This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
File:                     k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json)
Hash identifier:          weJkCAAuEtL9fHBhPjP6w5i8DQLFMtaQE6mSo2tM6RU=
Subject key identifier:   C8:33:DF:26:9E:87:42:71:75:0E:07:EB:F9:8B:1E:07:4F:20:82:4F
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       09B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
Manifest number:          09B0
Signing time:             Thu 08 Jan 2026 01:28:34 +0000
Manifest this update:     Thu 08 Jan 2026 01:28:33 +0000
Manifest next update:     Sat 10 Jan 2026 01:28:33 +0000
Files and hashes:         1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: aq5g6US7YjOfzCTUWow8PBH2ImdgVOM3SGjiuDJspLg=)
                          2: C7641772A95111E996327569F8AEA228.roa (hash: zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=)
                          3: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (hash: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=)
                          4: DB963EBAA95011E9B922BA68F8AEA228.roa (hash: vNERaKTpGQ3bPaoxkOtKP33r5596Gf5AbL5hU7WDtMM=)
                          5: 040A9D2CA95211E9BA19AD69F8AEA228.roa (hash: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=)
                          6: E558A086A95111E981E48069F8AEA228.roa (hash: MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=)
                          7: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=)
                          8: 833F912AA95111E9AEA64269F8AEA228.roa (hash: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=)
                          9: 7B3DF01C8F6F11E9B8F82D5FF8AEA228.roa (hash: nFOWMxTM8t65qguasjyQKc77AeNcYXGCBaZB7vYGI0Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Jan 2026 01:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2489 (0x9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Jan  8 01:28:33 2026 GMT
            Not After : Jan 10 01:28:33 2026 GMT
        Subject: CN=695f0842-53d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:df:6f:8c:f2:c9:b6:c1:e1:5e:b7:75:f4:
                    85:c3:ec:17:57:2d:c3:19:e6:e1:15:dd:ed:56:b5:
                    84:c2:10:7c:e2:91:02:ef:ae:e4:b4:4b:f7:06:46:
                    3a:70:c2:73:5b:2a:6e:4d:99:c8:b6:82:07:25:13:
                    0b:bb:5f:50:75:21:d6:e1:42:da:0c:bc:f0:de:b2:
                    87:a7:5a:4b:7c:c4:4a:fb:a7:00:60:3c:5b:cf:ec:
                    1e:91:d1:18:92:aa:c5:87:20:95:6b:01:97:ae:c6:
                    29:31:ed:77:c9:d7:ac:03:f9:5d:7a:87:fa:81:7e:
                    f0:46:b4:30:2f:db:87:7b:99:c0:35:ed:6c:e3:9c:
                    9b:5c:62:86:29:5a:c1:3a:a6:fd:6c:12:e8:b0:0e:
                    4e:72:ad:57:e6:66:eb:ea:69:98:46:95:e4:d9:59:
                    71:9e:ca:ae:0e:fe:df:f1:fb:eb:dd:e8:81:77:ef:
                    09:7d:fd:46:e5:4c:04:68:43:72:62:62:45:7b:0c:
                    02:51:9d:5d:61:ff:a3:5d:27:b6:79:a0:3f:3b:1b:
                    ae:ee:09:aa:e6:1e:0c:2b:b7:93:59:c1:be:0c:9d:
                    2a:43:a9:e6:9c:2b:ed:40:bb:da:5a:b6:21:88:5d:
                    50:51:27:ef:c4:63:37:33:f1:cd:64:f9:b0:4b:e3:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:33:DF:26:9E:87:42:71:75:0E:07:EB:F9:8B:1E:07:4F:20:82:4F
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:04:85:cd:5b:99:fc:2e:54:19:19:c8:58:91:12:f8:6b:f1:
         9e:7f:2d:c2:87:4b:4f:71:d4:cd:51:f6:6d:76:d7:2a:ae:c8:
         e8:f4:bb:34:e2:11:8e:8e:91:69:f5:74:02:bb:df:29:3e:77:
         43:fe:67:48:c6:dd:4f:ca:a2:ba:7a:51:61:7f:75:f4:f1:e1:
         a0:af:9d:bd:4c:d6:5e:66:08:e3:2e:c9:fb:6b:ab:df:82:d6:
         89:4a:1d:0c:43:5a:d3:9e:c4:2d:ae:c9:75:66:ae:1b:ee:e1:
         96:9d:d0:9b:37:2e:f4:bd:88:e8:18:33:b5:84:06:68:5b:fe:
         37:e0:7f:97:e0:78:76:8c:91:92:82:13:09:e0:b4:fb:68:3d:
         ea:35:46:18:f7:44:0b:bb:6c:8d:29:90:9a:14:de:18:e8:1a:
         da:ba:6c:84:eb:e3:b5:de:60:55:18:8c:36:c1:8e:93:16:9d:
         12:19:4e:25:98:80:a6:2d:23:78:6a:9c:18:bf:25:b3:92:3b:
         1d:38:38:db:49:8b:f9:f4:c8:60:51:a3:bc:c8:16:3f:0c:d5:
         7b:e7:25:cc:89:6e:61:e0:1c:35:6a:16:0d:7b:91:cd:49:87:
         52:66:0e:30:c1:8c:10:8b:c7:89:2c:c3:0e:04:5b:9d:dd:18:
         77:a5:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:55:21 2026 by rpki-client