This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          RlwmUoqHUZmtLDk8Lt6mmKEesq3c9JVTFcF3qcZWj8I=
Subject key identifier:   FF:DA:DA:BD:92:F0:43:F2:A2:B8:F5:9A:ED:18:61:7D:9C:54:DC:59
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       020E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          020A
Signing time:             Tue 09 Dec 2025 04:25:06 +0000
Manifest this update:     Tue 09 Dec 2025 04:25:05 +0000
Manifest next update:     Thu 11 Dec 2025 04:25:05 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: 9G1n0MDxHdy61V8+/nJ6B78gACL4eYPZhl2BSZ0itrM=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Dec  9 04:25:05 2025 GMT
            Not After : Dec 11 04:25:05 2025 GMT
        Subject: CN=6937a4a2-cb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:17:4b:c0:d2:e8:13:3a:88:0e:26:be:78:
                    ae:c8:2f:60:39:0e:23:35:44:81:e9:1a:1a:0e:cb:
                    eb:1c:3a:18:e7:ef:57:5a:d2:5d:59:90:b9:cc:0a:
                    f3:9a:1a:f1:ad:9d:8b:9e:82:c1:e5:a4:d9:72:d3:
                    37:67:ee:eb:f5:ad:ea:26:c6:2f:c8:9a:3e:16:d7:
                    44:d9:83:53:66:0a:b6:51:fe:27:7b:56:36:26:f3:
                    80:65:d8:9d:00:da:9a:49:b1:42:4d:a6:d4:96:19:
                    0f:a7:2f:25:e8:6b:6d:79:18:b7:32:11:93:c8:c9:
                    6f:aa:29:18:e7:94:e5:09:52:92:e3:12:89:af:77:
                    3e:60:ed:e4:78:97:b7:1c:01:62:d8:2e:c4:e2:b1:
                    14:c0:77:15:cd:ab:f4:22:30:ac:c5:2e:0e:d5:33:
                    14:bb:a4:d0:b8:31:87:7a:6b:bd:55:50:d4:95:49:
                    17:f4:6e:f4:0a:af:d8:be:71:35:05:44:ba:0f:9a:
                    5c:9f:62:94:f5:ef:4a:69:e0:bd:23:74:a4:4d:17:
                    33:c6:10:5a:b0:24:1f:d3:89:dc:0f:0a:11:7a:5b:
                    56:70:ca:8a:f5:4d:eb:5f:db:94:f8:b1:89:15:27:
                    c6:98:6e:e8:c7:1d:bf:7d:a6:19:c8:19:7e:b0:57:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DA:DA:BD:92:F0:43:F2:A2:B8:F5:9A:ED:18:61:7D:9C:54:DC:59
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:f1:41:8d:09:b3:44:db:9d:9a:e4:12:c9:89:5c:d3:e2:
         58:01:0c:5a:2c:46:59:55:bb:09:d7:a3:32:3b:99:0c:0c:57:
         cc:5d:4e:10:4d:5c:bc:64:59:40:1c:a8:ff:6f:dc:0e:ed:88:
         6b:7f:a7:b6:c1:e6:e9:61:9e:9c:dc:1d:bc:8c:35:ae:0a:ed:
         29:97:53:8d:e9:29:fe:07:9c:67:3d:da:df:3d:f5:b5:1d:a6:
         6c:7b:b2:73:22:d5:da:22:ca:4f:d8:60:64:82:0a:e9:54:48:
         7e:23:84:88:58:79:e7:0d:31:cb:0f:58:e6:13:bc:ad:d1:15:
         c0:a0:54:4d:78:a6:1e:e6:36:8f:a4:ef:ec:ff:cd:ce:d1:24:
         d3:0e:37:86:93:84:19:b9:99:29:66:cb:67:d4:fe:3e:41:b7:
         b3:26:d9:16:da:07:b1:3c:bc:75:04:85:6b:e3:09:31:f8:34:
         f0:5e:58:38:cc:e4:9c:6f:9f:4b:2c:3b:bb:0e:8e:4d:59:a8:
         0b:d8:96:db:ec:30:e5:d8:bd:cb:71:b6:6e:9f:5f:9b:2b:d7:
         7d:2e:00:04:fc:d2:5d:1d:73:97:4c:9c:f0:d5:92:af:30:0d:
         d8:75:88:52:d8:93:ff:8b:8e:af:42:ff:38:b4:56:f4:13:6e:
         41:d0:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:20:14 2025 by rpki-client