This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          4OW09RePxdhdxU9SAMYSIav6yS3liWebOeBy61AcM8Q=
Subject key identifier:   AC:12:CC:57:63:A1:A9:37:80:EF:74:F4:FC:19:EC:B3:1D:3C:A7:24
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       0875
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          0871
Signing time:             Sun 25 Jan 2026 01:47:09 +0000
Manifest this update:     Sun 25 Jan 2026 01:47:08 +0000
Manifest next update:     Tue 27 Jan 2026 01:47:08 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: k1tISMcKIHacqoRsHdAoYxKE00yUsoKWp81KxtFsqQg=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Jan 25 01:47:08 2026 GMT
            Not After : Jan 27 01:47:08 2026 GMT
        Subject: CN=6975761d-8081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:28:94:8c:75:e7:d2:7a:3a:a1:e9:38:a6:2c:
                    cc:08:3a:0a:95:c3:a5:1d:8b:04:18:59:8e:2e:8e:
                    3a:39:fb:41:b1:b7:ca:09:c4:38:da:d7:ab:10:2e:
                    3a:5b:e8:39:82:fe:9c:b5:fb:fd:c1:a1:c5:4e:ba:
                    2b:4d:b2:de:79:d4:37:28:a3:64:cc:58:03:ba:9b:
                    dd:a5:5d:fd:f8:a8:aa:90:62:ba:d7:4b:91:4f:08:
                    35:be:69:4a:fc:09:b6:af:fa:ba:db:ea:0b:e3:2c:
                    fc:23:ca:29:90:fa:fb:e8:62:68:7e:cd:aa:3f:e0:
                    7a:cf:68:08:b5:27:6e:f5:3f:d9:b4:43:1a:39:db:
                    84:37:d0:4f:f5:85:c3:23:bc:b9:52:f0:da:ef:b5:
                    49:c5:d5:29:63:ca:e4:4c:77:00:86:ad:9b:d2:f2:
                    ba:2f:31:03:8b:46:c7:e0:bf:31:1e:99:95:bb:8e:
                    48:64:87:ce:10:e5:88:36:8a:b5:f8:f0:32:f4:e0:
                    0b:04:5d:e2:19:95:e2:34:1f:07:84:b8:17:43:a0:
                    76:84:ad:85:1b:9e:88:eb:e2:33:b0:2b:25:71:78:
                    35:b4:99:87:03:ad:08:47:a0:13:83:7a:29:41:50:
                    c3:8e:1e:85:d5:3d:98:3e:cd:a6:50:d5:ab:5e:cb:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:CC:57:63:A1:A9:37:80:EF:74:F4:FC:19:EC:B3:1D:3C:A7:24
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:22:e8:2c:ea:a5:52:a0:d2:1e:d2:7c:82:21:7e:43:14:
         e5:37:05:c2:b1:39:e7:39:ad:cd:72:63:68:23:6f:66:7e:42:
         c8:a1:32:00:6d:b2:dd:ff:45:3e:cd:16:a7:c3:08:42:a6:35:
         7a:33:07:a5:58:fe:43:17:bb:54:16:d0:06:c7:35:fd:b8:71:
         e2:a0:5d:9a:0f:de:4c:1c:58:a2:a0:d3:97:0e:7e:dc:fa:db:
         6b:48:fc:c9:50:f4:e3:d3:3a:58:e3:c8:35:d5:d7:68:ec:5c:
         35:12:04:fb:d7:7c:ab:bb:68:48:b0:94:c6:38:ff:fe:72:f0:
         9e:f9:eb:d2:09:b2:a1:82:59:d5:e4:e0:6a:8b:1b:b0:99:c9:
         4d:49:b2:00:aa:e8:ea:9b:02:62:6d:c3:84:f0:af:2c:f5:eb:
         cc:bc:2d:e3:a2:26:d3:1c:3d:d7:8f:87:87:c1:74:6f:ac:c0:
         d7:8d:00:d3:36:20:cf:1b:3e:17:21:2a:b7:45:1c:85:d9:c7:
         6b:7e:b9:64:36:6f:b9:fb:6b:0a:09:77:30:1c:2d:92:37:22:
         da:c5:ca:e6:c9:59:43:d5:a4:b5:e1:bf:49:e2:3c:0c:97:72:
         48:90:c6:38:07:53:aa:5f:b3:64:38:c4:ee:2d:34:5e:eb:83:
         5b:2e:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:59 2026 by rpki-client