This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          v3v3LFvz3WfFn+cpCTWf6wA0FMpiLEjEUfc7EOGmugs=
Subject key identifier:   72:2F:1D:8A:7E:74:E5:A1:D5:B6:E8:45:CF:DC:F2:7F:83:63:55:FE
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       0848
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          0846
Signing time:             Sun 21 Dec 2025 01:46:51 +0000
Manifest this update:     Sun 21 Dec 2025 01:46:50 +0000
Manifest next update:     Tue 23 Dec 2025 01:46:50 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: lhQ2SlCaf/gIlQBuPIeHOH30z5MpWe99xO1c7W1iga0=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 01:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
        Validity
            Not Before: Dec 21 01:46:50 2025 GMT
            Not After : Dec 23 01:46:50 2025 GMT
        Subject: CN=6947518b-a206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:3c:2c:85:54:cd:26:b7:f3:0d:29:18:43:
                    b2:18:88:b2:71:82:cd:11:b5:ea:5c:a4:8a:0b:94:
                    06:2a:b4:ec:63:5b:9b:df:23:6d:70:49:bf:08:f4:
                    14:dd:78:b5:ca:a3:4e:aa:f7:f0:ff:0b:6e:74:cf:
                    23:1b:87:17:6e:e7:5e:75:95:be:58:4b:e5:a0:ff:
                    bb:bc:30:38:ff:f7:34:ec:6b:31:c1:ce:f1:9f:e4:
                    06:d4:ca:7e:8d:48:9b:ca:aa:16:18:34:8a:81:7d:
                    a5:5f:77:99:39:d4:b7:66:3b:0c:8f:73:e4:63:cc:
                    b9:90:36:85:a7:8e:72:40:95:d3:90:dd:ea:c3:83:
                    70:e6:17:ad:50:d2:c3:cf:01:09:ac:06:81:ba:c2:
                    49:6b:60:46:e2:13:0e:83:63:c6:c4:e8:00:0f:19:
                    2e:93:43:c3:b9:77:a5:aa:a0:9e:4a:00:6e:e0:9b:
                    94:05:0a:b5:ea:ce:8a:a4:5d:95:70:0e:c8:db:6b:
                    1f:39:37:23:25:fc:cd:ba:7f:80:71:11:0d:c7:00:
                    0f:1a:9c:77:2c:b2:cb:1c:01:22:81:e8:7e:51:15:
                    d0:41:88:17:d3:ae:51:bd:bb:c7:1f:53:28:39:10:
                    50:6a:e1:f6:2c:1c:65:f6:97:44:84:21:b3:62:78:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2F:1D:8A:7E:74:E5:A1:D5:B6:E8:45:CF:DC:F2:7F:83:63:55:FE
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:6f:28:0f:b1:f5:e8:18:31:71:40:5a:c1:53:a1:76:5a:
         cc:cb:d8:75:3d:8d:ac:f4:5e:9c:9b:77:01:e9:55:ef:6a:04:
         ea:ef:9d:8c:2c:b0:35:9b:69:36:15:a2:9f:97:34:66:22:e2:
         bb:1b:6e:ec:8b:5b:45:70:64:e1:8d:28:e5:a9:08:aa:58:51:
         d9:72:d8:83:dd:18:de:a1:3f:ab:f2:6b:db:6e:de:3d:2b:75:
         ca:ce:ad:f1:c5:7e:a0:d7:6d:63:fd:11:d4:06:d8:1b:75:95:
         98:a5:c8:4c:7e:b5:2b:f8:88:62:a3:3c:16:92:40:8f:36:8a:
         67:62:57:eb:cf:43:8e:99:4d:70:ae:60:c1:d2:25:99:cd:a0:
         4b:2e:2f:85:38:17:7d:a1:49:2c:4d:91:7b:fa:e7:96:32:bf:
         00:31:c8:31:ea:31:0c:41:6a:83:15:dd:48:41:c3:21:82:40:
         ce:bf:08:73:b5:30:bd:df:ba:a6:89:61:57:b4:7c:d0:2d:b9:
         17:bc:74:cb:55:0a:47:76:b9:34:53:e0:55:9c:bc:52:b4:95:
         3b:a1:cd:de:83:96:ba:d9:27:2a:2d:b8:cb:13:64:45:ce:94:
         8c:1c:8b:b5:2b:22:37:39:3d:3e:9c:e9:dd:8f:10:5c:30:22:
         b8:6c:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:03:09 2025 by rpki-client