This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
File:                     84JvO10k9ky2D4xgx121GaDHprc.mft (raw, json)
Hash identifier:          KwEoiLUKezVK75n5atnnzVIZJogBE8+XTZn75GdFMjk=
Subject key identifier:   65:38:BC:89:9E:1C:6F:5E:44:92:4F:9A:83:4B:A7:06:5E:44:EB:4F
Authority key identifier: F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
Certificate issuer:       /CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Certificate serial:       0503
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
Manifest number:          04FF
Signing time:             Sun 25 Jan 2026 03:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:44 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:44 +0000
Files and hashes:         1: 84JvO10k9ky2D4xgx121GaDHprc.crl (hash: KoEKsSIPfaNpoY0EyObzF/A5MZMjNItKP55/UNRSyYw=)
                          2: 112E2C72603C11EDA2A8E38DF1222468.roa (hash: VpBEbXpxKbJILffmsqj/OzTnQUQOEkM/MEBPomChOT8=)
                          3: C6182334346011EDA12A24EEF1222468.roa (hash: jH3sitVp68SYd4QD/dRUfuzvSquAJDcEaHoiP8qtVAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7C77AF, serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
        Validity
            Not Before: Jan 25 03:00:44 2026 GMT
            Not After : Jan 27 03:00:44 2026 GMT
        Subject: CN=6975875d-4be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:55:48:61:a9:f3:c4:f3:75:73:85:26:66:
                    5f:da:e4:7b:84:04:84:05:eb:74:e2:47:91:ae:0b:
                    7f:f5:29:a6:63:18:9d:bb:db:ab:a4:cc:e6:7b:05:
                    3d:1f:ac:30:49:5c:39:79:cd:b2:20:e6:1c:5e:40:
                    8c:0d:3a:02:a6:e0:7c:79:ad:6f:00:47:7d:4a:9f:
                    4e:95:fd:3a:77:fb:0c:3c:4b:79:9f:b3:0e:39:8d:
                    ec:4c:1d:f1:da:ab:e4:a5:e4:35:64:de:c7:ae:69:
                    0a:a6:23:46:b7:ed:a4:06:0d:1a:c0:12:e4:2e:4e:
                    64:f0:03:db:67:81:10:54:1a:b2:fa:5a:76:4f:75:
                    88:96:c7:f0:04:22:ce:11:9c:f9:e8:29:80:b2:dd:
                    f3:c9:2a:85:ab:e7:ea:a6:4f:25:1d:d0:63:6a:0d:
                    e6:4d:5f:0e:0d:99:16:35:b5:73:64:c2:9a:0f:5a:
                    97:03:4d:45:05:30:0e:10:de:e0:23:a3:6d:2f:53:
                    86:bf:12:84:72:9e:ee:96:54:12:e5:81:0b:9e:02:
                    e0:79:74:bc:d1:8e:0f:c9:06:92:09:27:24:a4:dd:
                    a7:7c:dc:92:68:f2:dd:6f:3f:62:b2:8d:4b:e1:c1:
                    d3:45:67:97:31:61:7d:9b:0c:a8:88:09:be:22:56:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:BC:89:9E:1C:6F:5E:44:92:4F:9A:83:4B:A7:06:5E:44:EB:4F
            X509v3 Authority Key Identifier:
                keyid:F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:bb:d7:75:fa:ae:7c:e0:23:9b:06:62:47:d8:89:a3:65:
         2a:49:6c:dc:21:2f:e1:b9:e3:f3:cd:79:7d:32:9d:52:9c:9b:
         ed:b3:bc:1d:73:5b:0e:35:f5:02:34:59:17:ca:10:dd:d2:74:
         1e:cd:71:ef:d6:21:58:62:74:1c:87:c5:2b:59:8b:a8:9a:24:
         78:2c:87:e7:85:9a:ec:f8:52:8c:3a:d5:41:84:23:57:b4:ad:
         b6:31:e9:d3:11:93:ee:5f:f2:78:ae:fa:7a:09:9d:59:a4:b7:
         d8:91:25:60:b1:09:af:df:4e:2c:a4:72:3d:5e:9e:92:6a:22:
         e2:8d:ca:12:6b:29:bf:98:b4:c7:28:86:79:5f:cc:f0:da:ab:
         07:48:d0:f4:d1:7f:e2:a7:08:29:03:10:e6:b0:2d:0f:fb:0b:
         66:2d:48:b2:fc:ce:fc:29:ce:4e:0f:8a:60:b2:95:de:6b:77:
         a6:34:3c:16:82:43:1e:24:08:7a:ab:63:d1:81:10:74:7f:2b:
         66:57:6e:84:c2:8d:04:bb:6c:91:71:dc:c8:50:f7:f1:cf:1b:
         1d:38:c3:48:e2:4e:70:73:d8:a6:59:6e:aa:4c:6b:79:34:46:
         d1:df:f3:dc:fa:12:de:c8:6d:d7:d0:4c:d9:89:58:7d:f7:16:
         39:ee:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:05 2026 by rpki-client