This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
File:                     P7W-Pd2uYUvp0eYugJg24jAucRg.mft (raw, json)
Hash identifier:          x3C1OhyhFZvXHFb2rODBflv6Rm/wbRrp+Ew2Wgf7j7o=
Subject key identifier:   7E:6C:71:96:63:FD:2C:08:93:67:8A:53:E7:C5:4F:F6:EE:B4:D5:16
Authority key identifier: 3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18
Certificate issuer:       /CN=F36FE001AF/serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
Manifest number:          01F3
Signing time:             Fri 02 Jan 2026 04:48:28 +0000
Manifest this update:     Fri 02 Jan 2026 04:48:27 +0000
Manifest next update:     Sun 04 Jan 2026 04:48:27 +0000
Files and hashes:         1: P7W-Pd2uYUvp0eYugJg24jAucRg.crl (hash: jJyE/XWXMhRS+refOXig3mNt2h6vJTT9CphJalo1yrw=)
                          2: A75F7B928AF111EFB2CB67BF762E951A.roa (hash: 1y9725X7pI3fDYKtzxGjKxLFQQ2D7BEYifnvUVyDT5g=)
                          3: 7AA8E23C8AF111EF819141BF762E951A.roa (hash: WA1vTy837ja/SSXdE4yDJ6r+9rLSH6HSYjYFhAhnYN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Jan 2026 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE001AF, serialNumber=3FB5BE3DDDAE614BE9D1E62E809836E2302E7118
        Validity
            Not Before: Jan  2 04:48:27 2026 GMT
            Not After : Jan  4 04:48:27 2026 GMT
        Subject: CN=69574e1c-2ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:df:8e:f6:20:3e:72:2b:79:d6:f0:65:14:
                    ec:56:13:c9:6b:90:41:92:d1:8a:7f:48:0d:48:bc:
                    28:85:4d:03:ba:57:75:c4:55:74:98:31:ef:96:54:
                    03:9f:fe:f2:cf:77:ab:68:91:74:4a:d2:04:b2:c7:
                    05:33:a9:41:11:16:31:90:88:89:51:ec:17:13:44:
                    90:35:9f:b3:03:b8:63:3b:d9:04:b1:5f:20:af:9b:
                    fb:59:d4:40:ca:e8:c8:51:d6:e2:9c:d6:12:bd:8f:
                    03:b5:12:35:44:0f:44:09:9a:df:df:e1:b4:3c:b4:
                    5a:32:a9:e2:1f:72:32:2c:75:64:a1:14:78:83:f2:
                    fc:52:c2:68:a4:39:48:0c:41:fb:2b:88:64:2f:b5:
                    1b:8f:64:7d:6e:e8:9d:ec:35:a1:85:25:de:e1:51:
                    ca:41:41:a4:de:58:49:9c:d4:00:9f:e6:c1:14:1f:
                    8a:eb:73:73:f1:f0:c0:c2:e3:2e:ee:d8:0d:e6:9b:
                    56:9f:a2:5f:ce:36:fa:a6:a4:4e:41:b4:b3:11:b0:
                    96:8c:3d:95:b5:18:56:87:b9:ca:82:1f:f1:80:f6:
                    f2:be:70:a4:fa:35:9f:5e:1c:ce:2d:bc:a7:73:35:
                    04:19:bd:c7:6d:a0:f0:5c:46:10:7d:77:91:64:80:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6C:71:96:63:FD:2C:08:93:67:8A:53:E7:C5:4F:F6:EE:B4:D5:16
            X509v3 Authority Key Identifier:
                keyid:3F:B5:BE:3D:DD:AE:61:4B:E9:D1:E6:2E:80:98:36:E2:30:2E:71:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P7W-Pd2uYUvp0eYugJg24jAucRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE001/84ED8AA074B611EF988AF3B6762E951A/P7W-Pd2uYUvp0eYugJg24jAucRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:8c:4a:14:2c:93:53:b5:81:6f:c3:94:1f:2e:20:5e:2d:
         f7:ab:32:f7:ff:fc:26:a5:d6:da:81:5f:a1:b5:e5:c1:5e:d2:
         89:7d:04:d3:ea:a7:93:37:7a:d9:39:72:e6:5f:29:e0:ff:60:
         6d:4f:98:39:ce:47:35:2c:e5:32:a8:da:0f:66:47:bb:a0:e5:
         38:55:2a:4c:7d:60:2a:d7:7e:a4:80:95:d3:a1:b4:79:f5:94:
         17:8c:cc:89:9d:fc:fd:3a:b7:33:0d:33:83:b1:91:d7:31:31:
         39:ef:6e:67:74:db:cf:13:cd:58:28:ef:06:69:54:07:b3:cf:
         2a:dc:50:ac:79:41:25:10:9b:d7:60:b5:22:f4:10:dd:7b:8c:
         3b:06:9f:5f:6b:3a:fc:17:e2:88:2e:b1:7f:58:65:ec:b2:33:
         cc:06:cb:0b:27:8f:c4:eb:8c:e1:b9:b7:d6:8b:7c:96:30:7b:
         4c:52:4f:d7:62:6d:41:8e:13:df:b0:a0:ae:0d:9e:6d:95:16:
         ed:1a:65:e9:44:31:31:62:9f:0b:68:c9:43:36:3e:30:08:ec:
         0d:14:a2:44:27:08:7b:0c:ed:fd:17:a7:62:49:69:9b:e1:ce:
         33:0f:50:c7:67:af:ae:58:cf:d5:fb:ac:9f:e2:fe:1a:3d:90:
         f0:93:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:53:42 2026 by rpki-client