This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File:                     Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier:          L0TcjObtbq8oSOZsoa3PkdTeo/gCVyqD27FyNF/3m64=
Subject key identifier:   72:A8:37:F0:43:AC:19:87:9A:C8:FE:A4:59:4B:83:91:4F:AC:EC:68
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number:          04FD
Signing time:             Mon 12 Jan 2026 03:04:01 +0000
Manifest this update:     Mon 12 Jan 2026 03:04:01 +0000
Manifest next update:     Wed 14 Jan 2026 03:04:01 +0000
Files and hashes:         1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: tixR/+iz1iMDNczrQ3G6YEalWP6g1NZhb51F60Jc3Ag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 03:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Jan 12 03:04:01 2026 GMT
            Not After : Jan 14 03:04:01 2026 GMT
        Subject: CN=696464a1-27b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:56:b9:84:47:c5:eb:d5:0e:f6:1d:33:a8:
                    2b:d2:d3:d4:99:33:d1:0a:cf:92:07:fc:28:77:f6:
                    74:1f:5a:e3:0f:9e:b2:d7:df:cb:f4:74:3a:09:92:
                    b2:d7:15:33:e6:ce:fa:a2:d8:52:4c:5e:a0:99:4b:
                    52:de:39:79:0d:58:5c:ab:47:04:f1:5a:44:7d:fa:
                    65:6c:03:88:0c:dc:89:97:0b:91:ad:a9:e5:83:ec:
                    89:0d:b7:76:27:0f:58:6f:87:3d:0a:11:6a:3d:89:
                    5c:4b:2e:f7:4c:6c:11:6c:89:4a:76:14:cc:49:54:
                    0e:3a:66:c2:a8:97:0e:1b:d3:54:45:60:95:ed:15:
                    80:23:39:3e:77:b9:e4:55:a3:25:cf:b2:ae:10:30:
                    18:b0:c2:75:2c:d9:97:ab:09:c6:8d:b8:33:d8:4f:
                    43:01:68:5f:09:b9:98:63:6d:0c:80:10:ff:31:e1:
                    a2:a5:1b:f4:c4:4a:fc:98:35:da:72:fe:2e:52:d0:
                    ed:cd:c6:35:e6:39:79:47:92:1d:18:1c:84:f4:ae:
                    6e:5e:33:ae:61:b7:07:fc:d6:ec:83:5c:58:ad:a8:
                    6d:52:c6:a9:18:a5:5e:31:a1:54:a8:f6:dd:e8:8c:
                    e0:12:04:11:49:e9:af:3d:3e:4b:65:b6:64:4b:8c:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A8:37:F0:43:AC:19:87:9A:C8:FE:A4:59:4B:83:91:4F:AC:EC:68
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:8d:be:70:f6:ed:2f:f4:4a:dc:6d:ba:02:2c:26:ec:d9:
         05:67:1d:91:c1:9e:78:ae:7c:f7:21:61:71:4b:8e:0d:19:6f:
         13:15:2a:1d:54:d2:bc:09:b0:10:54:44:e8:5a:6f:dc:bf:1b:
         a6:84:4d:9b:45:0e:2f:25:97:e4:13:d3:8a:a2:3d:26:bf:56:
         bf:32:f8:12:00:8b:6e:a4:90:23:58:ca:cb:71:e4:9c:51:21:
         8d:a1:72:1c:53:bb:b3:18:b2:23:bd:53:d6:3a:e4:6f:de:0c:
         27:8d:fa:4c:ee:f6:92:18:6a:18:65:f4:12:8a:45:44:70:f5:
         ad:4a:7f:aa:1c:f2:88:64:66:ce:96:8a:31:b4:8b:d8:34:28:
         89:16:b5:37:2c:59:cb:91:af:da:29:f0:f5:3a:b1:47:30:d5:
         cb:68:d1:60:4a:bd:5b:3d:9c:03:ab:df:70:65:ec:64:32:04:
         c2:5c:b4:59:c5:35:86:80:a8:04:e2:fd:38:2a:63:a1:7b:67:
         41:02:e0:b6:66:9e:17:89:47:fd:5c:01:4d:98:da:13:bf:c8:
         d0:73:f8:ed:5e:41:f1:84:4b:d9:03:bd:8c:15:8f:d8:04:3a:
         af:ae:d2:a3:8a:43:b9:7e:5f:83:08:4b:df:ef:54:53:83:45:
         a1:84:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:24:24 2026 by rpki-client