This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
File:                     PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft (raw, json)
Hash identifier:          GuJc3EhFFMODyY0aaabQQxv9hg/LXyjmIK3sk6J07qw=
Subject key identifier:   B9:0C:25:DF:C0:E3:6E:17:04:E6:6D:F2:96:F8:19:46:52:31:34:62
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       0F28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
Manifest number:          0F1C
Signing time:             Mon 12 Jan 2026 00:57:40 +0000
Manifest this update:     Mon 12 Jan 2026 00:57:39 +0000
Manifest next update:     Wed 14 Jan 2026 00:57:39 +0000
Files and hashes:         1: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl (hash: Xv3CT5qvTyzXQecJp3D4exLR/PquI4f0FibUnXG4uds=)
                          2: 27245A66C4C411F09B86D9E0DAE4EC9C.roa (hash: RhP+q0hcR9r0TqI0DJg5TlVHEkwdaQaUB4Vwe66w/4w=)
                          3: A19476D4C4C211F098DC65D8DAE4EC9C.roa (hash: ChEp6ZWIlk0DrDsY4PbxeB0oWgH6YxSvcg1AG3DA7vw=)
                          4: 699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (hash: MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3880 (0xf28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Jan 12 00:57:39 2026 GMT
            Not After : Jan 14 00:57:39 2026 GMT
        Subject: CN=69644704-12ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:bf:8c:27:83:e5:c0:e3:78:35:55:37:91:
                    08:80:e0:0a:3f:32:21:16:5a:de:fd:d4:4f:b7:02:
                    3d:42:37:ea:1d:3a:f9:88:d5:41:8c:6c:c4:e1:c5:
                    63:c7:07:99:bf:7b:d8:bf:9a:40:3b:9f:53:f8:1f:
                    f5:67:62:ac:6a:1c:8e:a2:d5:9f:fa:4a:69:a4:0a:
                    1c:ad:cd:fc:0c:90:2f:ec:0b:7e:03:22:b5:2c:2c:
                    b1:5a:db:db:e9:c4:49:59:40:ba:4c:3c:95:44:88:
                    62:9b:ed:80:e9:b1:2b:be:34:4c:0f:d7:d2:ea:12:
                    ac:6c:09:b3:2a:37:ec:92:7c:0f:73:93:d1:7f:48:
                    a5:78:32:10:c7:5f:f0:6b:5f:c0:3c:b4:85:b8:36:
                    c1:7a:a3:1c:cc:bd:aa:83:7b:f4:e8:11:84:b4:60:
                    43:e2:0a:89:25:6b:57:7f:03:52:f7:05:5e:3c:34:
                    1e:de:1b:ee:a1:a2:56:9e:75:a6:01:4f:fb:2f:dc:
                    8b:f1:ba:d1:66:99:5c:6e:03:77:f3:39:c4:2d:25:
                    07:c4:23:33:80:00:da:eb:74:d4:0c:38:6e:03:a4:
                    81:ca:ac:e0:1a:6b:03:d0:43:cc:c6:d7:9e:fa:cf:
                    be:12:4c:22:f0:76:31:23:02:b3:35:b3:f0:31:aa:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0C:25:DF:C0:E3:6E:17:04:E6:6D:F2:96:F8:19:46:52:31:34:62
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:6d:82:ac:18:dc:73:31:9b:54:11:f5:79:85:a3:28:0a:
         5f:97:65:a8:5a:ef:37:da:5f:53:49:c5:ef:83:cb:f4:8f:2b:
         05:64:97:55:cc:1a:92:38:7c:b1:5b:08:4f:a6:b1:f2:88:8b:
         17:5e:90:ae:ac:89:0b:30:45:10:a0:d1:34:b0:a4:79:0f:d1:
         e4:6f:15:b6:40:a9:6f:05:16:da:86:e7:6e:02:fc:9e:f4:dc:
         e4:79:d6:eb:c8:0a:4e:6f:95:dd:10:ac:b0:83:7f:a1:18:c6:
         12:3c:b7:4d:c2:52:20:b7:31:a9:f3:ad:5d:42:91:9f:b9:35:
         44:8c:8c:c7:c6:37:13:6a:bb:6e:09:d5:8c:46:0b:c7:0e:69:
         2b:e9:0f:7b:1b:24:6e:f1:e5:16:56:8f:b7:2a:ee:93:87:3d:
         fb:2e:ca:96:dc:de:53:4b:ec:3e:10:78:d8:1f:a7:0a:08:22:
         4a:0c:9b:fe:45:95:5a:7b:f1:6b:c7:70:39:65:54:77:f5:20:
         2a:bb:82:74:2b:60:5f:c1:e6:81:98:79:42:59:4f:e5:cd:58:
         d6:b8:05:19:5e:09:70:4e:0c:4b:2a:dd:9f:9b:f4:49:6f:04:
         17:cf:03:6b:31:16:8c:2b:81:f0:df:61:7b:54:11:42:a4:f9:
         0d:1b:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:35:59 2026 by rpki-client