This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
File:                     xwJ5nqS9Xbo-09BppxkblBtad5o.mft (raw, json)
Hash identifier:          zdnKFfrot2f3qGlUVKehd4aWrZjpVj3kpZF8saABYnw=
Subject key identifier:   D8:2B:49:46:F4:6F:CD:3B:6D:4F:A6:A5:4A:63:EC:80:4B:7E:65:DE
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       089D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
Manifest number:          0884
Signing time:             Sun 25 Jan 2026 01:47:34 +0000
Manifest this update:     Sun 25 Jan 2026 01:47:34 +0000
Manifest next update:     Tue 27 Jan 2026 01:47:34 +0000
Files and hashes:         1: xwJ5nqS9Xbo-09BppxkblBtad5o.crl (hash: ut5POcURrSvdcZ37o2S7QsZB2o5PxXlsmhBEQdBRnI0=)
                          2: 1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa (hash: GpBCPBpYP7jSKCmZZyQgNpO5GbazBb3Ixsp5RwZj6vM=)
                          3: 608B48BEB55611F0B2E28A9CDAE4EC9C.roa (hash: 6xR9Yw6qiVIfQSJDhytaGImSZ1A3jFhmSl44es/ykHg=)
                          4: B9EABCD2B54C11F09D128FDFDAE4EC9C.roa (hash: FQu8ySvpjzSm8Wt9V+i50XqTr/lNpOUbbdjMIfmS/L8=)
                          5: 094FEDD4B55611F08FD11F9CDAE4EC9C.roa (hash: jvqPC+LV3haBj2mis1++y3ICQS3fsxJo9KRlAft0JPY=)
                          6: 96B4A35AB55511F08FC6E597DAE4EC9C.roa (hash: 6Qab2GQfV990KSXtH4bePzdjsFn7IxaaFDENDt4G4Yc=)
                          7: DBE779FCB55511F09281119CDAE4EC9C.roa (hash: r38PJu83hUBvf7P5w3SkDI8cVfAvH12yPWpkkk25OPA=)
                          8: 2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa (hash: BLNEGjyDBYxkX0YHPraswO3BVBLrA7gab5y1HJSh2U4=)
                          9: 7F2A789EB55611F097EC52A0DAE4EC9C.roa (hash: 2L2OgLFRPecgH2xTdenUefSJFiuBkC2MjqJciX7PRvY=)
                          10: C4C9B73AB55511F08736369ADAE4EC9C.roa (hash: CMYKxCS3jFNWQQUqDagCHxfFByaW82mbkSwsyKkTgQ4=)
                          11: E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa (hash: yiPtl3UM2gTn4BwT0BadrawkZ+QM2YDZW4gZb83Wnio=)
                          12: 9A0C2716B55611F094735AA0DAE4EC9C.roa (hash: 43UkRVumG67YdCPCBU+yiy01Xg1w6Ryu6pqrcLYThmU=)
                          13: 457A28BEB54D11F085FD31E0DAE4EC9C.roa (hash: WvjKJ61Ybf7E0w2qd2kPgyK95N5i97V0MyHCGmY1W6o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Validity
            Not Before: Jan 25 01:47:34 2026 GMT
            Not After : Jan 27 01:47:34 2026 GMT
        Subject: CN=69757636-efb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:87:9b:f9:e1:ae:69:26:d8:9f:ea:24:5b:
                    dd:a9:8a:23:ff:4f:88:2d:83:02:53:09:76:92:f4:
                    df:81:e7:4f:54:af:ea:89:c3:9f:60:a6:8c:21:c2:
                    b8:70:05:1f:53:dd:cb:b6:f6:94:d9:ef:b5:03:08:
                    15:91:63:eb:5c:0a:38:b1:df:bd:ef:ab:65:ef:ce:
                    01:84:6a:b4:d3:02:51:67:a8:07:ed:25:2d:37:40:
                    93:9e:14:e3:32:54:e3:cd:de:c3:3b:91:69:b8:d3:
                    ef:21:d7:9d:ee:6c:82:4d:c8:9b:10:ad:44:82:a9:
                    53:8f:45:53:b8:1e:c6:ee:d7:09:79:ab:6d:a8:2c:
                    06:ec:bc:2e:31:6d:bb:4b:ff:8c:da:82:e9:28:17:
                    6e:8c:de:44:f6:85:f3:bc:44:7c:79:fb:2f:3a:92:
                    55:af:42:8a:c1:53:96:33:61:d7:ec:56:c9:14:47:
                    40:dc:9a:c3:c6:2a:e5:b1:c7:d3:7d:a4:d7:50:eb:
                    f5:21:82:07:33:68:92:a3:e1:1d:d2:eb:7b:e4:df:
                    17:c7:aa:58:29:bd:9d:65:74:fc:8d:6f:dc:44:bb:
                    25:08:03:6d:f7:97:0f:43:6f:cc:ed:34:e7:45:be:
                    75:3a:d6:ab:70:5f:75:d8:d2:04:37:20:c8:64:35:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2B:49:46:F4:6F:CD:3B:6D:4F:A6:A5:4A:63:EC:80:4B:7E:65:DE
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:0f:49:5c:d4:b7:48:bc:cb:15:c7:75:a0:9e:d3:e9:25:
         43:54:68:45:9b:39:1d:9f:de:53:fe:d9:cf:44:0a:18:32:a8:
         57:69:21:ad:51:5c:91:11:b9:03:74:1a:e3:ca:5a:bc:6d:c8:
         26:8f:d9:ca:31:a5:ea:e9:90:3a:a9:16:a9:47:21:df:4b:80:
         33:c0:6f:ea:f9:eb:bb:9e:5d:fd:84:e6:42:53:17:9f:c0:bb:
         70:4c:a7:eb:71:22:0a:bb:8a:ca:f6:fc:10:1e:33:d6:0e:c4:
         09:e3:01:88:34:e5:5b:b3:0d:61:e3:9e:a7:e4:e1:ca:ed:ff:
         ff:73:78:97:f7:5f:27:9b:35:31:e8:77:22:de:4c:9d:d4:bd:
         f1:fe:9c:d4:08:6f:fa:2f:da:2a:8e:bc:e9:56:e7:ed:9b:c6:
         75:32:2e:28:32:ea:bb:d4:fe:26:cd:bd:8a:7f:54:31:95:80:
         3c:87:9a:42:12:ef:35:d2:b0:c9:17:4f:e5:7d:b4:c4:f8:02:
         c2:44:46:f8:d1:ad:4f:d3:60:ce:f8:3b:6a:bc:3b:7a:1f:c2:
         11:85:e9:f5:d2:e5:99:78:ad:f0:e0:a2:74:88:9e:5f:cd:3e:
         7b:e0:87:17:0e:06:38:22:5f:3f:76:5e:0a:78:9e:f3:73:7d:
         ba:aa:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:22:31 2026 by rpki-client