This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
File:                     ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft (raw, json)
Hash identifier:          ggq5vApg39ZuwtLLZorYbG1bvlnR8zHQzZMZQ2LOLd4=
Subject key identifier:   3C:36:50:71:70:B4:10:70:44:19:8B:8D:50:9D:10:71:31:02:3A:6F
Authority key identifier: 64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
Certificate issuer:       /CN=F367B560AF/serialNumber=646FCDF8F4A278A08EAB347BC5B2BAF9AF6BF064
Certificate serial:       0457
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
Manifest number:          0456
Signing time:             Sun 21 Dec 2025 03:10:28 +0000
Manifest this update:     Sun 21 Dec 2025 03:10:27 +0000
Manifest next update:     Tue 23 Dec 2025 03:10:27 +0000
Files and hashes:         1: ZG_N-PSieKCOqzR7xbK6-a9r8GQ.crl (hash: 1fPqwqbW4Q3oLT98LftiiJEZhA8EtZMnQnMGDnQ7F7E=)
                          2: C6A0ECC2934311ED87F36E92F1222468.roa (hash: dbr+kLrAwWa2cBy+XTM27d2TWkBTRedrZivGl3lEoFg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B560AF, serialNumber=646FCDF8F4A278A08EAB347BC5B2BAF9AF6BF064
        Validity
            Not Before: Dec 21 03:10:27 2025 GMT
            Not After : Dec 23 03:10:27 2025 GMT
        Subject: CN=69476523-a2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:96:a3:08:96:42:8b:1a:bd:1e:a5:d1:33:
                    ae:a4:90:b4:c8:9e:1e:66:d5:5a:64:b7:2f:6b:2c:
                    ff:1e:09:e9:6f:e8:3b:17:8f:23:88:63:cb:8d:a5:
                    b7:37:19:5f:53:c3:f1:98:76:f0:1f:e7:d7:82:9f:
                    8a:69:ec:3a:64:e4:e9:90:b0:a6:05:29:0a:a1:d2:
                    3f:26:58:50:b5:21:45:9f:97:8d:bb:e0:aa:60:1c:
                    07:8d:2a:b3:65:14:20:d0:57:bd:c3:2b:e8:89:fc:
                    7c:a0:8a:55:77:15:34:99:67:31:70:d9:9c:74:5b:
                    6b:fc:83:6c:c3:0a:d0:3f:c3:e8:20:48:fb:aa:09:
                    02:d8:85:db:bf:d4:b2:e6:92:6a:c3:d6:c9:78:7a:
                    b1:da:98:f9:c0:54:ef:87:74:72:a6:58:76:d3:2f:
                    53:2f:e3:33:4a:61:7f:9f:c1:86:60:af:92:8f:59:
                    73:4a:89:56:3d:e3:43:e5:e6:2c:f0:82:5e:85:8c:
                    85:d5:f2:33:b7:02:a0:cc:35:b9:ea:e5:c6:85:79:
                    c8:c8:2b:4c:f6:97:d8:1b:fb:f8:47:9e:d3:f5:b0:
                    f9:1c:ac:84:12:f4:3e:f2:fb:17:e7:1c:36:f5:c7:
                    99:fb:a4:09:79:0f:d4:ca:a1:bd:9b:67:7c:a6:28:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:36:50:71:70:B4:10:70:44:19:8B:8D:50:9D:10:71:31:02:3A:6F
            X509v3 Authority Key Identifier:
                keyid:64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:06:32:74:42:ea:3e:17:63:8d:d7:b6:13:dd:3a:a7:65:
         c1:5b:fb:1d:53:84:49:b2:5c:87:9f:4b:c6:d6:de:78:35:4c:
         5a:a6:21:af:ab:42:ec:0f:7e:34:4e:ad:47:d2:fe:3f:2b:da:
         26:cf:55:10:09:8d:7c:ca:20:ba:c5:d6:2a:d5:4e:b1:91:1b:
         86:1c:d4:ba:97:c4:99:15:51:97:f4:a5:d9:51:12:0d:59:51:
         8d:b6:d3:ef:78:24:d4:ed:bb:ef:d9:68:2f:ff:39:47:fb:29:
         6e:f0:f5:11:e3:34:51:69:c3:66:ab:d2:4d:aa:fc:7d:bb:e0:
         e3:7c:49:39:1b:15:eb:7f:57:3a:02:da:93:d3:02:0a:bd:f4:
         68:ff:c0:e0:77:91:be:af:f6:4c:06:f1:83:32:de:e4:7a:e6:
         56:73:9d:9e:2c:ed:90:e2:be:66:f2:06:d0:b9:9b:f3:f1:63:
         a5:91:8d:cc:1a:61:de:1b:6d:15:e5:92:f1:68:14:c5:62:d9:
         0c:42:ab:21:ec:bf:8d:de:f0:1f:5e:bb:f2:05:d5:fa:32:b8:
         3a:27:c5:13:17:29:5c:07:9a:4d:5a:8a:65:b2:2a:45:2f:1d:
         33:d1:cb:33:7b:10:16:d4:9d:9e:ce:ae:ec:6d:3f:ad:f3:c6:
         37:cb:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:00:55 2025 by rpki-client