This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
File:                     JLpRXiIce3jm_t013ct_c3pPMiE.mft (raw, json)
Hash identifier:          Xx4UE3efTGhz4yuTsgWRlhqr/fJQmk5IH0vXEVROsHY=
Subject key identifier:   0B:6A:7E:EB:8F:3E:32:75:22:95:2C:FA:CB:40:3F:9D:A7:2C:83:C8
Authority key identifier: 24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21
Certificate issuer:       /CN=F36A6EA0AR/serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
Certificate serial:       39
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
Manifest number:          38
Signing time:             Mon 26 Jan 2026 05:22:29 +0000
Manifest this update:     Mon 26 Jan 2026 05:22:29 +0000
Manifest next update:     Wed 28 Jan 2026 05:22:29 +0000
Files and hashes:         1: JLpRXiIce3jm_t013ct_c3pPMiE.crl (hash: 3L21VpnYe8hzRuMaAaLtjUu0mIdvhvYgQzi8Tnk6Vg8=)
                          2: 60AB4C7CD34C11F0BCAFF7AFDAE4EC9C.roa (hash: uLF46C2w7GxR+RjRekTp0NOCaiBr/IY0Xs0woPFGw7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                          rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 05:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AR, serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
        Validity
            Not Before: Jan 26 05:22:29 2026 GMT
            Not After : Jan 28 05:22:29 2026 GMT
        Subject: CN=6976fa15-68ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:15:e4:3b:92:42:d5:1f:b7:8b:ea:a2:ef:
                    1d:e8:b5:f8:96:c8:58:1f:73:dc:c5:2a:ad:28:cf:
                    e4:a8:a7:90:2c:87:c5:c5:d9:9a:22:e0:0a:be:b6:
                    fe:8d:0d:5d:c4:5d:1f:96:39:de:2c:b7:1b:26:a1:
                    2d:94:ad:ba:81:f1:77:27:f1:b3:f9:c0:6b:92:50:
                    0a:71:87:5d:c5:63:98:e0:21:87:eb:9a:c4:93:12:
                    79:63:37:5e:a6:64:ff:8a:2c:9d:98:e7:54:0a:9b:
                    12:a4:f5:cd:dc:94:62:5f:1d:69:44:28:a2:77:14:
                    c3:f3:91:70:af:ee:a7:52:2d:e4:ed:70:09:73:dc:
                    26:e6:67:72:0b:d6:a3:de:2f:60:dd:14:de:c1:a9:
                    08:56:5d:ce:dc:13:c5:93:58:cb:2f:7a:ba:4f:c0:
                    5c:6f:8c:c0:4c:e4:8e:42:09:00:a4:77:37:bc:a5:
                    d8:80:65:05:13:10:62:25:23:a2:e8:06:1f:1f:c9:
                    66:c4:b1:6e:a7:67:99:10:8e:e0:8f:2c:5b:be:71:
                    f8:96:c8:bb:33:8a:f2:13:c4:01:21:33:24:86:9f:
                    53:17:05:1a:50:67:d2:0a:6c:0e:a9:d2:68:b4:aa:
                    cc:5e:68:cc:9c:c9:15:5a:4b:0f:82:b0:67:3d:3a:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6A:7E:EB:8F:3E:32:75:22:95:2C:FA:CB:40:3F:9D:A7:2C:83:C8
            X509v3 Authority Key Identifier:
                keyid:24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:f8:69:13:92:b0:96:39:8a:72:18:c7:55:d9:10:83:2c:
         b3:c4:a1:1f:d3:40:85:ec:8d:5c:0f:68:1f:30:3e:a6:05:dd:
         a7:c0:e5:5b:b7:be:43:c7:89:c7:ad:38:ea:8f:85:c4:30:6a:
         52:b4:6f:38:f7:10:e9:72:87:3e:33:ad:c8:77:ae:bc:c3:04:
         3f:0d:b0:0b:82:04:d3:2d:41:50:6f:4f:84:58:49:8d:ee:a0:
         33:f3:4d:dc:69:c5:e1:02:a3:c9:26:18:0e:5c:89:84:b9:22:
         b3:1e:3e:f6:af:2d:03:5e:1e:fb:05:45:df:6e:26:49:2d:f9:
         17:df:11:ff:0a:eb:55:fe:48:7f:21:27:96:a2:89:5f:e1:4c:
         56:bb:4d:6e:a1:01:b4:2a:18:f9:30:d7:26:09:be:b6:7b:45:
         b4:87:5a:32:9c:eb:08:db:3a:27:99:20:db:ca:da:08:a6:77:
         b1:57:d7:a6:a5:21:18:2b:cc:55:6a:e9:d7:56:f8:c7:c7:5a:
         78:7c:ac:27:7a:15:dc:56:16:e4:e9:af:4c:50:02:70:19:7d:
         0f:b0:31:31:fa:34:e6:93:28:31:49:14:4d:6f:de:aa:b4:0e:
         cc:16:65:cc:44:c6:00:0d:00:05:d6:78:36:99:7b:dd:b4:ac:
         e9:eb:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:46:23 2026 by rpki-client