This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
File:                     B7h9lPBEiTVmQTOd5pFkR32P-kM.mft (raw, json)
Hash identifier:          8tupymShOMQJQan/sBF2DvCcpb3nD7nJZGrWeF7U9zA=
Subject key identifier:   B1:84:2D:69:A2:8F:B6:65:39:15:0B:2A:05:FB:7F:BD:BB:1A:DD:97
Authority key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Certificate issuer:       /CN=F36FE1EAAF/serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
Manifest number:          034C
Signing time:             Sun 25 Jan 2026 03:52:15 +0000
Manifest this update:     Sun 25 Jan 2026 03:52:14 +0000
Manifest next update:     Tue 27 Jan 2026 03:52:14 +0000
Files and hashes:         1: B7h9lPBEiTVmQTOd5pFkR32P-kM.crl (hash: K0BUjqZtWCblMivH6j6rfLaga0JXinGV1bLyybVTg6A=)
                          2: F2BE8B0883BF11EEA35C316C4AD9E6FC.roa (hash: 7cVioDp5Djf3TE19QcUyNTeY86beb3OpiRF33Us6tMk=)
                          3: 4EAB40AC807611EEA2E8966F4AD9E6FC.roa (hash: zIgDIvB6Gxwg/+n8hoQHWEVQwYNf/V40+da0oZ0QOpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE1EAAF, serialNumber=07B87D94F04489356641339DE69164477D8FFA43
        Validity
            Not Before: Jan 25 03:52:14 2026 GMT
            Not After : Jan 27 03:52:14 2026 GMT
        Subject: CN=6975936f-0dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ed:0c:8f:dd:5e:60:b1:a2:eb:64:a6:d8:5d:
                    81:50:89:33:61:49:a4:4c:2a:fa:8f:53:be:38:42:
                    73:4b:e9:21:18:a5:23:61:c8:e5:e2:54:70:21:7f:
                    6d:52:a2:b6:2d:4c:5f:1f:ae:00:49:e8:34:4c:2a:
                    0d:d9:8d:90:14:7b:dc:da:e6:87:f9:eb:fb:ae:7a:
                    11:b0:40:47:9b:0f:ee:90:52:cd:1d:8f:79:fa:a5:
                    c0:cd:61:4e:a0:d5:fe:b8:3f:65:4d:bb:b6:3f:f8:
                    fd:2a:f5:be:ec:51:30:3f:73:08:fa:e2:fc:13:73:
                    34:51:3b:ab:b4:67:62:e2:1f:84:e1:11:dd:7b:2e:
                    08:8d:f5:21:22:2e:7d:b0:9d:df:a7:7d:fb:22:19:
                    be:91:cc:15:3d:2b:5b:7b:f8:bd:92:cd:2e:27:2a:
                    b9:e6:52:78:14:d1:d0:9e:30:14:93:81:f2:e9:6b:
                    ef:3b:eb:07:12:ac:ab:36:96:2d:3c:0a:87:83:1f:
                    03:7f:b8:12:d7:2a:72:69:c5:89:7e:e0:27:91:f7:
                    55:f3:58:e5:aa:cc:5d:95:d6:64:af:2f:09:04:a6:
                    da:25:96:aa:7d:64:0b:09:65:21:c5:7f:48:36:77:
                    8c:72:98:9e:dc:d6:a6:8c:6f:e7:03:ec:14:d4:46:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:84:2D:69:A2:8F:B6:65:39:15:0B:2A:05:FB:7F:BD:BB:1A:DD:97
            X509v3 Authority Key Identifier:
                keyid:07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:b3:32:12:4c:58:28:c3:f5:78:4b:eb:22:c3:ad:f5:93:
         64:ca:97:c8:f7:48:b0:36:67:7a:ab:01:bc:f6:de:ef:1d:a0:
         e7:d0:25:d9:c8:4c:40:44:17:e9:eb:82:0e:91:25:62:39:46:
         07:8e:d2:30:7e:ef:87:2f:99:c1:72:f8:74:04:29:0c:74:56:
         7c:69:ad:cd:ca:fc:20:dc:66:7a:94:d8:6b:21:78:ce:9d:d8:
         ca:ff:b8:28:0f:69:c0:11:3b:74:ef:51:81:87:7a:50:73:45:
         36:cb:16:ee:e9:52:0f:07:d0:26:5c:9f:af:ce:96:0c:52:f9:
         89:86:ae:7c:41:81:9a:7a:f5:72:fa:65:05:7a:41:4c:c3:9e:
         fb:af:76:58:e9:18:0c:23:4f:b4:a8:7e:dd:15:83:08:86:47:
         91:e4:46:7b:1a:d2:b4:6c:eb:90:ad:5b:00:22:03:66:db:fb:
         bd:2b:ad:f5:03:07:43:1d:85:14:02:e0:16:7d:6d:04:6e:e8:
         14:a0:a9:64:bb:37:97:1d:a6:c5:6a:a5:67:78:23:cd:8c:7c:
         2c:f0:d8:19:de:d5:7f:17:c5:88:68:85:cb:3d:21:54:fa:72:
         cd:c4:88:62:19:33:26:31:5d:36:a6:19:96:25:b9:07:f3:84:
         a8:99:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:34 2026 by rpki-client