This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          8p4FagJ3vsWIhIxSDuE5JW3SBCY+Zz2RR/NUmPF5vPA=
Subject key identifier:   35:92:92:0E:EB:10:5B:0C:AF:B0:DE:B8:0C:49:9F:E7:31:FA:9F:D4
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       0415
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          0414
Signing time:             Fri 09 Jan 2026 03:24:55 +0000
Manifest this update:     Fri 09 Jan 2026 03:24:54 +0000
Manifest next update:     Sun 11 Jan 2026 03:24:54 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: LlM1KKFfi1JjlqTAiF1e4ouz+yWQ7nFlZ/jmLOK3d8E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Jan 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF, serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Jan  9 03:24:54 2026 GMT
            Not After : Jan 11 03:24:54 2026 GMT
        Subject: CN=69607507-87e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:a4:ec:65:60:44:3f:2c:7b:37:4b:b6:7b:
                    62:ac:28:33:e4:e4:d9:3d:9c:a2:59:25:1e:2d:47:
                    f0:1d:d3:9e:00:a2:e2:42:f1:91:34:fb:90:e1:67:
                    7f:ea:e0:f5:f2:91:bf:ca:1d:f5:ba:e1:39:f4:55:
                    5a:ee:f3:f4:03:16:68:66:f6:59:f9:3d:f2:68:95:
                    87:1c:2f:49:ca:a5:26:fe:d4:94:40:4b:b5:ed:39:
                    3d:22:75:1e:1b:5e:ec:d5:ba:07:48:cb:b4:1e:2c:
                    19:e2:4e:e0:74:92:a9:79:5d:3d:04:49:15:71:35:
                    c4:7b:0d:12:32:55:47:aa:9c:a8:9d:a8:d2:23:65:
                    1a:21:03:c4:7c:08:d5:3f:8a:af:38:91:fc:6b:95:
                    40:d8:60:34:89:61:e9:73:f3:63:b8:35:57:0d:0a:
                    15:67:48:5a:a1:d6:1d:ec:86:16:07:1d:e3:fc:80:
                    71:d7:b2:ff:05:7e:c6:8d:e6:40:60:25:16:ae:6e:
                    78:ef:e2:9b:a5:53:64:e1:49:3f:0b:b5:75:96:34:
                    68:b3:b8:07:fb:9c:2c:d7:5d:d9:b7:75:61:fd:bd:
                    cf:8a:cc:2b:aa:f2:a1:bc:a0:e0:55:d9:07:7e:36:
                    58:e3:5f:06:cd:44:19:c8:b5:65:ed:c1:24:39:f6:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:92:92:0E:EB:10:5B:0C:AF:B0:DE:B8:0C:49:9F:E7:31:FA:9F:D4
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f7:34:d5:cd:e2:12:3e:0a:5c:a3:35:90:93:7b:7e:20:cd:
         42:d7:5f:cf:4d:4a:ad:7f:37:0b:ed:93:b1:85:27:81:41:a0:
         8e:c8:d2:38:55:90:aa:a6:52:cb:76:24:d3:d3:8c:15:3b:15:
         02:cc:4b:b6:36:d1:6b:6e:8e:93:47:d1:14:aa:5c:83:3f:a5:
         19:41:6d:bd:9b:0a:38:45:fe:32:05:c9:aa:78:0b:80:ce:99:
         79:61:5d:d0:e1:1a:a5:5b:fb:d1:36:28:9a:22:52:09:e0:28:
         e5:54:97:0a:9b:f1:27:a6:98:67:61:4d:0e:50:85:82:e4:f9:
         46:c5:33:e9:6c:df:02:e5:eb:c1:7e:6b:b3:3f:50:6f:ae:42:
         83:29:7c:fe:ea:61:4a:32:51:da:08:81:9a:7f:c4:83:72:2c:
         0d:8f:20:4b:71:e8:b7:e6:af:42:fb:99:25:c0:52:04:7d:a7:
         d9:a7:e4:d9:a2:61:45:2f:51:e2:b6:98:b5:80:60:81:af:02:
         fb:c3:b7:56:ed:2d:03:a0:f0:f2:fa:8e:1e:d4:23:86:ad:37:
         58:33:c7:dc:15:5d:87:d5:71:36:fb:78:7e:77:4f:cf:a6:60:
         de:1f:33:23:66:fc:59:e4:a7:42:b4:ea:a0:82:bc:1b:b9:4f:
         db:b3:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:30:56 2026 by rpki-client