This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File:                     7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier:          lVmcf4QhnLFbZqefACUtBqMY2VX22Y54OuoF5/brGgk=
Subject key identifier:   24:84:D0:EC:B8:32:6E:69:49:27:CE:4C:C7:2E:A3:70:FC:B1:08:71
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer:       /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial:       03B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number:          03B4
Signing time:             Tue 09 Dec 2025 03:29:49 +0000
Manifest this update:     Tue 09 Dec 2025 03:29:49 +0000
Manifest next update:     Thu 11 Dec 2025 03:29:49 +0000
Files and hashes:         1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: f0O8BBDMIQ+xedHLSZw0LIU92DnkxpjfKYwZ7GvOKXc=)
                          2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
                          3: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
                          4: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
        Validity
            Not Before: Dec  9 03:29:49 2025 GMT
            Not After : Dec 11 03:29:49 2025 GMT
        Subject: CN=693797ad-7a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:f1:f2:e4:22:bb:5b:3f:b5:85:a5:2a:b8:
                    85:3c:8b:45:a8:17:d6:df:8d:0b:10:48:ed:b8:44:
                    c5:c1:0f:c6:e2:8a:c1:58:c9:2a:17:ed:15:20:d2:
                    de:1a:38:81:5f:54:87:c8:2c:4c:ff:f1:c0:90:2b:
                    cc:d4:08:2e:14:8b:3b:0f:69:45:66:c7:2b:38:7a:
                    71:49:af:10:71:cb:e5:31:61:3e:e3:35:94:4b:08:
                    25:f9:6b:f1:25:6e:a8:5b:6e:3a:b3:d7:f9:fb:ca:
                    e0:b9:a9:bf:78:5c:85:f8:59:da:4b:ef:fb:07:6a:
                    7c:da:05:00:80:ae:53:6a:b0:42:29:94:c8:56:52:
                    8a:ca:b7:91:0b:4c:29:e0:cc:16:f3:51:62:4d:ac:
                    22:fa:0d:e3:11:02:09:78:c0:f9:6e:12:81:28:59:
                    59:56:42:b3:16:f4:df:34:d7:f2:bb:60:b7:ab:67:
                    9c:9c:6b:15:22:64:90:7d:f9:d4:b7:96:33:a8:30:
                    10:df:eb:c4:68:52:cb:a1:7b:2c:e3:78:42:93:57:
                    f5:09:f4:e2:1c:cf:f6:80:5e:d8:a9:d4:b3:a2:9c:
                    8d:20:72:e8:02:a5:06:da:7f:54:8f:92:27:bc:36:
                    04:fa:e7:8f:ed:c5:8b:2e:07:e1:87:63:1b:62:70:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:84:D0:EC:B8:32:6E:69:49:27:CE:4C:C7:2E:A3:70:FC:B1:08:71
            X509v3 Authority Key Identifier:
                keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:81:86:31:95:ef:df:29:6f:5b:be:38:fb:d6:06:09:ee:ac:
         9b:1a:c6:c8:45:19:ad:87:9c:40:a3:64:0b:59:26:2b:3a:76:
         87:ea:a5:b7:c3:e1:7a:0d:f9:98:df:af:4b:6b:5d:c7:90:e6:
         43:14:87:e8:17:f7:4b:4d:db:2f:88:f4:3c:ec:d1:a0:81:0a:
         14:9d:79:a7:ad:11:b7:bf:34:96:66:68:37:38:5f:a6:2a:1e:
         b4:e8:02:ea:e3:07:6c:ef:c2:10:23:f2:04:bb:5f:ca:34:f9:
         ad:86:0f:c4:21:c4:fa:b2:00:f9:b6:86:81:92:08:3e:29:33:
         b7:24:cc:16:8a:08:86:e0:f2:06:64:01:aa:13:f8:5c:32:24:
         00:93:4e:5e:83:de:dc:a5:e8:6b:5e:d1:2a:01:23:02:73:5e:
         f1:e5:1d:55:be:8a:d6:ef:23:d4:e2:e1:af:d5:5c:0d:af:ff:
         c0:76:38:18:ff:df:7e:b3:88:f3:d7:ab:f8:4d:1b:84:f4:80:
         c7:b7:e0:17:d5:a1:cd:c0:5f:7d:f8:ad:3f:4d:23:b6:72:54:
         c5:70:c9:e6:e2:1f:e6:56:fe:4d:39:00:7e:92:af:a4:5a:f2:
         5c:a9:16:f0:3b:24:91:91:7f:53:d2:94:63:f1:dd:07:87:36:
         e4:bb:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:10 2025 by rpki-client