This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
File:                     iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft (raw, json)
Hash identifier:          X7w/qJE92cXJl5M39hDpMOnFm6Pd05CfC9tf7izqaos=
Subject key identifier:   F2:07:6A:12:9E:0C:36:BD:7E:BF:85:B1:6E:B0:1E:12:9B:8F:0F:95
Authority key identifier: 88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
Certificate issuer:       /CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Certificate serial:       0213
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
Manifest number:          0212
Signing time:             Mon 12 Jan 2026 04:31:05 +0000
Manifest this update:     Mon 12 Jan 2026 04:31:04 +0000
Manifest next update:     Wed 14 Jan 2026 04:31:04 +0000
Files and hashes:         1: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl (hash: b8efuCRWcX+YxZmE06s7/axU5sZnRjNLhYGuhqOMaR4=)
                          2: 96765F423C6E11F09155EFCBDAE4EC9C.roa (hash: hFFmGegVcY7FYj6sGdd1sbP6AWog8WEhJh7P4bF8xW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3622A10AF, serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
        Validity
            Not Before: Jan 12 04:31:04 2026 GMT
            Not After : Jan 14 04:31:04 2026 GMT
        Subject: CN=69647909-94e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:47:6a:ab:3b:f8:bf:2c:b5:13:38:7c:d9:
                    c3:51:f0:d1:b3:c1:4a:e8:c1:25:5e:b0:55:26:d0:
                    e7:64:61:d5:18:0e:92:3f:66:b1:70:a5:b5:5a:2a:
                    f4:67:02:5c:26:2c:99:d1:b9:21:23:8c:df:92:19:
                    0a:15:67:f7:75:8f:e9:1c:18:f3:cd:77:39:6d:95:
                    98:4d:9e:11:0a:14:26:69:06:1d:1f:01:2a:c0:3f:
                    63:b3:f6:30:12:2a:cd:f0:7f:a1:75:88:fe:44:72:
                    27:67:31:73:ba:bc:64:09:c7:61:7e:15:b6:1e:79:
                    48:15:88:19:e5:a3:dc:e3:b9:60:03:61:8b:db:f7:
                    b9:c0:19:5b:b3:ca:3a:c6:65:c5:db:a8:52:77:13:
                    da:24:9d:00:c3:4b:ce:18:e8:e0:be:a7:36:b6:3f:
                    4a:e3:84:88:0e:2a:26:54:38:0b:72:bf:ab:0d:c7:
                    89:3f:14:48:6b:0a:d4:7b:e8:9a:23:68:62:4e:a4:
                    bd:61:83:06:8c:48:9d:f7:36:22:8d:cc:34:cc:83:
                    2e:9c:99:4b:87:6a:89:53:61:1f:84:0a:89:7f:1b:
                    64:a2:36:b7:a2:dd:4b:0c:dc:23:d1:7e:01:be:22:
                    fd:4c:a8:f6:c3:7b:9e:d2:fc:8e:f1:b6:ad:3b:61:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:6A:12:9E:0C:36:BD:7E:BF:85:B1:6E:B0:1E:12:9B:8F:0F:95
            X509v3 Authority Key Identifier:
                keyid:88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:58:e6:1c:30:cd:ae:21:9c:23:55:07:e1:e5:90:c8:6c:
         97:71:85:9b:45:82:a3:22:75:15:5f:40:a5:d2:02:3d:4c:c6:
         61:bc:c5:95:00:5d:83:88:17:f9:02:0e:04:6c:74:58:8b:74:
         62:f3:49:04:c2:3b:9a:9f:2a:22:b1:6e:92:a6:a6:b1:86:35:
         6e:1b:7f:b1:0d:4b:a2:76:9e:e7:82:d7:59:2a:0e:95:9a:75:
         96:44:0b:4e:f8:db:50:bd:5c:dc:7a:98:1b:a7:f9:17:20:f9:
         25:93:bb:d0:22:54:99:01:f5:c9:ad:98:3a:bb:9a:57:55:c1:
         53:59:2e:41:da:0c:aa:a9:9c:51:e5:a1:e1:22:23:d6:ae:37:
         d1:88:0f:78:82:e5:f8:48:70:5d:f3:b1:63:7e:a1:7d:6e:4c:
         62:c8:43:f7:66:52:9f:31:17:87:c0:92:6b:16:4c:05:42:69:
         76:af:b1:f4:08:a2:00:2e:c1:cf:fe:2f:98:74:c7:e9:41:19:
         04:bf:b2:e2:b8:c9:c1:2b:c3:61:ea:2b:c2:02:68:20:33:37:
         f0:84:13:e7:19:ca:a8:35:e6:94:80:46:62:34:1b:9f:72:b8:
         24:73:f9:5b:06:0f:18:cd:f2:be:da:79:65:00:a3:cf:1b:9d:
         4d:07:ba:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:39:14 2026 by rpki-client