This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File: CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier: uus1ih1pZ6cIjU79v5qfsrHHql7go4KbQ1y4G43WQtE=
Subject key identifier: AD:9C:77:A5:55:D7:55:D7:4A:49:D5:88:41:F2:8E:D2:9C:DC:17:D6
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer: /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial: 020D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number: 020A
Signing time: Tue 09 Dec 2025 04:24:05 +0000
Manifest this update: Tue 09 Dec 2025 04:24:04 +0000
Manifest next update: Thu 11 Dec 2025 04:24:04 +0000
Files and hashes: 1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: 7AcYGcrSiYbZQqHlTKMolLtQrKsjynYvv3X0En4nPjI=)
2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 04:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Validity
Not Before: Dec 9 04:24:04 2025 GMT
Not After : Dec 11 04:24:04 2025 GMT
Subject: CN=6937a464-8d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:be:ae:a9:36:dd:f9:f4:5a:2d:b9:83:85:
b5:a1:56:b5:cd:df:ef:63:dc:a1:a1:36:df:f0:7b:
6d:37:5d:54:20:ca:5f:46:f4:82:1b:6a:ef:43:bd:
cf:25:e1:9f:90:ce:01:ea:62:46:99:e7:73:e8:78:
1c:05:1b:c3:7a:52:1c:a9:36:aa:b1:f1:29:9c:63:
16:44:cd:89:cd:f7:03:fa:d0:c5:a6:0e:e8:85:f0:
61:2e:d7:94:47:92:84:e6:ba:e5:ce:19:c4:e4:2a:
ed:90:f7:d7:ca:17:b5:26:d6:a7:2b:b3:87:95:40:
5d:09:4c:f2:71:2f:54:50:f1:f4:4e:8d:b9:05:c1:
77:b2:87:c3:50:07:94:07:8e:ad:d5:0b:fc:2d:50:
3d:68:d3:8b:d6:4a:83:c9:dd:9d:37:76:98:19:cb:
26:42:ed:b4:69:19:c7:38:19:b6:f9:76:a1:14:98:
36:85:85:6a:c7:02:8b:26:0a:6d:50:58:f8:59:01:
91:f9:96:58:d1:56:15:a8:41:6c:2a:6a:ee:10:79:
a9:0a:0f:88:a9:27:a6:da:6c:1a:a0:41:63:79:f0:
51:5a:99:5c:d8:f6:70:a0:98:d0:0a:a7:92:de:b9:
d5:f7:14:66:1f:60:a8:4f:6e:2c:87:ab:8a:ff:25:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9C:77:A5:55:D7:55:D7:4A:49:D5:88:41:F2:8E:D2:9C:DC:17:D6
X509v3 Authority Key Identifier:
keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:d3:05:04:f4:e3:54:31:b0:00:c3:38:16:94:7c:eb:1b:
cd:a6:34:c4:b4:31:1f:41:2b:9a:73:5a:71:6a:86:52:1e:2e:
83:73:c7:2c:9d:a1:00:55:4e:f8:29:14:6b:ca:fe:76:62:b3:
cd:af:80:59:3e:28:e9:40:ff:32:78:6b:61:a3:f7:3d:1d:9f:
34:99:70:e3:ce:74:8e:8d:b4:c9:fc:ee:87:34:15:36:1e:b0:
c5:cf:c8:a5:3d:9b:df:b5:94:38:7d:25:5b:d1:29:4c:ef:0c:
b9:29:39:39:f3:37:8a:4a:f0:35:44:8d:bf:83:c8:15:30:51:
ab:07:77:6f:56:93:45:6c:94:53:b5:2e:9b:99:5e:f9:66:ef:
f6:96:fc:55:a1:7b:ac:af:2a:ef:22:30:1e:88:b6:40:f4:c6:
af:f4:0c:e7:54:58:05:2b:f5:8f:97:9c:db:ab:ed:d6:6f:8b:
e1:25:67:f9:79:bc:62:b2:a1:fc:d6:b6:96:4b:8d:78:18:18:
b0:b5:9e:0b:bf:27:7c:28:c9:4e:02:ad:65:67:23:29:15:eb:
2b:8a:08:8d:ae:a1:4f:6b:99:bb:da:a7:24:8f:35:86:1b:29:
71:01:7d:40:d7:39:2e:62:60:43:90:70:9c:fb:43:81:64:53:
8f:d5:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:15 2025 by rpki-client