This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          Eu47eX7TstPOTp2TYzJlyc4FExC4tXmdK/AULbfm3Tc=
Subject key identifier:   A1:27:24:41:35:38:50:54:0B:5B:F2:9F:7B:5F:F9:F7:F8:1C:81:E5
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       039F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          039D
Signing time:             Sun 25 Jan 2026 03:41:40 +0000
Manifest this update:     Sun 25 Jan 2026 03:41:39 +0000
Manifest next update:     Tue 27 Jan 2026 03:41:39 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: CQonJYDR6tuMSD/VfiKbwC9tDdNnJ9H1Kv4Y4Gya/uc=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 03:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Jan 25 03:41:39 2026 GMT
            Not After : Jan 27 03:41:39 2026 GMT
        Subject: CN=697590f3-f0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:92:51:61:ba:80:21:12:c7:fe:d6:ce:11:
                    a5:c0:3b:84:16:f3:a3:4a:aa:c4:e0:ef:1e:b1:45:
                    a5:4a:dd:a8:5b:40:6b:fd:48:34:80:75:20:30:3e:
                    11:2e:42:3f:d3:6e:7c:34:aa:17:98:5c:0f:4a:a3:
                    f6:cf:8c:22:ed:53:2c:22:79:a9:e7:9f:dc:d6:c5:
                    0c:fe:94:73:3f:fc:6f:f0:4e:98:37:e6:e4:1e:6b:
                    be:1f:96:49:9c:c0:f8:9e:59:59:99:bc:ff:75:be:
                    16:c2:c9:e3:1b:d5:00:1a:a2:3a:ae:af:b1:f9:45:
                    1c:ba:b4:83:79:ba:c4:fd:5a:82:fe:e9:fd:ad:f5:
                    9e:89:91:30:57:29:a6:31:ef:86:7e:26:63:d9:e2:
                    3c:3a:4d:66:0f:99:c8:a4:b8:fe:c9:4e:5d:96:57:
                    8d:78:d0:9c:df:d5:b0:fe:55:7f:bf:18:4e:0d:d4:
                    b2:9f:ce:14:76:75:6d:8e:ae:13:2f:70:3c:da:f9:
                    a6:69:4d:d9:d0:ce:c2:8b:6e:26:09:e0:d7:47:7c:
                    67:65:c3:60:24:32:63:bc:fb:64:e2:e4:ef:20:e8:
                    38:55:c9:b6:62:c5:b5:d3:6d:d1:48:41:cf:31:43:
                    a4:15:4d:14:77:a1:0d:19:30:2f:28:cd:ce:2d:2c:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:27:24:41:35:38:50:54:0B:5B:F2:9F:7B:5F:F9:F7:F8:1C:81:E5
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:57:33:67:81:67:45:2f:dc:03:ba:33:a5:14:e7:92:86:
         cf:6d:74:85:39:7f:65:0a:3c:c0:e3:90:d5:b2:6e:51:f8:d3:
         f8:2a:da:47:ce:8e:10:a7:9d:51:d5:f6:02:d0:61:36:1c:d3:
         5d:70:21:1f:ce:63:0d:49:a0:86:e0:82:cb:b5:ec:75:5e:0f:
         22:e8:34:04:11:64:b4:1e:73:38:de:19:e9:79:52:19:43:ec:
         3b:74:c8:c9:67:e7:5c:bf:a9:e4:cd:f6:dc:07:4d:98:e4:86:
         9e:ed:56:8b:bd:ef:50:ca:62:c8:61:56:4f:02:4b:0f:6e:3d:
         39:e4:21:20:8b:59:8c:a6:64:2c:60:ec:07:c9:e8:c8:0b:0b:
         db:36:2f:9f:cd:c9:10:e9:58:bc:0a:ed:aa:18:a8:c8:85:e7:
         76:82:3d:3d:19:95:7c:c5:75:04:9f:8c:a0:15:20:ba:ea:d0:
         2d:80:b5:be:3f:b0:be:26:5b:64:bd:61:af:f5:96:35:c2:20:
         3d:f1:eb:f1:44:be:1b:04:03:11:93:c8:60:1a:3a:39:e9:68:
         de:ac:51:53:d0:51:4c:fc:c2:c5:9f:ae:57:dc:b9:56:26:de:
         ca:55:bb:49:2f:00:cb:63:a8:5a:49:4f:89:ee:87:4b:18:0b:
         6d:15:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:02 2026 by rpki-client