This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          MjsjMq7vrn1jAzp8LJQ3pWcje85eq+KtH62ftbOo1us=
Subject key identifier:   EE:B1:29:47:45:AD:B7:FA:F4:26:E8:59:FA:02:9F:8D:B1:2A:9D:71
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0406
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          0402
Signing time:             Sun 25 Jan 2026 03:28:08 +0000
Manifest this update:     Sun 25 Jan 2026 03:28:07 +0000
Manifest next update:     Tue 27 Jan 2026 03:28:07 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: wWgUASkl/p2zEtKPHWdj3fhMYP8V69BB/kMmwGKE/BY=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Jan 25 03:28:07 2026 GMT
            Not After : Jan 27 03:28:07 2026 GMT
        Subject: CN=69758dc8-dd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:1e:76:85:a2:2f:41:b5:fa:01:ca:a7:08:
                    2e:9d:cf:3f:9c:ad:ce:71:58:5f:c9:d6:a3:4e:e8:
                    7c:ab:2a:93:f1:06:b3:aa:d5:43:b2:ff:a5:98:cd:
                    7b:14:68:5d:67:9e:b8:48:b4:52:fb:b3:1d:e6:ce:
                    09:1c:c3:17:8a:24:1e:95:1e:e1:68:f6:95:91:16:
                    b2:35:03:28:09:24:68:82:dc:6b:b9:db:bf:d2:65:
                    3b:f9:94:13:5d:ce:62:3c:0d:0d:57:22:c1:bb:27:
                    6e:42:1a:38:14:2c:84:5e:3e:42:14:18:88:37:48:
                    b5:03:c5:48:15:83:ef:59:9b:da:72:3d:6a:79:0b:
                    12:9c:7e:58:86:dd:81:91:80:aa:6b:ca:5c:7c:c7:
                    ec:1b:70:1d:48:bc:42:10:05:7d:e8:4d:12:1b:4e:
                    55:89:ea:df:9e:c8:a7:9c:31:31:ae:da:84:f7:e0:
                    ba:d0:75:e7:d1:02:53:a9:87:ab:66:51:50:28:c6:
                    35:57:f4:d5:4b:ce:4f:d5:bc:20:ac:1d:c3:0c:cf:
                    c4:0f:43:66:93:fb:26:45:da:c5:a0:7b:30:5c:0f:
                    da:21:19:21:db:31:34:37:f7:56:1a:e7:8d:91:c4:
                    2e:70:64:15:fa:3b:ce:40:b1:e4:56:7a:62:8d:39:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B1:29:47:45:AD:B7:FA:F4:26:E8:59:FA:02:9F:8D:B1:2A:9D:71
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:95:d8:d0:2f:08:51:b9:72:a7:a9:ce:c9:5d:40:05:38:
         cd:0d:ad:e8:37:7b:aa:36:0b:f8:3c:43:00:0e:0d:7e:a9:29:
         06:af:7d:d8:a5:58:2c:91:76:f0:66:1a:ac:ae:5f:f8:96:e4:
         7e:93:19:4b:2e:02:df:71:85:38:1e:a1:35:99:4a:3b:e1:b9:
         8e:59:c2:1c:8c:e6:03:18:83:5e:f7:1e:fa:00:26:1e:7b:20:
         36:8c:4d:bb:40:fa:47:5a:b6:0b:ed:e5:f8:97:63:23:58:30:
         3d:c6:11:bb:0d:59:ca:4f:a5:ab:68:d1:c5:13:c4:c7:af:85:
         20:69:2b:5e:10:24:5d:f2:a4:2d:43:3c:f3:df:d2:01:65:61:
         47:c1:95:e1:bd:6c:bf:8f:f0:6b:45:ce:93:50:88:f9:16:10:
         a7:68:5b:33:dc:8c:4b:2e:37:22:7a:81:ae:5b:b9:2c:8a:c8:
         90:d8:67:71:9a:e4:8e:63:03:87:90:74:a8:ef:28:a1:94:89:
         da:44:54:c5:8a:e1:d1:45:17:6c:6e:9e:a4:b4:62:c1:5c:f3:
         41:e1:f8:09:f9:2f:3f:b1:96:ce:21:34:f2:5a:af:60:00:1f:
         8c:c8:c9:8f:b0:d5:87:02:a8:e1:76:2b:af:64:11:d2:89:aa:
         45:d9:a4:e7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUwNURBRjExMC8GA1UEBRMoMUREQjhFOTMxRjU3QTkyODE3NjQ5ODMwQzRFRDhB
REQ3NEVGNDlGOTAeFw0yNjAxMjUwMzI4MDdaFw0yNjAxMjcwMzI4MDdaMBgxFjAU
BgNVBAMTDTY5NzU4ZGM4LWRkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC22x52haIvQbX6AcqnCC6dzz+crc5xWF/J1qNO6HyrKpPxBrOq1UOy/6WY
zXsUaF1nnrhItFL7sx3mzgkcwxeKJB6VHuFo9pWRFrI1AygJJGiC3Gu527/SZTv5
lBNdzmI8DQ1XIsG7J25CGjgULIRePkIUGIg3SLUDxUgVg+9Zm9pyPWp5CxKcfliG
3YGRgKprylx8x+wbcB1IvEIQBX3oTRIbTlWJ6t+eyKecMTGu2oT34LrQdefRAlOp
h6tmUVAoxjVX9NVLzk/VvCCsHcMMz8QPQ2aT+yZF2sWgezBcD9ohGSHbMTQ391Ya
542RxC5wZBX6O85AseRWemKNOW3nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7rEp
R0Wtt/r0JuhZ+gKfjbEqnXEwHwYDVR0jBBgwFoAUHduOkx9XqSgXZJgwxO2K3XTv
SfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MDVELzFGQjFCNEIwRUU1RjExRURBODIxOUM1QTRBRDlFNkZDL0hkdU9r
eDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkdU9reDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjUwNUQvMUZCMUI0QjBFRTVGMTFFREE4MjE5QzVBNEFE
OUU2RkMvSGR1T2t4OVhxU2dYWkpnd3hPMkszWFR2U2ZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7ZJXY0C8IUblyp6nOyV1ABTjNDa3o
N3uqNgv4PEMADg1+qSkGr33YpVgskXbwZhqsrl/4luR+kxlLLgLfcYU4HqE1mUo7
4bmOWcIcjOYDGINe9x76ACYeeyA2jE27QPpHWrYL7eX4l2MjWDA9xhG7DVnKT6Wr
aNHFE8THr4UgaSteECRd8qQtQzzz39IBZWFHwZXhvWy/j/BrRc6TUIj5FhCnaFsz
3IxLLjcieoGuW7ksisiQ2GdxmuSOYwOHkHSo7yihlInaRFTFiuHRRRdsbp6ktGLB
XPNB4fgJ+S8/sZbOITTyWq9gAB+MyMmPsNWHAqjhdiuvZBHSiapF2aTn
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:06:19 2026 by rpki-client