This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
File:                     7cVihK_vMTf8afnaeD_pzHg6baw.mft (raw, json)
Hash identifier:          dA/yxFMkY9x54uMfn4yXPqfXsyMcacmEUiim1FBpQrw=
Subject key identifier:   EE:3C:F0:24:AC:88:7A:07:B1:B0:08:65:BD:D0:C2:6A:B7:4A:0F:21
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       086F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
Manifest number:          086D
Signing time:             Sun 28 Dec 2025 01:50:46 +0000
Manifest this update:     Sun 28 Dec 2025 01:50:45 +0000
Manifest next update:     Tue 30 Dec 2025 01:50:45 +0000
Files and hashes:         1: 7cVihK_vMTf8afnaeD_pzHg6baw.crl (hash: v81hklo4cQK0btRoSZbxK+bGy9dumaylIyQwzUBMbIA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF, serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
        Validity
            Not Before: Dec 28 01:50:45 2025 GMT
            Not After : Dec 30 01:50:45 2025 GMT
        Subject: CN=69508cf6-8a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a3:bb:6a:52:73:c7:d9:75:55:e8:bf:13:f6:
                    a6:26:ad:f2:b5:18:1e:c9:0b:15:1f:8c:9a:4c:0f:
                    08:55:3c:8c:66:65:27:b0:f7:2f:79:9f:95:eb:01:
                    d7:1f:76:8a:69:81:4b:ef:f9:bb:c3:16:06:82:4f:
                    8b:cc:c6:36:03:f2:36:a4:5b:a4:d3:fd:2d:44:3f:
                    9c:b2:be:a3:de:de:54:ab:80:f5:fe:59:ff:ef:38:
                    ef:fc:43:58:fd:f3:ae:ea:ba:18:57:a3:b7:b2:68:
                    a0:26:12:d0:78:c2:b3:c7:7c:a9:ce:9f:8c:e7:96:
                    18:d5:75:d3:16:09:64:a6:11:1a:fa:d6:a5:3a:7a:
                    ae:79:f0:59:99:be:67:68:9e:aa:f5:9e:70:e8:00:
                    d9:2a:4e:12:0a:d1:69:25:ce:c6:41:2a:f0:73:90:
                    ec:77:41:b4:8b:23:3f:58:95:7e:07:66:e6:21:ab:
                    32:e4:20:b9:c0:8d:47:86:02:fe:e1:e1:67:fa:f4:
                    86:cb:a3:d5:a1:09:26:14:c9:2b:81:f3:db:8c:2d:
                    03:2d:c0:0b:6e:cf:b3:fe:fc:87:09:23:4e:5f:43:
                    7a:89:ba:72:fa:ee:68:98:ca:09:bf:75:96:04:94:
                    02:01:72:eb:43:38:f0:4a:0d:5f:94:4e:e6:6c:f0:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3C:F0:24:AC:88:7A:07:B1:B0:08:65:BD:D0:C2:6A:B7:4A:0F:21
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:09:55:93:4c:7c:81:e0:98:d4:ff:05:1b:72:72:4c:75:
         34:d1:94:cd:c5:c7:39:47:86:06:ed:77:50:10:b8:f4:9f:e9:
         34:8b:1f:0f:20:49:ce:68:47:5d:cc:44:3a:ee:c2:1e:02:0a:
         b8:a0:ff:8d:07:4c:fb:af:bd:bc:d4:65:56:04:4a:76:22:5e:
         b6:a0:d7:53:4f:b8:96:09:40:86:31:8c:48:ee:c0:09:91:61:
         88:fc:fb:10:12:78:7c:aa:a3:bc:87:f0:18:ac:89:55:87:52:
         4c:0e:95:f9:ee:a5:2d:af:3c:a3:c2:ab:dc:2c:2e:9f:14:64:
         26:2a:6a:c1:fa:a6:cf:d3:1e:54:7c:97:ef:72:06:0e:dd:da:
         88:0c:08:3c:98:3d:a6:dc:6d:a4:9c:0f:58:46:88:91:c5:71:
         e4:3e:08:d9:e9:42:2e:84:fc:0d:d1:c0:d1:58:1e:05:b4:49:
         44:50:79:66:cd:77:8d:34:6c:ea:c5:12:0a:99:77:00:8a:01:
         d5:0c:f0:96:ee:2b:ad:ef:99:7d:e3:65:80:65:e8:49:f1:d6:
         36:58:d4:0a:7f:68:fe:d5:4c:55:76:e2:f0:2c:15:d2:ac:ee:
         30:22:2c:6b:75:87:58:de:34:ae:03:61:1a:f6:e5:f2:e5:9c:
         34:ee:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 08:09:07 2025 by rpki-client