This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: v/hoLb+nN8QmRgeSdP+yCPmDCSR5euxnlj6uZMpWxtc=
Subject key identifier: 84:22:16:88:D3:AE:FA:57:9F:FB:C8:B7:20:43:E0:4D:7B:F4:43:1A
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 5A
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C7
Signing time: Thu 20 Nov 2025 09:20:16 +0000
Manifest this update: Thu 20 Nov 2025 09:20:16 +0000
Manifest next update: Sat 27 Dec 2025 09:20:16 +0000
Files and hashes: 1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: vGHaAWaa4/CIqmVhezc1LAVzcocPTE13vHiDNrcpz7c=)
4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Dec 2025 09:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Nov 20 09:20:16 2025 GMT
Not After : Dec 27 09:20:16 2025 GMT
Subject: CN=691edd50-27bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:b0:88:c6:fb:a1:d5:d2:a3:49:b5:b4:14:
12:8d:e5:eb:6f:00:aa:a0:e9:89:c3:a1:25:ee:18:
f4:4a:02:6d:20:11:26:31:d8:a6:be:d4:5c:41:9d:
4e:52:31:cf:ff:8e:b1:8b:58:4c:bc:6b:4d:6b:3f:
4d:02:32:fd:2f:e8:00:b7:fd:e9:57:94:4b:64:67:
00:a3:9c:fa:39:57:37:f8:79:6d:f1:16:78:ff:76:
6b:e6:d2:96:6c:bd:22:ee:9b:e5:78:0f:dd:78:6b:
ee:60:d4:e2:54:32:85:fb:5a:66:83:88:6b:2e:1e:
04:0a:e7:ce:7c:00:0d:6b:4a:10:41:10:aa:28:c3:
ef:35:de:5c:39:ac:9c:2c:bb:fd:ca:bd:12:2a:f9:
8f:9b:23:b8:f0:4b:91:c9:31:6f:25:a6:45:8b:1c:
65:a5:f3:82:d9:73:75:1d:54:9e:13:55:84:a2:ba:
da:05:af:2f:4f:34:28:aa:e0:36:99:38:14:44:cc:
e5:bd:55:57:49:50:c7:ca:20:0b:ea:99:ff:54:26:
b9:14:a1:63:98:9f:79:06:97:b4:bc:aa:33:1b:08:
eb:59:c0:2b:f7:51:6d:f6:c7:34:fa:01:8b:68:75:
be:42:7c:92:eb:24:5e:f1:a7:c6:c0:2e:18:cf:8f:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:16:88:D3:AE:FA:57:9F:FB:C8:B7:20:43:E0:4D:7B:F4:43:1A
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:51:14:ad:7b:4b:40:c6:af:93:a6:27:5b:e1:8d:ca:12:3d:
8e:a9:86:58:3b:c6:9f:e4:9f:3c:dc:56:60:2b:1d:30:e4:73:
89:1c:77:1a:88:e8:44:fa:6c:fd:e1:44:d6:82:ac:74:9f:b5:
b6:3b:4c:bc:7f:9b:99:ac:67:12:c4:74:81:c6:df:ba:7f:1e:
66:ed:ad:45:ae:05:83:40:af:a1:f7:23:16:43:1f:ee:b7:57:
4b:1e:2f:f3:15:4a:2e:1a:ed:6a:72:53:54:8e:05:51:9e:0e:
0e:56:9c:1e:72:e3:28:f6:69:40:b7:b0:71:2b:de:97:af:6e:
7f:d0:6e:13:0e:23:96:a4:4e:d2:1e:29:49:3c:6a:89:39:06:
f6:2d:b7:00:38:e4:c6:6f:00:53:dc:90:29:6c:86:3b:17:ec:
ff:22:7e:17:15:82:27:d3:e6:6a:c8:a5:cd:1b:7c:fa:ee:bf:
95:28:26:0d:17:7e:21:a8:39:a0:2b:45:b6:0e:34:01:e0:5a:
64:ec:bd:7a:34:93:9a:49:76:dc:31:86:ec:e2:b2:1d:11:ed:
cf:0a:2c:e6:cc:bb:83:fd:41:18:cd:b4:46:65:c1:ca:b7:e5:
0e:77:33:9e:a1:4b:20:bd:0a:15:49:e5:3c:46:86:ce:85:04:
3e:53:48:ab
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIBWjANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjUxMTIwMDkyMDE2WhcNMjUxMjI3MDky
MDE2WjAYMRYwFAYDVQQDEw02OTFlZGQ1MC0yN2JmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxU2wiMb7odXSo0m1tBQSjeXrbwCqoOmJw6El7hj0SgJt
IBEmMdimvtRcQZ1OUjHP/46xi1hMvGtNaz9NAjL9L+gAt/3pV5RLZGcAo5z6OVc3
+Hlt8RZ4/3Zr5tKWbL0i7pvleA/deGvuYNTiVDKF+1pmg4hrLh4ECufOfAANa0oQ
QRCqKMPvNd5cOaycLLv9yr0SKvmPmyO48EuRyTFvJaZFixxlpfOC2XN1HVSeE1WE
orraBa8vTzQoquA2mTgURMzlvVVXSVDHyiAL6pn/VCa5FKFjmJ95Bpe0vKozGwjr
WcAr91Ft9sc0+gGLaHW+QnyS6yRe8afGwC4Yz4/g+wIDAQABo4ICXzCCAlswHQYD
VR0OBBYEFIQiFojTrvpXn/vItyBD4E179EMaMB8GA1UdIwQYMBaAFOtoDzj11scb
tLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIHgDB1BgNVHR8EbjBsMGqgaKBmhmRy
c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBGNEQx
MUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFNYlku
Y3JsMEsGCCsGAQUFBwEBBD8wPTA7BggrBgEFBQcwAoYvcnN5bmM6Ly9ycGtpLmFm
cmluaWMubmV0L3JlcG9zaXRvcnkvQWZyaU5JQy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgbkGCCsGAQUFBwELBIGsMIGpMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFN
YlkubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90
aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAFFRFK17
S0DGr5OmJ1vhjcoSPY6phlg7xp/knzzcVmArHTDkc4kcdxqI6ET6bP3hRNaCrHSf
tbY7TLx/m5msZxLEdIHG37p/HmbtrUWuBYNAr6H3IxZDH+63V0seL/MVSi4a7Wpy
U1SOBVGeDg5WnB5y4yj2aUC3sHEr3pevbn/QbhMOI5akTtIeKUk8aok5BvYttwA4
5MZvAFPckClshjsX7P8ifhcVgifT5mrIpc0bfPruv5UoJg0XfiGoOaArRbYONAHg
WmTsvXo0k5pJdtwxhuzish0R7c8KLObMu4P9QRjNtEZlwcq35Q53M56hSyC9ChVJ
5TxGhs6FBD5TSKs=
-----END CERTIFICATE-----
Generated at Sat Nov 22 14:16:50 2025 by rpki-client