This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft File: cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json) Hash identifier: ehtlGoXA8NLnCcsLq6ebSmlbn09nMkTJZlbW6hKP7R4= Subject key identifier: F3:EE:86:7C:0F:FE:BF:9B:56:E3:6B:70:C4:70:E5:9A:DC:E4:8E:01 Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE Certificate serial: 052E Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft Manifest number: 052B Signing time: Tue 23 Dec 2025 02:49:21 +0000 Manifest this update: Tue 23 Dec 2025 02:49:20 +0000 Manifest next update: Thu 25 Dec 2025 02:49:20 +0000 Files and hashes: 1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: d6CwLeWCCady/4PvOb9oY7pZL0QKtaBiH8RChkaBEqw=) 2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=) 3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=) 4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 25 Dec 2025 00:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE Validity Not Before: Dec 23 02:49:20 2025 GMT Not After : Dec 25 02:49:20 2025 GMT Subject: CN=694a0331-dda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:d1:b0:2b:1d:d7:48:44:9a:6d:99:15:10: 95:7f:8f:41:55:a3:d7:af:0c:27:52:59:6e:2e:5b: d0:b7:72:fe:b1:9a:b6:47:5c:cf:ed:c4:e9:e1:82: 13:8e:80:3a:44:b1:41:07:cf:f6:24:cd:66:48:ba: 03:1e:9a:e6:9f:36:92:40:40:2e:a8:c8:9e:16:41: 8a:b9:3e:b3:26:da:20:29:69:61:e4:1a:4b:44:11: 56:52:bc:86:59:f1:5c:83:5a:64:f1:1d:1f:74:25: cb:43:b7:18:d5:3c:b9:0d:60:b6:76:3d:b7:35:8e: ec:e6:50:d1:9c:2a:fa:02:c6:3a:e5:7b:5d:5c:3d: 26:3f:a6:95:32:05:c4:64:fa:6c:62:02:25:66:dd: f5:d9:cd:37:03:1d:a5:7d:a4:73:06:d8:7d:3f:2c: b0:39:55:6c:e3:21:c6:3b:c2:6f:87:dd:0f:93:41: 7b:47:6b:9e:70:df:c6:d6:44:33:29:fd:e0:13:c3: 21:86:68:d6:55:4b:54:fa:ba:88:80:0b:c4:7e:64: ea:f0:be:9a:0e:6b:d8:dd:f5:5c:7f:7d:54:3b:de: 0c:01:c6:18:b6:ea:61:16:a9:ef:ca:9b:86:d7:3b: fd:5d:c9:a9:db:48:1e:a2:7a:c3:e3:79:84:9c:1f: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:86:7C:0F:FE:BF:9B:56:E3:6B:70:C4:70:E5:9A:DC:E4:8E:01 X509v3 Authority Key Identifier: keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:66:04:27:d5:e7:e3:97:1e:af:ca:c1:c8:27:99:b7:ac:2c: ac:35:d9:bf:47:29:70:dd:1d:15:ab:a9:e1:58:14:bb:44:fa: 57:26:56:fd:09:9d:e7:04:9f:9d:84:b9:82:6e:84:16:a3:ae: 3e:dc:bd:9b:c5:3c:92:f0:b2:55:f9:db:bc:8c:7d:40:71:75: 15:17:84:19:86:56:d9:7c:dc:26:57:54:89:7a:f8:d1:29:4c: 78:94:d4:12:ee:af:fd:67:b5:e9:d7:96:b7:a9:c9:72:4e:66: 14:b7:30:ac:27:3d:fe:0f:49:3c:d5:d5:94:a7:16:7f:8d:c8: a0:b2:dc:e0:c6:15:24:ff:4d:90:d5:ce:83:62:e1:02:e3:04: 75:dc:46:59:7e:e9:a0:5d:73:09:b5:23:b3:3f:7f:9f:b0:f8: c7:67:81:58:9b:8b:1f:6a:c7:76:d7:99:8a:e7:fb:1a:c7:1c: bc:f0:56:f7:1b:2a:87:68:08:56:33:2d:3c:56:a5:43:7b:08: a9:a3:43:80:bb:09:ff:06:2c:38:27:8f:1f:38:a2:3e:b3:2e: e3:bf:d0:91:af:13:47:23:2e:0f:c1:0e:a9:de:dc:2d:7a:e5: f8:ed:8a:23:b5:21:cd:b7:e1:aa:e1:a7:e4:c0:35:5c:18:dc: 61:85:4e:ba -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTc1NjBBUDExMC8GA1UEBRMoNzJGMDg3NDE0Q0UyREY0NEJDNEY0REZGNUJFMTE0 N0E3QTcxQTlBRTAeFw0yNTEyMjMwMjQ5MjBaFw0yNTEyMjUwMjQ5MjBaMBgxFjAU BgNVBAMTDTY5NGEwMzMxLWRkYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDETdGwKx3XSESabZkVEJV/j0FVo9evDCdSWW4uW9C3cv6xmrZHXM/txOnh ghOOgDpEsUEHz/YkzWZIugMemuafNpJAQC6oyJ4WQYq5PrMm2iApaWHkGktEEVZS vIZZ8VyDWmTxHR90JctDtxjVPLkNYLZ2Pbc1juzmUNGcKvoCxjrle11cPSY/ppUy BcRk+mxiAiVm3fXZzTcDHaV9pHMG2H0/LLA5VWzjIcY7wm+H3Q+TQXtHa55w38bW RDMp/eATwyGGaNZVS1T6uoiAC8R+ZOrwvpoOa9jd9Vx/fVQ73gwBxhi26mEWqe/K m4bXO/1dyanbSB6iesPjeYScH/evAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQU8+6G fA/+v5tW42twxHDlmtzkjgEwHwYDVR0jBBgwFoAUcvCHQUzi30S8T03/W+EUenpx qa4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIyNDY4L2N2Q0hR VXppMzBTOFQwM19XLUVVZW5weHFhNC5jcmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsG AQUFBzAChklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5p Yy9jdkNIUVV6aTMwUzhUMDNfVy1FVWVucHhxYTQuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHVBggrBgEFBQcBCwSByDCBxTCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y ZXBvc2l0b3J5L0YzNjE3NTYwLzFFODc5NThBRjI1OTExRUNCMUJERjJDMUYxMjIy NDY4L2N2Q0hRVXppMzBTOFQwM19XLUVVZW5weHFhNC5tZnQwNQYIKwYBBQUHMA2G KWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWYEJ9Xn45cer8rByCeZt6wsrDXZv0cp cN0dFaup4VgUu0T6VyZW/Qmd5wSfnYS5gm6EFqOuPty9m8U8kvCyVfnbvIx9QHF1 FReEGYZW2XzcJldUiXr40SlMeJTUEu6v/We16deWt6nJck5mFLcwrCc9/g9JPNXV lKcWf43IoLLc4MYVJP9NkNXOg2LhAuMEddxGWX7poF1zCbUjsz9/n7D4x2eBWJuL H2rHdteZiuf7GsccvPBW9xsqh2gIVjMtPFalQ3sIqaNDgLsJ/wYsOCePHziiPrMu 47/Qka8TRyMuD8EOqd7cLXrl+O2KI7UhzbfhquGn5MA1XBjcYYVOug== -----END CERTIFICATE-----Generated at Tue Dec 23 09:44:57 2025 by rpki-client