This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File:                     iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier:          ef2rebwmSAg6wieOMKQdgif7i0diffORKTTERP7cVSk=
Subject key identifier:   55:E0:7E:A2:E5:C8:93:57:67:5A:E1:D1:36:47:A6:06:F8:32:F8:1C
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer:       /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial:       A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number:          A2
Signing time:             Fri 06 Feb 2026 05:49:38 +0000
Manifest this update:     Fri 06 Feb 2026 05:49:37 +0000
Manifest next update:     Sun 08 Feb 2026 05:49:37 +0000
Files and hashes:         1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: pxAiR1UkdaSQpUqBtLCRfP/wJ7zeyruGVYD4fH66z8Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 05:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
        Validity
            Not Before: Feb  6 05:49:37 2026 GMT
            Not After : Feb  8 05:49:37 2026 GMT
        Subject: CN=698580f2-ca97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:60:a2:78:16:dd:e7:f0:7c:f9:3f:b1:88:
                    63:92:df:45:9e:8c:78:a4:70:8c:74:35:f1:6f:f5:
                    2e:bc:4e:47:92:44:15:45:19:69:84:e6:c9:29:de:
                    5c:76:97:46:ce:31:40:d4:3c:18:3c:1a:f8:c2:7b:
                    3b:b7:93:a3:86:77:74:49:b3:41:44:6c:93:c0:90:
                    c7:d8:7c:5b:2b:0d:21:cb:75:b4:17:c0:c1:a9:de:
                    ef:5f:15:77:29:bd:92:0b:82:56:95:e7:65:ac:40:
                    e6:d5:77:1c:57:20:08:1a:98:d1:9f:70:75:0a:37:
                    c0:9c:17:bf:09:ff:38:24:9c:d0:66:fe:08:32:ad:
                    96:b8:30:d9:ff:6c:a6:ea:3c:31:16:6d:6c:fe:29:
                    95:2d:8a:a6:76:3b:e8:de:bc:d3:40:af:82:a7:de:
                    f3:01:00:cc:2d:cd:9a:1c:39:f4:c7:31:9a:d7:19:
                    03:a1:55:41:7c:bc:0b:99:3e:15:2f:20:d8:f9:07:
                    16:be:a1:c2:80:9c:88:7c:94:c7:33:eb:6c:29:84:
                    c8:14:d7:49:c3:6b:7a:35:20:38:af:fd:dc:61:39:
                    bf:b3:08:ba:a9:73:90:10:e5:7a:c2:40:b9:d6:8e:
                    cf:c6:96:48:bd:eb:08:cb:68:36:e8:c6:37:53:23:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:7E:A2:E5:C8:93:57:67:5A:E1:D1:36:47:A6:06:F8:32:F8:1C
            X509v3 Authority Key Identifier:
                keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:66:57:90:8f:ab:92:ed:1b:8c:60:4d:7c:6b:3d:36:4b:
         bc:38:eb:c7:7d:7e:64:81:f8:31:e8:98:01:58:03:9e:18:69:
         ee:d6:06:b1:3c:e5:ff:f5:3f:8b:f9:3e:73:2b:fa:79:72:ee:
         49:87:07:7c:53:74:3b:84:48:93:f7:17:9e:48:9c:92:25:0d:
         85:47:f0:ec:81:3d:eb:fc:a0:3c:be:c7:72:05:cd:24:3a:31:
         1a:df:5e:16:b1:04:46:5c:a2:9a:18:f3:18:d1:67:05:38:aa:
         46:3b:e7:27:9c:f6:e4:d9:57:c7:4f:b2:93:ea:3a:37:7a:75:
         f7:f6:04:da:23:bf:ba:e0:f7:82:3d:da:d5:7a:46:05:36:05:
         1a:19:a4:ce:b9:5d:59:c7:e7:a6:a1:81:e2:9e:6e:7c:3d:eb:
         6d:64:df:e2:f0:2b:50:27:34:27:3e:2d:eb:5f:d2:3a:b0:1b:
         20:5b:ae:20:c2:a1:8f:df:25:54:e2:7f:b3:a3:bf:b2:cc:8a:
         6b:30:55:10:33:58:c3:18:e5:16:10:aa:06:da:af:28:b3:8e:
         c0:1e:b1:44:71:a6:27:1c:4d:94:71:de:f2:c5:60:42:b9:20:
         52:5f:af:bc:27:0d:82:fe:ee:3a:40:61:ed:80:9c:43:02:71:
         7d:90:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:25:08 2026 by rpki-client