This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
File:                     v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft (raw, json)
Hash identifier:          hqU7HDHXkqKtLkYhLp6m5ASugBEg311hlneDyAFNDas=
Subject key identifier:   E3:C1:D7:72:14:0F:E7:6E:53:D9:DA:DB:91:0A:BD:56:78:04:27:5F
Authority key identifier: BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87
Certificate issuer:       /CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
Certificate serial:       0667
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
Manifest number:          0666
Signing time:             Mon 08 Dec 2025 02:17:45 +0000
Manifest this update:     Mon 08 Dec 2025 02:17:44 +0000
Manifest next update:     Wed 10 Dec 2025 02:17:44 +0000
Files and hashes:         1: v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl (hash: n7x7OFDS5G89PagOau9G6FOXL74NEAkZI0rxud1Sx1c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639 (0x667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691764AF, serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
        Validity
            Not Before: Dec  8 02:17:44 2025 GMT
            Not After : Dec 10 02:17:44 2025 GMT
        Subject: CN=69363549-1bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:a7:16:c5:c9:93:c3:1f:0d:de:b9:f6:05:
                    2b:b7:93:6a:b4:3e:bc:0d:2f:09:05:25:8a:06:12:
                    4e:97:a2:82:07:21:b1:6e:1f:45:fd:75:03:42:74:
                    dd:bd:a1:3e:cc:7e:40:17:95:fc:f1:4f:ce:2d:90:
                    b3:98:87:4a:6c:ff:2b:74:c4:08:4d:3a:58:e4:bc:
                    1b:3b:a6:fd:3f:0e:ab:f6:0f:2a:54:d7:a1:15:5b:
                    d7:ee:02:f4:17:e0:c7:71:55:ad:93:16:2e:c9:6d:
                    07:f5:d0:eb:2c:0d:97:aa:1d:fd:90:53:7f:45:b2:
                    a1:8c:bf:9f:07:6c:77:31:8f:4b:df:8d:d5:5c:75:
                    56:4d:01:e8:55:8b:91:a7:f4:04:f3:7b:71:9b:84:
                    8d:90:ec:61:e4:b3:1c:35:be:f5:b4:1a:cf:09:81:
                    a7:b8:74:11:ad:60:27:4f:26:a6:a8:dd:50:6b:7a:
                    64:20:c8:0d:16:80:05:85:ae:08:86:be:2e:0e:5a:
                    53:1f:e7:2a:b9:a1:f4:ad:40:26:30:03:66:41:b4:
                    21:8e:49:f0:c0:43:f2:e2:75:f7:53:94:22:ce:9a:
                    67:0e:ea:ac:2c:82:ae:be:d9:a6:cd:c4:46:ea:d5:
                    db:37:89:a3:0e:a6:1f:d5:12:00:f6:cc:c9:d3:a9:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:D7:72:14:0F:E7:6E:53:D9:DA:DB:91:0A:BD:56:78:04:27:5F
            X509v3 Authority Key Identifier:
                keyid:BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:7b:b8:99:a2:d3:92:2f:32:a9:3d:5e:2a:7b:be:b6:4e:77:
         14:13:9e:fc:69:98:ae:1f:0e:22:0c:5d:d4:fc:3f:13:b8:e7:
         bd:6d:5b:5d:41:ac:5b:48:e9:dc:69:98:63:a8:41:97:d9:d1:
         bd:18:6f:95:3f:c1:cd:92:8c:73:24:5b:cb:83:73:0d:98:7c:
         60:ff:70:80:05:a6:41:1f:b4:f8:15:98:a6:83:f8:9f:c1:87:
         de:9b:14:96:2b:94:3e:65:7a:f1:a2:9f:ab:0f:e0:02:ba:f2:
         aa:64:9a:83:50:63:ce:19:5a:c5:d2:e3:06:1f:6e:24:e9:37:
         04:4e:3b:f7:52:ec:83:ad:ee:bd:76:6e:e6:9a:b3:a8:ab:b4:
         c9:e1:b1:82:d3:2e:2c:97:c5:e7:18:4a:36:6d:56:c8:86:42:
         3c:77:7b:9e:af:e3:b7:67:1c:76:68:a4:83:70:e2:c5:51:55:
         fa:e6:e1:e8:7b:34:20:33:4f:02:75:a0:79:e4:18:03:10:2c:
         8a:a4:c5:6d:8b:86:1f:d2:a7:3d:c7:42:15:1d:35:cd:55:d6:
         59:bc:cf:b9:e5:54:8e:a7:09:cb:83:c6:88:8e:33:50:6b:c4:
         4d:b3:ae:18:f0:15:2c:48:57:8a:39:55:7b:66:97:da:82:03:
         a5:8f:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:08:57 2025 by rpki-client