b:0b:b5:
                    4b:3f:25:12:36:42:63:4d:2a:89:57:b6:4f:15:45:
                    18:04:61:60:0c:a3:70:bf:45:e2:48:4f:f8:f5:63:
                    63:11:d6:d4:82:f4:b2:ca:67:42:03:3a:1f:a2:ac:
                    17:b8:85:ad:23:06:56:83:e2:b3:9d:7b:49:e0:7b:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:29:5C:72:39:4B:73:5F:74:AB:F0:E0:C3:51:EA:42:C3:9D:60
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:30:49:e4:ea:6e:46:2f:45:ff:9e:d8:63:6b:30:01:3b:19:
         e7:78:f9:85:4a:0c:8e:a5:ba:55:a3:44:09:00:b6:d5:c4:70:
         a3:81:d4:1d:49:fd:5f:40:80:68:f6:b8:3e:ed:36:12:a1:44:
         06:11:7a:36:2b:55:62:75:83:1e:6b:3a:61:f6:3a:01:e0:69:
         f9:2e:83:34:1e:44:69:9a:d3:08:4e:fc:55:5d:06:e4:e4:b6:
         94:ed:2e:b1:ac:97:b4:75:8b:cf:b6:2d:f6:29:83:cd:ed:07:
         2a:06:7e:09:e6:6f:b7:76:72:2b:fe:a0:42:74:08:a9:9c:d2:
         de:68:8f:e3:49:c4:a6:78:67:c5:e6:ce:69:80:c7:15:bf:54:
         5f:f3:e2:2f:d7:74:eb:df:27:db:cb:45:35:a8:6a:42:7d:82:
         4e:a9:e2:14:bd:cf:20:ae:b9:3d:50:bb:78:98:f7:9d:cf:1f:
         9c:9a:1b:c4:93:fc:70:90:d6:5c:12:af:ee:d7:e0:8c:30:ce:
         ba:27:67:21:51:7c:e9:fd:0f:bd:a1:7c:e2:51:03:bd:30:fc:
         e8:4c:91:c6:d5:31:14:f6:22:21:ac:33:c7:ec:dc:5c:fd:48:
         ae:24:ed:7c:76:62:a5:fb:18:cd:b3:50:35:8b:e3:32:19:fa:
         6b:1c:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:31 2026 by rpki-client