This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          n5SNFjPTGgi/K2Jj9xgxfZVNkiHEDeGRL0QfXBWgVk8=
Subject key identifier:   51:08:6F:E3:C6:51:EB:8E:C0:08:61:37:12:6E:E7:B5:B8:7B:54:A1
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       0839
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          0837
Signing time:             Sat 06 Dec 2025 01:47:29 +0000
Manifest this update:     Sat 06 Dec 2025 01:47:28 +0000
Manifest next update:     Mon 08 Dec 2025 01:47:28 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: zjjPFdcrByVnNrM5NTBvOjUiP0zZ3z0xzKGIjiY4M1M=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 01:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Dec  6 01:47:28 2025 GMT
            Not After : Dec  8 01:47:28 2025 GMT
        Subject: CN=69338b31-0ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:d5:a7:67:ed:27:fd:dd:de:53:b7:0e:43:
                    0f:12:8b:7c:58:90:a7:2f:72:e3:9f:11:6f:c0:6b:
                    c3:df:2e:75:78:8b:bd:ff:0e:63:8d:42:bf:e8:de:
                    60:da:cd:32:33:56:76:b1:e9:ba:d0:04:af:01:61:
                    38:b3:f7:f9:90:42:4c:c3:bb:a8:12:95:ea:82:50:
                    65:62:d1:85:ae:fe:47:82:ef:63:c3:06:98:85:33:
                    90:bb:c6:44:33:ff:1d:aa:1d:1b:35:e4:d7:9d:29:
                    26:47:a7:13:8a:2c:aa:03:e4:2d:d2:07:5b:4c:ed:
                    4d:b4:b2:be:58:3c:c6:ce:d8:d5:9b:f3:f5:aa:39:
                    0b:1b:8b:5f:4a:a8:ad:bf:25:5c:88:6f:19:ea:15:
                    ef:4d:70:ff:d2:66:50:d9:d8:8d:8d:85:e1:d2:6d:
                    6c:37:36:33:59:48:a9:27:89:fc:07:24:7d:e3:9f:
                    9a:e6:42:10:ca:f5:e8:eb:8b:3d:c0:86:c5:25:97:
                    b9:63:9f:53:fc:ac:bf:87:13:88:ef:13:da:93:3d:
                    25:10:1c:ce:b7:e4:20:c4:3f:9d:2f:83:37:84:15:
                    b3:f7:18:b8:94:05:61:a7:53:dd:6d:00:e7:5c:c7:
                    e3:83:99:d1:0c:b0:e4:b1:70:c8:25:99:41:36:68:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:6F:E3:C6:51:EB:8E:C0:08:61:37:12:6E:E7:B5:B8:7B:54:A1
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:11:b5:de:a2:a5:f5:0f:19:e1:9a:4c:c0:c9:a6:e8:79:61:
         d0:a4:2b:7e:c2:5e:75:80:d7:6f:30:ca:ee:19:56:94:24:24:
         5e:72:b3:df:50:30:c8:ca:58:51:aa:3b:2f:52:b5:54:31:65:
         a9:55:6c:a8:d5:7c:3b:fd:94:8b:a6:50:6a:26:44:0b:c4:f1:
         89:0a:90:c7:8f:a5:0f:f6:3e:cf:ad:78:b1:d7:50:d5:76:8a:
         12:fc:fb:a2:c4:f5:51:ab:87:f8:ed:af:da:cd:d2:a4:11:39:
         70:57:0c:aa:27:ec:a5:04:1b:09:37:61:cf:3d:75:35:b8:42:
         e5:7a:46:85:0d:b6:d9:5c:38:3a:47:4f:1c:c1:bc:60:79:02:
         02:f8:de:dc:e1:f5:c5:a8:52:42:47:06:bd:3d:5d:72:f4:03:
         b8:d5:73:fa:2d:0e:cd:a1:1b:46:44:da:6d:d5:70:1b:41:7b:
         d3:e3:ea:8d:37:d7:a7:cd:90:4b:1a:7f:1c:95:65:3f:8c:48:
         a6:fe:8b:07:1e:33:17:e0:68:e2:70:94:e0:02:ab:7c:25:96:
         a0:1f:63:f5:db:27:c5:1b:b9:6a:b7:19:d4:a5:44:46:96:fb:
         1f:8a:29:f0:e9:87:93:ac:45:7f:52:4b:9b:eb:ea:d8:01:5b:
         50:bd:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:42:17 2025 by rpki-client