This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
File:                     zQg69dJxoPLdqw8VC-sAXzipRrE.mft (raw, json)
Hash identifier:          iky870D6g+KL1JuwtjyNBNQO3JbnrUi/fuxaD/ad2HA=
Subject key identifier:   27:40:A2:CA:53:E2:27:B3:5E:79:9A:B5:50:FE:DD:51:04:2F:31:DA
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Certificate issuer:       /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial:       09AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
Manifest number:          09AB
Signing time:             Sun 25 Jan 2026 01:30:00 +0000
Manifest this update:     Sun 25 Jan 2026 01:29:59 +0000
Manifest next update:     Tue 27 Jan 2026 01:29:59 +0000
Files and hashes:         1: zQg69dJxoPLdqw8VC-sAXzipRrE.crl (hash: kumm01boxCLkTWLGpVcB76JICOBDZwPidHqvF0m35uw=)
                          2: 1C0D37FA91F011E9AE72377FF8AEA228.roa (hash: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=)
                          3: FB654B0091EF11E99DA90E7FF8AEA228.roa (hash: nhD+pe2BQnxbsRGwyft8O4mm+dCir5b5n7iU0KS6i3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF546AF, serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
        Validity
            Not Before: Jan 25 01:29:59 2026 GMT
            Not After : Jan 27 01:29:59 2026 GMT
        Subject: CN=69757218-146b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:a3:96:31:f3:d4:0d:58:58:75:06:97:89:
                    d4:76:b2:30:52:2e:e7:89:94:ff:67:05:3e:ce:ce:
                    f5:15:6b:cb:83:4b:82:52:ab:f2:b1:29:01:98:2c:
                    28:83:75:bc:15:d4:21:d3:52:42:24:0f:2b:9c:34:
                    4e:b4:e6:9a:cf:18:56:aa:98:a8:85:89:73:bf:51:
                    9b:05:37:ce:5d:b4:11:70:62:59:87:cd:34:d5:52:
                    35:15:e6:8f:6d:21:08:33:5f:cd:e5:60:8d:51:fe:
                    5b:79:f5:7f:d4:9f:9d:50:d1:d4:c2:9e:9b:b4:76:
                    1f:64:c5:76:a5:e0:0a:60:70:0e:ce:01:30:6b:03:
                    89:d0:3a:e9:0a:dc:35:0c:c8:b9:f5:9c:71:d5:cd:
                    75:e2:ed:c4:ff:e5:5e:4e:ba:51:59:f5:1d:d5:f5:
                    e0:b4:bf:c3:1d:7c:66:84:36:14:33:b4:54:77:96:
                    f7:cf:d6:83:5e:eb:ae:20:e0:7d:b3:17:c7:0d:0a:
                    dc:f2:ed:14:b2:ec:59:ef:43:6a:37:58:d9:71:25:
                    84:9b:2c:3a:3c:8d:2c:12:b5:08:72:96:4e:cd:bb:
                    bd:03:fb:52:16:7c:25:17:e2:1d:db:7b:77:a6:d7:
                    ab:99:f8:26:d0:d9:19:c7:45:a0:99:39:87:c1:31:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:A2:CA:53:E2:27:B3:5E:79:9A:B5:50:FE:DD:51:04:2F:31:DA
            X509v3 Authority Key Identifier:
                keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:4d:2c:73:22:58:2d:a1:10:f6:06:88:3a:4a:bd:7c:12:0c:
         3e:14:02:04:18:32:0c:09:84:ae:90:af:46:a8:38:2f:07:ed:
         22:74:1c:1a:e8:59:fc:e8:02:dd:c8:a9:45:62:e2:11:a2:0b:
         e8:66:80:b0:78:f1:f2:cf:b3:81:b4:f4:a0:9b:52:73:8e:d0:
         7a:8d:cd:58:bb:ac:88:50:33:6f:55:36:e4:42:20:45:1e:88:
         c1:6c:b5:34:1f:00:63:89:ef:9c:59:f3:e4:cd:93:d2:27:fc:
         70:be:b1:9c:4b:31:46:b9:e7:d0:6a:fe:b9:f9:85:33:42:19:
         f8:fe:ad:51:3c:53:9a:08:58:24:9a:2b:29:cb:58:6b:f2:4f:
         64:c6:e5:36:ab:bf:34:0e:bb:dd:0a:a2:5f:a5:b8:8b:6f:5a:
         01:15:4f:93:13:55:1b:d3:13:ef:2e:c5:0a:a9:27:6d:95:a8:
         a1:17:2a:21:98:b6:55:fd:ec:3e:8e:35:95:38:6c:5f:cf:1e:
         ca:e6:f3:0e:64:b9:f8:7d:26:5d:16:8a:a6:78:56:74:1e:61:
         b7:a4:fb:cc:1c:f5:33:88:ab:ff:c7:13:15:d1:ef:97:64:9a:
         9f:3d:4d:49:8e:bf:9e:a0:8e:46:60:de:14:ad:bf:fe:0d:5a:
         2a:64:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:25:33 2026 by rpki-client