This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
File:                     dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft (raw, json)
Hash identifier:          l8HUsjFFPwjB/SAfoiXUZCxtUNN/NzLFaLaMJ91fzKo=
Subject key identifier:   C9:42:4E:97:4E:96:C4:0B:4A:62:1E:41:D9:4C:5E:6A:A2:75:26:91
Authority key identifier: 74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
Certificate issuer:       /CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Certificate serial:       047B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
Manifest number:          0478
Signing time:             Tue 27 Jan 2026 03:14:04 +0000
Manifest this update:     Tue 27 Jan 2026 03:14:03 +0000
Manifest next update:     Thu 29 Jan 2026 03:14:03 +0000
Files and hashes:         1: dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl (hash: 543Gq34mu9/qlSA5AT/8AXE/yubIBG0CI1n/1Prv0iE=)
                          2: D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa (hash: 9nS9/qZCYlRlsFfFJabMOal4M3j3reJuxpTuSFn2jwk=)
                          3: B15985CA97E111EDB41AE57CF1222468.roa (hash: abdzPuIuACJJuQmlSUaUnN0N+3SokV71Kyt96n5N98A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Jan 2026 00:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAF, serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
        Validity
            Not Before: Jan 27 03:14:03 2026 GMT
            Not After : Jan 29 03:14:03 2026 GMT
        Subject: CN=69782d7c-449c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:67:28:4a:4c:42:7d:21:89:0a:38:f2:2b:
                    df:dc:d5:7b:af:fd:26:67:12:36:78:b7:81:5e:3c:
                    cd:a3:a2:ff:f8:c1:59:e1:32:00:e4:bb:08:86:80:
                    ff:8c:e3:0c:df:08:03:de:7f:f4:01:58:46:ca:27:
                    61:bb:d4:59:76:ce:26:06:0e:5d:c9:9d:b0:b5:7e:
                    73:16:91:fb:a4:47:b6:e7:74:6a:10:39:18:a2:9d:
                    66:ef:64:09:77:4f:7f:d2:dc:50:c5:f9:6a:56:3c:
                    d7:ff:ab:c1:de:25:20:8f:f5:9f:90:d4:97:65:bb:
                    13:db:a0:b7:d9:15:f3:ad:e7:99:88:19:44:85:95:
                    e9:32:60:dc:4e:e9:fc:cf:95:f1:20:b8:c5:2c:54:
                    f1:fc:61:a0:3f:d2:d6:f7:33:ef:c4:b8:fe:02:d3:
                    12:b6:cb:8e:e8:3b:3c:66:3f:f9:9f:46:97:b5:4e:
                    f9:2b:55:79:1e:cf:5f:a1:0b:1b:d8:55:d4:b0:01:
                    2b:41:24:5a:84:a7:44:c2:6e:28:55:81:34:5b:69:
                    03:e1:11:9a:1d:05:65:ec:45:36:3f:8b:a4:03:7c:
                    44:89:7d:94:72:38:ab:6a:d5:85:a2:49:ef:60:65:
                    c3:bb:16:52:ac:dc:6a:2d:20:ea:7d:bf:68:53:f4:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:42:4E:97:4E:96:C4:0B:4A:62:1E:41:D9:4C:5E:6A:A2:75:26:91
            X509v3 Authority Key Identifier:
                keyid:74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:56:10:89:a4:37:d2:e7:a3:04:b9:e1:ab:24:74:76:84:
         dc:61:3f:cc:c1:09:0b:b1:6e:7f:83:39:35:24:e3:7e:24:f4:
         4a:d1:15:af:db:f6:0a:11:89:86:65:aa:50:9e:6d:25:de:0c:
         20:32:ed:b8:61:48:b5:4a:d6:0b:19:ff:b1:e1:49:87:65:ec:
         5a:34:d2:77:b5:34:64:7f:58:c2:a8:34:47:3e:d5:c9:a0:49:
         88:5c:f4:5f:3b:db:c5:6a:8a:7c:f3:ca:28:3a:e0:21:18:59:
         7a:3b:78:32:92:35:01:e0:86:0f:44:06:27:9c:9a:88:af:de:
         8f:d0:2b:73:75:cd:48:2d:55:34:4d:fd:32:5c:97:70:1a:9d:
         e9:dc:59:a2:da:5c:a3:9c:f5:dd:f5:65:e4:50:bb:ad:49:bd:
         75:a1:be:f2:c6:63:23:56:93:d5:11:b7:72:30:d9:af:a0:4a:
         39:66:0c:2c:13:18:21:d1:fb:67:27:fe:55:42:4e:3c:ba:c5:
         23:99:37:2e:b1:38:4e:5f:ad:a3:fd:30:2e:32:d4:dd:87:d5:
         4b:7f:c9:06:7f:43:f1:82:51:31:d3:c1:64:b9:8e:b3:30:13:
         5b:28:59:64:6d:21:71:4b:63:6f:a0:b3:e3:9a:e6:42:04:9d:
         36:fe:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:47:34 2026 by rpki-client