This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          cXlhlvvKLWH6xMv3huQtJq/h4J9LPxREbNWBbzrNSLw=
Subject key identifier:   AC:19:68:2A:3D:FC:34:81:40:20:50:FA:4C:38:33:45:C6:DD:4F:DD
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       09CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          09CB
Signing time:             Sat 07 Feb 2026 01:25:06 +0000
Manifest this update:     Sat 07 Feb 2026 01:25:05 +0000
Manifest next update:     Mon 09 Feb 2026 01:25:05 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 2QBbqpk/00VSJ82lU0xFo9s4hSDhxgXoafltT9X5h3Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508 (0x9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Feb  7 01:25:05 2026 GMT
            Not After : Feb  9 01:25:05 2026 GMT
        Subject: CN=69869472-c714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:7b:49:30:b8:1a:03:c1:1c:5c:26:db:f2:
                    47:77:d5:16:60:1d:e8:ad:27:ba:c2:aa:6c:c6:f4:
                    88:5a:5d:09:6f:83:37:38:48:74:c1:97:c1:34:9b:
                    58:30:f4:b6:c3:7d:7c:2e:78:92:0b:39:29:f2:73:
                    df:38:46:cc:4d:b8:2e:93:5d:32:61:e7:f3:8a:fd:
                    df:4f:fb:31:8c:95:df:03:81:01:4f:e5:e8:0c:49:
                    f8:e2:8c:ad:77:ec:7f:6b:21:1e:5e:c8:ef:db:42:
                    9a:29:bf:0f:b8:3e:6a:f8:17:87:2f:2c:9f:b3:2e:
                    9b:c3:c4:9c:48:d9:34:31:8b:95:da:2f:1a:c6:6b:
                    02:2b:10:06:85:50:d3:9a:18:25:99:f6:cd:ab:89:
                    ca:98:4e:27:11:95:b9:4a:2c:e0:51:8a:1c:7c:8d:
                    06:15:bf:df:c0:69:31:23:d4:56:4d:be:17:73:a0:
                    29:7a:34:80:a1:23:7d:31:67:f9:78:8d:53:c2:de:
                    a5:0b:85:9c:f8:a6:37:af:32:8e:e9:be:02:b6:bb:
                    22:df:da:57:45:24:be:87:2c:d3:f7:99:7d:80:03:
                    2a:34:0e:bc:95:6d:90:a8:51:fb:22:b7:7b:f5:f9:
                    06:54:8b:0f:72:f7:7b:6c:70:16:be:fe:b4:de:56:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:68:2A:3D:FC:34:81:40:20:50:FA:4C:38:33:45:C6:DD:4F:DD
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:01:d0:91:d5:17:b1:4f:2d:d0:bf:76:47:90:9c:29:b3:9c:
         0d:b8:fc:13:fc:56:a3:3c:bb:95:e8:9c:ef:a3:09:ab:fb:e7:
         15:83:07:74:1e:27:75:da:be:69:59:fb:d3:a0:3f:c7:a4:31:
         30:32:4c:b4:b0:f3:5c:d2:e7:22:1d:dd:e5:a8:13:19:b0:40:
         f2:69:0b:08:59:17:e1:ef:81:50:15:a2:a6:ea:3a:da:bc:a2:
         a4:26:fe:dc:68:50:e6:6c:73:7a:5c:fd:84:f1:e4:db:5a:30:
         8a:68:84:d3:74:d4:89:7e:d6:05:e8:94:0f:78:14:08:8f:9d:
         fb:46:3f:50:77:dd:24:ea:7e:ad:44:82:d0:59:03:a0:75:ef:
         f7:51:a3:3b:3a:9c:85:89:ab:40:4c:48:8b:11:6b:7b:9c:4d:
         9d:f8:a6:12:d7:71:1e:3d:a0:17:d3:99:45:99:98:80:e8:33:
         48:10:d7:d5:0d:ca:c6:7c:1d:e6:9f:6c:a2:31:e4:4e:1c:7e:
         74:2e:f9:32:7e:c8:5d:61:98:00:47:dc:65:13:9e:95:77:12:
         6e:c3:bb:1f:40:a5:e7:ec:15:b6:89:cb:c7:03:87:dd:06:1a:
         e0:fb:a6:29:db:42:81:eb:a4:fa:ad:c0:f9:8e:b8:94:37:21:
         d4:08:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 08:45:28 2026 by rpki-client