This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
File:                     vbHIMkQqFwa_d_xOxDcYGbo_waY.mft (raw, json)
Hash identifier:          aNsEFHOGyh6rqMstMBbQ0YRjLQXyxtelCjFCI8w0XAs=
Subject key identifier:   6D:B3:9C:9C:F0:56:B6:EA:30:A2:B4:7B:13:77:B0:C7:AF:E7:16:00
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Certificate issuer:       /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial:       0320
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
Manifest number:          031F
Signing time:             Fri 06 Feb 2026 04:02:49 +0000
Manifest this update:     Fri 06 Feb 2026 04:02:48 +0000
Manifest next update:     Sun 08 Feb 2026 04:02:48 +0000
Files and hashes:         1: vbHIMkQqFwa_d_xOxDcYGbo_waY.crl (hash: dug+P1JzDipTc/y/c5BCmLMPfrbI+vSi0rbKbDejSMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8AA3AF, serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
        Validity
            Not Before: Feb  6 04:02:48 2026 GMT
            Not After : Feb  8 04:02:48 2026 GMT
        Subject: CN=698567e9-3299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:98:75:62:f2:58:c3:45:3c:b0:d0:87:a6:
                    dd:08:4f:d7:75:25:d9:47:dd:6c:38:7a:08:df:c0:
                    9d:07:83:93:f5:5e:1b:0a:91:5d:63:b3:4d:78:51:
                    0c:29:c7:be:af:83:ee:48:62:58:c1:7c:ab:b1:f9:
                    1c:28:82:e0:b4:eb:18:74:9c:ba:98:df:b5:6e:24:
                    ea:c4:2f:66:2f:e6:cf:94:f1:65:e8:4d:1a:97:2a:
                    3c:7a:06:b9:ad:d7:fa:9f:1c:a9:58:c9:23:34:f6:
                    62:a1:01:ce:d5:0b:e2:23:82:03:f0:ad:ec:65:85:
                    2f:b3:3a:56:e0:ac:51:1f:17:06:6a:c7:7c:7c:33:
                    87:3a:4f:fa:8e:75:ac:53:55:9b:24:d7:e8:40:76:
                    1b:02:0a:ce:ef:85:95:92:6a:fe:64:8b:4f:fc:74:
                    84:72:52:f2:62:4a:b2:5c:e1:3e:72:85:a4:5c:a9:
                    5e:51:f0:f5:14:e1:82:77:96:4f:d4:6a:ad:cf:cc:
                    62:2e:0d:b6:c8:7d:57:fd:7d:4a:ed:d3:9d:d2:88:
                    fa:78:cc:16:d2:8e:89:43:63:e6:86:00:99:9c:c2:
                    42:0a:06:90:ba:38:b5:80:ea:50:d5:6b:b1:c4:27:
                    7f:24:99:92:81:e5:41:03:65:99:61:5a:74:d0:66:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:9C:9C:F0:56:B6:EA:30:A2:B4:7B:13:77:B0:C7:AF:E7:16:00
            X509v3 Authority Key Identifier:
                keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:40:53:36:f5:1d:25:22:2e:bd:11:7f:ef:60:2e:a6:5a:
         92:c1:ef:49:46:91:2b:14:84:01:1c:ed:6b:55:4b:d2:84:cc:
         5f:41:12:eb:76:9f:cd:75:49:58:fc:3a:f1:4f:fb:9e:e7:74:
         c3:87:b0:7d:63:f0:f0:d6:44:73:f2:f4:9e:92:88:5f:78:b4:
         51:e5:d4:3d:c1:15:95:f5:8a:13:49:10:26:1e:60:5a:11:a1:
         0c:dc:25:17:3c:7c:f1:df:30:f7:e4:57:44:97:16:0f:aa:5e:
         a1:90:59:ab:0f:35:84:70:01:05:09:0e:0d:fa:d4:78:f5:61:
         a4:47:ac:75:4d:0b:09:f7:de:eb:34:df:68:b2:58:58:b6:e1:
         f4:8a:57:c6:4d:f1:e8:07:2a:f0:69:3b:b4:37:8c:e3:55:64:
         14:cb:7f:40:0a:8d:a0:3f:eb:b7:89:93:b1:04:6c:a2:9a:df:
         be:29:58:7c:44:d4:9e:58:b1:7e:ef:c4:0b:d9:cf:39:74:94:
         a9:2d:5f:ad:ff:69:02:5e:b5:9f:98:06:9a:27:d2:5f:f6:2f:
         45:53:f0:e8:1f:92:00:16:29:83:eb:35:a2:64:6d:90:a7:ff:
         7c:75:dc:f8:d8:04:47:03:7a:0a:86:d0:f3:0b:74:8d:70:55:
         4c:f4:61:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:26:17 2026 by rpki-client