This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
File:                     _06CSYXcD-nm1S0VaP27Fw73EEs.mft (raw, json)
Hash identifier:          ugpuDLOXKRvHu+SasssmsQ3Rejb6HbrfBbic1PIP+Kk=
Subject key identifier:   FC:4F:6D:22:47:12:C4:56:52:91:1E:D3:3E:77:D4:6A:4B:5A:26:26
Authority key identifier: FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B
Certificate issuer:       /CN=F36EF78EAF/serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
Certificate serial:       021F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
Manifest number:          021C
Signing time:             Tue 20 Jan 2026 04:28:42 +0000
Manifest this update:     Tue 20 Jan 2026 04:28:41 +0000
Manifest next update:     Thu 22 Jan 2026 04:28:41 +0000
Files and hashes:         1: _06CSYXcD-nm1S0VaP27Fw73EEs.crl (hash: 9XYCQO+Pyk0e5fB3+/5rLysbWtrYwE3AHUR1L4YYiO8=)
                          2: 67C1E6C25BC211EFB69DE054762E951A.roa (hash: YBb6s7P/xe4Rp31Y1/0OCerKUAL44djIVtQBiEpnlME=)
                          3: D1925D2E8CC311F083C2CFE1DAE4EC9C.roa (hash: zU8Q70WrJt2SK0TaQnBuuJzUDch8WRt6KzfF4KFZg1U=)
                          4: F663696AE24411EF9066AA7A762E951A.roa (hash: rlVcPbXsu5EET/bBWkW4TnApiJ0p61Q+bM4Ie8pECxI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Jan 2026 04:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF78EAF, serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
        Validity
            Not Before: Jan 20 04:28:41 2026 GMT
            Not After : Jan 22 04:28:41 2026 GMT
        Subject: CN=696f047a-c726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:82:19:40:da:f7:9f:f5:9d:7a:d9:db:d7:
                    c8:06:69:7d:18:2e:be:d0:0a:c1:43:71:10:dd:83:
                    f7:12:df:e2:dd:6d:78:8e:c4:d2:5e:ba:04:e8:d8:
                    48:ab:b9:e7:12:2a:10:a9:8d:61:93:13:18:63:a8:
                    da:ab:46:2d:e6:cb:bb:ff:3a:37:3d:5b:74:ef:d9:
                    d1:4f:49:f0:b7:5b:ac:0f:42:fc:bd:57:21:46:11:
                    b8:77:8a:68:29:6f:22:17:5c:b3:ea:70:61:53:b9:
                    98:da:ec:5e:de:43:de:ab:21:a4:ee:99:14:fc:83:
                    ef:a4:6f:56:ee:a6:1f:35:45:a8:ee:31:eb:2f:8b:
                    4d:1d:5b:f7:31:51:f4:23:54:f3:21:8c:a4:f1:2f:
                    a8:ad:f1:f1:9b:44:a4:0b:ea:e0:e2:b6:f6:0c:2b:
                    9e:c6:3e:b5:9e:2e:4c:5d:ae:16:fe:87:68:82:51:
                    5a:3e:2f:59:00:4a:4c:43:7a:6d:31:63:a6:af:7a:
                    33:ff:4c:e3:d6:29:9e:2e:f3:6b:ff:5f:34:6c:d4:
                    35:a2:f5:b1:ec:32:a4:83:7f:a3:8e:83:d6:0c:e0:
                    32:46:db:3f:21:59:90:5b:b0:2b:a0:0d:ce:79:b1:
                    a3:15:5d:8d:67:0b:b5:f6:61:e4:c0:3b:f6:d1:90:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4F:6D:22:47:12:C4:56:52:91:1E:D3:3E:77:D4:6A:4B:5A:26:26
            X509v3 Authority Key Identifier:
                keyid:FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:43:b9:eb:f2:84:24:c6:04:bd:63:e7:1f:84:40:18:d1:
         eb:ba:a8:6a:21:85:4f:b7:df:d7:14:e4:4d:3e:ad:a4:75:ae:
         ee:7f:31:da:fc:6e:05:d9:6f:3b:af:f5:e2:03:89:8e:ba:13:
         bf:e6:40:d5:18:da:2c:f0:42:80:c6:28:64:b9:d5:22:29:94:
         7c:92:94:47:dc:fa:b6:0d:14:d9:1e:5d:e6:81:45:36:ee:2a:
         8e:e6:34:ab:b4:f1:30:56:66:b5:7e:b1:02:96:f8:0e:b3:a3:
         22:9c:53:51:1b:7b:87:1e:cc:7c:4b:20:e4:34:db:40:37:84:
         ab:9d:9a:ae:04:bb:9f:f7:30:de:8e:13:e3:d9:88:49:a7:e1:
         cf:29:02:71:94:92:20:d5:68:4d:d4:b0:9a:d4:79:8a:a6:35:
         77:e2:1f:5a:cb:43:6e:de:6e:92:e7:fe:2e:f9:b6:48:2d:e5:
         5d:b5:57:9c:81:f7:0c:9b:7a:e6:01:fe:a4:c3:e9:b2:a2:f9:
         12:fa:cd:53:33:86:71:a0:e6:ba:b3:6f:04:7b:b8:ee:91:2a:
         9c:46:af:35:f3:bb:8a:59:ee:29:8c:50:52:7d:c1:9d:ee:8b:
         fd:51:d0:1c:1b:b0:48:6e:21:fb:c5:8e:cd:e9:c5:dc:c5:d1:
         50:87:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:22:20 2026 by rpki-client