This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          0+QjYVhQr9nu2A5NsfARJjbHIymzkDC7zM+GPk+tPiI=
Subject key identifier:   A6:95:9E:44:8B:4A:5C:32:ED:D8:1D:70:CF:8C:EB:94:BC:2C:ED:0B
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       023C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          0237
Signing time:             Fri 09 Jan 2026 04:23:20 +0000
Manifest this update:     Fri 09 Jan 2026 04:23:19 +0000
Manifest next update:     Sun 11 Jan 2026 04:23:19 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: q3yVFbflth2Nn6aUJ5+Fz/0TjyJQyVNmBQtVW9rRFhc=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
                          3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Jan 2026 04:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Jan  9 04:23:19 2026 GMT
            Not After : Jan 11 04:23:19 2026 GMT
        Subject: CN=696082b7-eec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:a8:6f:56:4c:8a:d3:b6:ce:16:f1:e6:d2:
                    b7:78:d4:2f:96:17:3a:06:77:1b:ad:3d:5d:6e:0d:
                    73:81:1c:ff:7b:94:31:9e:cb:ca:a2:35:ec:68:73:
                    89:a9:15:27:d4:74:af:35:79:bf:64:03:16:27:ba:
                    3d:98:8a:02:c6:4d:9a:52:3d:0f:1f:87:f9:0a:0a:
                    40:22:56:d3:77:50:7b:f8:f0:ef:25:1c:57:17:20:
                    d6:dd:d3:98:c8:7c:9f:f9:66:40:54:b8:c1:4c:0e:
                    71:c9:4c:04:75:1b:f9:c5:77:c3:92:c6:eb:48:32:
                    b4:3c:8c:df:dc:9e:31:e8:ed:55:18:0b:4c:96:ba:
                    3c:bd:69:74:1d:4e:4b:dd:8a:73:00:63:4d:81:2e:
                    94:1c:9f:8f:bc:2d:2c:84:85:1f:c3:34:1d:36:63:
                    b7:8c:c1:aa:d8:6a:70:a6:e1:05:0c:11:5d:9e:5c:
                    b0:c2:27:56:44:5d:19:72:91:f3:0d:a2:c5:41:63:
                    7e:0d:e1:04:ec:6d:49:43:23:1e:e8:a9:cb:f9:7e:
                    be:59:27:85:6f:46:ba:d8:ae:a9:fd:5a:80:91:83:
                    8e:7c:10:77:a3:68:c5:f1:54:1e:f4:f0:c7:30:0f:
                    1a:06:c7:fc:1d:4d:0c:a9:c2:99:30:a7:7d:d3:3c:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:95:9E:44:8B:4A:5C:32:ED:D8:1D:70:CF:8C:EB:94:BC:2C:ED:0B
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:46:93:8d:4e:9c:2a:b3:4d:dc:ba:2b:93:64:bf:6e:1c:49:
         6d:31:ea:04:90:69:a9:c5:ec:e0:58:b7:ca:89:fd:ec:ed:ab:
         5f:7a:4a:4a:89:df:08:2a:50:19:0c:3b:5a:19:e3:5d:e8:17:
         82:2e:a2:99:92:65:d7:2a:e9:c5:b8:d0:fb:60:b3:8f:d5:64:
         2d:2b:9f:23:98:e9:40:6d:d1:f9:61:ea:45:b8:79:57:9d:ce:
         74:95:47:9b:9e:23:ed:8d:e8:46:01:1b:89:ff:96:b4:72:6f:
         51:35:89:23:5d:50:8f:0d:d1:55:e8:a8:d5:99:72:c3:e0:e3:
         cc:5b:e3:b0:ae:55:b5:fe:af:f0:4b:2e:a1:b0:e1:61:72:df:
         d9:ea:0c:9c:b6:2c:e6:10:74:3d:01:32:62:11:48:36:85:65:
         58:19:4b:e3:23:3c:94:c1:55:d0:51:a3:58:8e:a3:fe:e8:08:
         5a:4b:71:84:af:ff:44:56:d2:75:2c:e9:9d:c5:43:c3:75:25:
         c6:86:63:b3:b1:35:98:8a:65:72:19:4f:7a:82:be:e6:c5:16:
         cb:93:34:5b:ea:e0:1c:96:66:12:d2:38:78:cf:e9:a0:75:41:
         26:ce:92:ad:58:b8:77:9e:a6:29:7a:22:0f:8c:63:01:ad:6c:
         7c:f6:d0:27
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZCNzdBRjExMC8GA1UEBRMoRjVERkY2NEEzOUQ4MDA3MDQ0RDc2NzFDQkNBQUEx
RTE2MTU3NDVBMDAeFw0yNjAxMDkwNDIzMTlaFw0yNjAxMTEwNDIzMTlaMBgxFjAU
BgNVBAMTDTY5NjA4MmI3LWVlYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb6ahvVkyK07bOFvHm0rd41C+WFzoGdxutPV1uDXOBHP97lDGey8qiNexo
c4mpFSfUdK81eb9kAxYnuj2YigLGTZpSPQ8fh/kKCkAiVtN3UHv48O8lHFcXINbd
05jIfJ/5ZkBUuMFMDnHJTAR1G/nFd8OSxutIMrQ8jN/cnjHo7VUYC0yWujy9aXQd
TkvdinMAY02BLpQcn4+8LSyEhR/DNB02Y7eMwarYanCm4QUMEV2eXLDCJ1ZEXRly
kfMNosVBY34N4QTsbUlDIx7oqcv5fr5ZJ4VvRrrYrqn9WoCRg458EHejaMXxVB70
8McwDxoGx/wdTQypwpkwp33TPGp/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUppWe
RItKXDLt2B1wz4zrlLws7QswHwYDVR0jBBgwFoAU9d/2SjnYAHBE12ccvKqh4WFX
RaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2Qjc3LzNDRkZBMzgwNDJDQjExRUY4QjlBMzdBRTc2MkU5NTFBLzlkXzJT
am5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlkXzJTam5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZCNzcvM0NGRkEzODA0MkNCMTFFRjhCOUEzN0FFNzYy
RTk1MUEvOWRfMlNqbllBSEJFMTJjY3ZLcWg0V0ZYUmFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBURpONTpwqs03cuiuTZL9uHEltMeoE
kGmpxezgWLfKif3s7atfekpKid8IKlAZDDtaGeNd6BeCLqKZkmXXKunFuND7YLOP
1WQtK58jmOlAbdH5YepFuHlXnc50lUebniPtjehGARuJ/5a0cm9RNYkjXVCPDdFV
6KjVmXLD4OPMW+OwrlW1/q/wSy6hsOFhct/Z6gyctizmEHQ9ATJiEUg2hWVYGUvj
IzyUwVXQUaNYjqP+6AhaS3GEr/9EVtJ1LOmdxUPDdSXGhmOzsTWYimVyGU96gr7m
xRbLkzRb6uAclmYS0jh4z+mgdUEmzpKtWLh3nqYpeiIPjGMBrWx89tAn
-----END CERTIFICATE-----
Generated at Sat Jan 10 03:58:49 2026 by rpki-client