This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
File:                     yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft (raw, json)
Hash identifier:          jfranThBmQ3pKkdJ5jvDxSYeZLvVPPtfMcc24++phEQ=
Subject key identifier:   75:F2:27:16:B0:FC:5C:BC:B7:0E:D2:69:B7:ED:20:5C:AA:79:6A:82
Authority key identifier: C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Certificate issuer:       /CN=F36FB3EDAF/serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
Certificate serial:       04D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
Manifest number:          04D2
Signing time:             Sun 25 Jan 2026 03:05:14 +0000
Manifest this update:     Sun 25 Jan 2026 03:05:14 +0000
Manifest next update:     Tue 27 Jan 2026 03:05:13 +0000
Files and hashes:         1: yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl (hash: 9UpxmqWYc3+SqmZtAfUzyc6JlXI3n/OxgOPkdQRbFtc=)
                          2: CBC05E684EC411EDBBC03A8BF1222468.roa (hash: iwEq/fHu2kMxv/0tavD/wLmOmI/Juh/s4dhe4VyEou8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB3EDAF, serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
        Validity
            Not Before: Jan 25 03:05:14 2026 GMT
            Not After : Jan 27 03:05:13 2026 GMT
        Subject: CN=6975886a-3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:72:74:b6:07:e8:19:78:bc:56:1e:86:42:
                    a7:da:fa:f0:65:64:83:6b:6e:0a:27:d9:7d:5e:58:
                    d6:65:6b:71:d8:ce:02:f3:ce:c2:03:3a:11:96:a6:
                    e3:46:f7:7a:68:39:02:5e:ce:00:d8:c9:e7:e9:74:
                    c8:ae:bd:dc:84:e7:bd:99:5c:37:bf:c8:d4:4b:c0:
                    3d:9c:34:7e:d2:05:91:17:c7:26:d7:a0:5f:f4:84:
                    06:53:dd:04:16:84:ee:22:44:ce:25:44:d8:0e:87:
                    11:8e:ce:f7:35:b0:7b:83:f5:26:14:a1:d6:7f:1f:
                    fe:60:ba:82:91:df:97:ae:ff:15:6a:ab:d3:8e:06:
                    4f:c3:8c:7a:6c:02:38:3a:c5:23:f5:5c:18:81:b5:
                    ee:66:54:bc:18:33:80:29:6c:6d:7e:6f:81:b4:cf:
                    45:66:28:7d:1a:87:a6:54:c1:10:f3:21:3e:05:86:
                    eb:37:62:9d:fb:9d:97:e1:1e:fc:28:ea:d3:48:79:
                    8e:c4:4d:18:77:a1:16:5d:ee:35:12:c8:60:4d:dd:
                    40:fd:cf:bc:78:ab:ce:be:26:d1:27:f3:ef:13:d2:
                    26:42:5d:68:c1:fd:30:6c:1a:55:43:33:f6:61:b1:
                    67:5c:ef:4c:a0:cc:1d:7a:ca:4d:31:e2:17:01:15:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:27:16:B0:FC:5C:BC:B7:0E:D2:69:B7:ED:20:5C:AA:79:6A:82
            X509v3 Authority Key Identifier:
                keyid:C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:82:c2:42:9b:a6:ef:fa:48:49:c6:9d:e5:a8:42:f5:28:
         3f:0a:70:39:98:77:f0:5e:5f:d3:b8:a4:56:d6:58:5b:45:72:
         cb:12:a7:df:6c:f6:64:34:93:a3:29:a8:ee:6c:6b:7d:a8:91:
         e8:c6:d9:86:07:f9:f2:b6:76:74:3e:66:17:2d:d1:c4:e3:dc:
         d8:81:d6:db:d4:db:41:f0:31:cd:3b:f9:9a:93:25:4a:5a:13:
         bb:76:ba:71:de:a0:73:3b:72:77:af:14:47:02:c5:e4:c2:be:
         6c:a1:cd:90:c9:93:42:58:be:2b:a7:80:f3:e1:85:d5:fd:9d:
         3f:7d:c7:38:f3:4d:18:44:b7:33:83:44:e9:1d:80:0c:ce:f3:
         e0:81:42:37:f5:b3:61:0b:df:16:62:50:b4:73:e8:dc:3e:ec:
         18:4c:2b:58:09:7d:9c:c3:52:51:eb:d8:40:f5:e3:c3:be:38:
         a4:92:5a:73:ae:e2:83:af:87:c9:66:38:fb:44:6d:da:da:5a:
         bb:1b:ee:b3:a6:5a:54:a6:0e:26:c1:2b:95:81:38:b8:96:d2:
         8f:16:8d:98:cf:3c:f2:43:c6:04:5d:b7:76:8e:23:06:fd:01:
         1c:a0:ee:82:55:77:75:55:e9:e8:95:a6:de:3e:71:9b:a9:43:
         d5:a2:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:58 2026 by rpki-client