This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
File:                     v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft (raw, json)
Hash identifier:          /SDBEBxG3A7EqdfVYafEb9n0r1p7EqK7tcEsJ+LINtk=
Subject key identifier:   64:89:27:A1:37:70:4D:E0:B0:8B:AD:45:FE:6D:A0:A2:63:21:9B:21
Authority key identifier: BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87
Certificate issuer:       /CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
Certificate serial:       0668
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
Manifest number:          0667
Signing time:             Tue 09 Dec 2025 02:18:14 +0000
Manifest this update:     Tue 09 Dec 2025 02:18:13 +0000
Manifest next update:     Thu 11 Dec 2025 02:18:13 +0000
Files and hashes:         1: v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl (hash: nnYkrh9ZaUUSuraYdRvF1+Zw6sH7hUl8+fIXNdDPGxc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691764AF, serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
        Validity
            Not Before: Dec  9 02:18:13 2025 GMT
            Not After : Dec 11 02:18:13 2025 GMT
        Subject: CN=693786e6-ec8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:15:00:bf:4c:4f:b8:c1:8d:b7:7a:ba:ee:
                    6c:19:dd:91:16:4b:a1:0d:6a:19:22:d3:f8:79:1d:
                    90:c7:72:1a:34:e8:c7:56:c1:ce:dc:b7:35:96:12:
                    3d:8d:ff:6e:c6:70:ea:3a:1e:35:59:c0:61:2a:1a:
                    7a:8e:d5:79:f6:87:a3:a0:de:e9:0d:b1:a3:7a:b8:
                    28:4f:28:4c:84:b5:5e:8f:3a:00:9e:97:49:d8:ee:
                    d6:83:82:5a:fc:02:b1:28:44:ed:9d:38:54:31:fe:
                    c7:ab:ca:51:4b:c8:5a:23:6d:48:00:4a:bf:46:4c:
                    de:07:02:64:5d:20:04:27:05:bf:14:90:b1:ed:89:
                    79:03:b6:ca:2e:8d:3b:68:73:15:4d:86:77:3e:2a:
                    33:23:ca:28:43:19:28:56:d8:15:ce:db:13:b4:09:
                    9e:ab:82:06:96:20:59:7e:b8:a6:6b:ca:5a:ab:f8:
                    f7:d0:43:a4:1a:c5:89:ed:d1:bf:be:26:5c:72:7a:
                    1d:fe:54:20:a5:9f:fb:ca:1b:3e:fe:65:ae:0e:6e:
                    31:9a:c5:c0:c6:e4:0a:20:f9:a6:17:da:f3:94:7d:
                    f2:36:d6:8a:e2:14:91:fa:2d:26:dc:64:d8:e4:91:
                    4b:d3:ee:69:b5:0b:16:66:d3:60:93:08:cc:33:5f:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:89:27:A1:37:70:4D:E0:B0:8B:AD:45:FE:6D:A0:A2:63:21:9B:21
            X509v3 Authority Key Identifier:
                keyid:BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:58:6a:2f:98:b5:27:c0:b3:1a:23:3e:a8:bb:f3:3a:5a:
         19:02:15:b0:d8:3a:9b:b6:39:12:e2:b7:4d:ce:1d:3a:37:eb:
         3d:e2:47:29:66:9c:7c:09:2e:c4:ba:88:bb:94:e4:33:58:48:
         6a:50:a2:77:49:f9:6d:9a:19:fd:df:b7:1a:99:0d:dc:5c:38:
         67:6b:97:4e:ce:d8:04:e7:f8:eb:53:c9:56:ec:da:32:fa:d7:
         fd:b3:12:53:8e:8e:74:b5:e9:e2:48:78:06:e6:65:db:cc:24:
         1f:8a:0d:ec:8a:ff:6e:72:b2:5a:1b:08:40:a7:2c:61:c5:a6:
         42:68:dc:d1:8c:5b:ff:6c:98:b6:38:3e:6a:1a:3b:34:41:2c:
         0d:97:6d:b0:83:a0:d6:6f:74:c8:cc:26:5f:2c:a5:bc:8c:42:
         b1:df:26:fd:bd:b5:dc:13:90:86:02:06:b9:35:46:a3:10:db:
         04:f5:c3:40:e1:cf:94:60:d6:10:45:98:9a:8e:41:85:d1:22:
         60:b0:15:12:b2:4b:3f:a7:6a:3e:c6:08:29:cf:b7:4d:6e:b7:
         5b:c0:12:1e:39:8e:43:4b:eb:61:67:6d:a7:15:6e:e7:d6:22:
         b2:cf:6a:6f:99:d9:60:4e:a8:f1:df:07:40:bd:5a:87:ec:1c:
         0a:73:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:20 2025 by rpki-client