This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
File:                     IrcjfYpuI0VBundSql-48xqQzYA.mft (raw, json)
Hash identifier:          JRCi2QaCvVZ14c9VtHnTJZRW50jttOERN6O1NAHOxBA=
Subject key identifier:   AD:65:31:1C:EC:A2:FB:01:26:3B:4C:96:ED:AD:DD:32:F8:D6:8D:06
Authority key identifier: 22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80
Certificate issuer:       /CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
Certificate serial:       09A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
Manifest number:          09A6
Signing time:             Thu 01 Jan 2026 02:14:34 +0000
Manifest this update:     Thu 01 Jan 2026 02:14:33 +0000
Manifest next update:     Sat 03 Jan 2026 02:14:33 +0000
Files and hashes:         1: IrcjfYpuI0VBundSql-48xqQzYA.crl (hash: Qh9ueoDEp4lVagpVSgbQBJ+sxpnwecSZhK5Sg9Tzc8Q=)
                          2: 548444FC886811E9ADF34468F8AEA228.roa (hash: 1UElPZRMsw/FlEPeVKGSteHH7UZ+xvNvTZQ/F+SkwW4=)
                          3: 06F644A2886211E9862C9963F8AEA228.roa (hash: UqbhxzZyJOFJyGBOr36sTmH2MV8pK2xrkgTJYiq0otE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 02:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AF, serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
        Validity
            Not Before: Jan  1 02:14:33 2026 GMT
            Not After : Jan  3 02:14:33 2026 GMT
        Subject: CN=6955d889-d21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:45:ed:fe:af:75:cc:1c:8b:6d:1a:cb:a3:
                    c0:ec:c0:49:be:f3:82:06:77:27:28:3f:64:5f:c0:
                    cb:0d:65:2d:07:e3:5c:31:46:52:a7:bc:47:63:e8:
                    3b:6c:88:e1:d1:21:b1:fb:7c:1e:fd:01:8e:71:2a:
                    a7:79:4e:eb:3f:b7:8e:93:b2:fb:9e:28:09:70:27:
                    08:c9:a9:b9:83:17:f9:6d:33:a8:87:b6:b4:5c:80:
                    18:43:3d:4c:81:3f:f5:4a:60:5b:e7:e1:0a:c0:ed:
                    1b:5d:73:f7:e0:78:0e:dc:b9:5c:ff:81:6b:7f:1a:
                    d2:00:54:26:6b:07:67:5c:2c:1f:90:48:63:27:3c:
                    8c:88:0e:e9:e0:c9:c9:50:68:fa:fc:95:99:ac:f5:
                    67:8f:fd:72:22:97:ae:56:fb:27:40:29:45:a0:81:
                    fb:a3:90:89:dc:6e:3b:e9:ea:9a:f5:1a:7d:a3:a0:
                    3a:e4:90:4e:b3:cd:26:d7:d3:4d:ff:50:d8:8c:46:
                    42:37:92:bb:ca:91:a2:9b:65:4f:32:fa:74:10:51:
                    d9:10:63:82:53:40:80:54:6e:6c:a0:0d:3d:79:a4:
                    b8:50:0b:64:de:cf:72:5b:61:3e:8a:de:ce:7c:1c:
                    22:66:37:41:de:0c:2d:2c:6f:b6:c2:ce:8c:0a:14:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:31:1C:EC:A2:FB:01:26:3B:4C:96:ED:AD:DD:32:F8:D6:8D:06
            X509v3 Authority Key Identifier:
                keyid:22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bc:a7:e8:34:e6:ca:b2:fc:88:48:21:1c:2d:22:be:dd:d9:
         ff:eb:ee:2c:44:bd:4a:9d:cd:88:6f:19:7f:61:44:10:0b:e7:
         9a:8f:b5:87:d2:3a:f7:9d:6e:e6:dc:05:10:13:e8:90:2f:93:
         3e:c1:7f:f2:fc:cd:c9:75:ec:1f:4f:85:f6:24:0f:c7:9b:60:
         14:3b:e6:6f:ea:84:6a:c4:f8:04:eb:53:c7:ff:3c:4a:20:52:
         80:d2:30:21:b0:b6:39:ff:d0:28:58:bd:c8:d2:4e:c4:18:17:
         01:c1:d0:fa:bb:d3:3b:1c:a0:97:f2:d6:82:91:2b:37:6f:f0:
         1b:fc:b5:cf:0e:35:c0:10:1a:89:61:72:6b:a7:3b:4d:c0:fb:
         89:18:d2:7b:75:cf:5a:b5:b4:a6:5c:2f:ad:3d:ce:1a:d4:f9:
         ef:8f:3b:bc:fa:4f:99:2d:42:f9:dd:f4:d8:80:cd:a1:44:72:
         b5:36:93:10:e5:36:e8:f0:5f:3d:89:9c:aa:cc:0a:bb:74:24:
         40:73:ba:8a:82:46:cb:6b:49:5b:5b:86:64:dd:c0:d6:60:a8:
         f9:c7:9b:b7:15:a1:21:0a:59:c3:b3:ac:24:33:43:5a:6a:bb:
         4b:b4:21:f7:18:cc:5a:d4:18:c4:40:fd:d3:10:2a:1b:00:7b:
         5c:9b:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:11:05 2026 by rpki-client