This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          Y2dW+s0vi8VA1KsJlHNr6r2AFyEwdr+A7uGtKDDqRks=
Subject key identifier:   1F:D4:C3:DD:78:05:E2:B0:CC:3D:4B:B2:17:31:1A:24:54:4C:20:49
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       013A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          013A
Signing time:             Tue 13 Jan 2026 04:53:13 +0000
Manifest this update:     Tue 13 Jan 2026 04:53:12 +0000
Manifest next update:     Thu 15 Jan 2026 04:53:12 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: mAzFgecA5KNBLMSe7IVIfUvpfVUvAzsfmCQHWrjvo4A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Jan 13 04:53:12 2026 GMT
            Not After : Jan 15 04:53:12 2026 GMT
        Subject: CN=6965cfb9-256d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:b9:f8:22:05:46:65:74:c1:ec:ce:57:7d:
                    57:4e:0a:88:72:4d:4e:c7:74:3a:03:27:17:12:0c:
                    ec:86:7d:80:74:b5:49:5d:7b:94:8f:78:8e:6d:d1:
                    b3:30:c5:c9:77:ae:34:ac:48:86:9a:f8:9f:21:25:
                    b0:e6:2d:60:2b:d5:f7:cb:f1:6a:b4:55:63:98:b5:
                    b0:d1:8d:fc:03:22:89:b3:51:9e:d6:3b:52:3d:a1:
                    a1:b0:59:3a:7e:89:17:9d:bd:29:fc:4e:07:e2:be:
                    65:b7:92:01:fd:ac:5e:2c:73:cc:f0:f3:5b:df:0c:
                    51:17:4f:e6:9a:33:e3:f4:d2:a7:74:47:bb:0a:3b:
                    b5:1d:7a:49:8b:74:fc:ed:41:75:e2:82:bd:95:bd:
                    2c:c6:22:67:5b:79:43:e9:31:64:f8:c8:f3:bd:8e:
                    46:ad:c8:bc:ad:40:8b:7f:e2:76:51:5a:05:bd:9a:
                    fe:01:57:52:bb:bc:f5:29:42:90:e1:80:1a:9a:e6:
                    14:93:7e:03:a8:23:2f:fd:07:f7:e6:45:77:a1:96:
                    1b:8a:05:fa:a7:32:a3:3e:13:18:a7:3b:e5:d1:3e:
                    65:98:f9:b9:09:d1:34:b4:8d:10:0b:f1:4e:1a:93:
                    8c:da:56:41:12:57:41:9f:5e:42:ab:33:17:64:16:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:C3:DD:78:05:E2:B0:CC:3D:4B:B2:17:31:1A:24:54:4C:20:49
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f8:eb:75:d0:30:b9:b9:f9:b5:3c:4b:db:f8:f1:ca:29:d0:
         23:ce:2b:a7:89:30:c7:5b:04:80:3f:aa:1f:91:52:6d:1e:b7:
         b2:73:c8:3f:c8:81:36:b5:da:a6:84:26:82:78:be:ed:69:5d:
         43:df:03:8c:6e:12:07:f1:e2:6d:63:32:d0:4f:7f:f7:71:dc:
         f6:32:36:71:dc:1a:bc:91:4b:8e:27:ff:56:91:45:de:c2:46:
         b4:26:87:5b:aa:2d:e9:c7:f1:54:c5:c9:f6:df:29:fa:f3:bf:
         2a:1e:31:5b:42:89:f5:17:80:88:6b:e4:16:8d:1e:fd:11:bf:
         58:7c:fd:6d:dd:29:6c:1f:00:e9:ec:31:42:18:31:f0:be:c3:
         c5:c9:b5:5c:1d:23:11:98:14:e8:18:38:00:2b:83:a0:63:a3:
         31:ab:ab:f7:c7:fd:0b:1b:8f:48:92:20:d5:0e:e4:4c:98:53:
         ad:12:4a:30:38:e1:2a:4f:a1:3e:b2:41:56:62:af:19:e2:38:
         88:b6:19:b8:b3:e3:40:1d:42:5a:fa:e6:90:ed:93:b3:32:1d:
         67:22:1d:df:cb:93:d0:0d:8b:8d:6e:a2:2c:b1:b5:79:ea:23:
         bd:23:cf:81:67:de:b9:18:c4:7e:79:3a:dc:aa:ac:81:61:95:
         aa:68:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:24:58 2026 by rpki-client