This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          A43tV4v1RJEdL6O5JQzJpk8Wl27tj0/v36Ars8Lx7rs=
Subject key identifier:   E7:4D:D8:E4:DB:37:70:78:84:3C:45:D2:2F:26:E3:1D:5F:25:89:61
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       01BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          01BC
Signing time:             Sun 25 Jan 2026 04:42:57 +0000
Manifest this update:     Sun 25 Jan 2026 04:42:56 +0000
Manifest next update:     Tue 27 Jan 2026 04:42:56 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: aJVrSepqErZEurz/6+LDVTSMe/vUP35NSrctDkl5LxA=)
                          2: 678B7098E48D11EFB0502A6E762E951A.roa (hash: jonAE1XfJY/5m4j4uM2w3HbC11SG5Uy6EkEVqN0G0Cw=)
                          3: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: Jan 25 04:42:56 2026 GMT
            Not After : Jan 27 04:42:56 2026 GMT
        Subject: CN=69759f51-ba29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:ba:ed:65:98:b2:f2:92:2e:34:c3:8a:60:
                    0e:97:44:4f:34:12:83:51:13:65:34:5c:87:3d:e0:
                    cc:72:09:87:f0:95:45:2f:d0:6e:c1:e4:94:6f:5c:
                    9a:45:4f:03:c7:f3:4b:45:de:51:ad:d9:21:b7:40:
                    b4:ef:bc:db:e0:7a:4f:02:bb:e0:b3:e3:e7:c9:3e:
                    66:14:74:04:9f:bb:7a:ec:ef:58:db:1a:f9:79:72:
                    53:8f:05:9b:3b:32:b6:9c:a7:e8:44:9e:75:a2:7a:
                    5d:d1:bd:91:33:6e:f4:a1:81:2a:41:f9:fd:7e:87:
                    99:1b:aa:27:aa:9a:fc:23:ae:10:a7:42:d0:42:a9:
                    ec:f2:82:a8:15:2f:33:2a:d3:34:f2:bb:97:66:e3:
                    39:e7:b8:d0:bf:d3:cf:24:f9:c6:3d:33:3a:b3:8a:
                    d9:57:87:1c:94:d7:81:e5:e7:f5:16:0d:d5:54:18:
                    29:bf:b7:f1:b3:26:c7:ba:64:24:8a:10:92:6c:08:
                    8e:04:11:2c:ac:c1:6d:93:df:96:c7:0b:1f:09:bf:
                    35:a3:29:5f:46:52:32:35:ec:32:e3:d9:4d:37:98:
                    8b:f5:ba:41:6c:7d:60:b5:aa:f9:88:55:27:79:c2:
                    02:17:02:30:bb:5c:12:e2:d7:3d:3b:80:2b:00:0d:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:D8:E4:DB:37:70:78:84:3C:45:D2:2F:26:E3:1D:5F:25:89:61
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:d9:65:b8:9c:24:98:10:d4:c6:27:8a:f9:5e:c2:d4:97:
         a4:ee:0b:f8:fd:25:ab:1c:3c:ba:e4:34:d6:19:84:87:fa:bc:
         0f:f0:73:67:55:e3:7a:c8:51:0d:13:5c:ef:53:a4:55:e1:58:
         46:b2:de:e4:07:4c:ea:2d:a3:96:b1:dc:ac:b4:8f:c2:69:ac:
         cf:92:af:43:a6:8f:a1:2d:b1:23:b1:2c:b8:02:92:22:5b:97:
         03:8b:4b:86:db:e0:5e:20:7f:52:29:79:6b:20:98:b1:77:cb:
         26:ce:ac:0e:af:a6:df:43:e4:87:82:aa:80:76:6f:dc:1e:fc:
         c3:31:17:d7:8f:25:c5:c3:4b:a7:60:3e:95:ff:07:a8:f5:4a:
         2b:c8:12:5a:55:a2:4c:4b:ca:65:f0:0a:99:f4:65:87:f5:6f:
         44:a9:22:06:22:44:2f:d8:1c:49:38:91:1c:d5:58:0c:c8:99:
         35:50:3a:49:23:54:25:56:1e:b6:b0:6e:12:20:88:cf:b6:ac:
         0d:69:c9:57:6e:cc:6f:2e:e2:0d:66:99:06:83:f1:f8:e6:88:
         34:39:3e:0e:e6:10:11:29:f4:cc:d9:60:1f:67:61:e2:e0:59:
         76:fa:9f:d1:af:32:50:0f:73:e8:58:77:f8:53:1b:c9:83:20:
         6e:a7:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:07 2026 by rpki-client