This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier: esJcnrSEHQpKBjg8csB/Ob41Rgzb9J2amIE1Z7ELURc=
Subject key identifier: 33:9A:1A:74:1C:A6:AF:C3:B2:41:19:FE:4C:6F:5C:C2:0F:3D:BB:5D
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 0226
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number: 021E
Signing time: Tue 09 Dec 2025 04:21:08 +0000
Manifest this update: Tue 09 Dec 2025 04:21:07 +0000
Manifest next update: Thu 11 Dec 2025 04:21:07 +0000
Files and hashes: 1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: 7pLMBEFF4CiFiQe8y9QGxz78ja546qhny46trqETSSI=)
2: CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa (hash: gzKwOZ98jgnieBv/5nWznefopJ4KkE1g7Or0zMyAoZI=)
3: 83DC9676CDCD11F08E2794B7DAE4EC9C.roa (hash: 4Gl9Zow27JuQ8GOMSVeAJ+sgSeivkesNbYlt5t1Eo1A=)
4: 31C48A88CDCD11F0A70CB3B5DAE4EC9C.roa (hash: 443cxlKgy4pnPq2qfyUo04AC7frZpxKf8kr/vGjPde4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 04:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Dec 9 04:21:07 2025 GMT
Not After : Dec 11 04:21:07 2025 GMT
Subject: CN=6937a3b4-6379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:aa:af:fc:01:70:90:15:53:d1:12:31:70:
d4:18:fe:49:68:6d:f1:1f:4f:e0:55:43:c2:f5:d3:
be:92:aa:ae:07:35:6f:9e:be:d6:61:d4:85:bf:7d:
3a:14:18:ab:96:31:1e:96:cb:27:9e:bb:db:bc:e6:
98:85:e4:73:75:05:bd:05:8c:e0:65:53:ba:a5:2e:
94:95:aa:07:18:e3:29:a1:f5:22:1e:6b:05:eb:73:
fe:02:4d:5b:aa:2c:c0:10:f2:8f:fe:7d:bc:cb:72:
88:6f:b1:b6:8e:11:ae:47:14:7f:8b:4b:16:b0:c1:
9b:36:b0:5f:ef:85:d6:6d:59:a4:b0:80:81:1b:8c:
f1:1b:a2:9b:9b:e1:8e:3d:5f:95:97:65:bd:65:b2:
f8:b8:7a:df:89:a5:1a:70:d0:05:44:99:fb:f1:26:
da:11:37:f9:96:e6:42:08:b8:8f:44:4e:ef:08:a8:
fc:5c:a8:4d:37:ad:3f:ad:6e:fc:89:94:31:dc:65:
61:f7:8f:d4:2d:08:dc:e5:4c:6d:4c:ce:41:b9:39:
3e:58:e8:dc:03:40:b6:d6:eb:11:59:53:bb:5b:a3:
77:09:90:f7:0b:eb:88:de:4a:7b:2a:85:b4:16:08:
bb:bc:8a:59:b2:16:eb:28:67:79:f8:a4:bc:1c:e1:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:1A:74:1C:A6:AF:C3:B2:41:19:FE:4C:6F:5C:C2:0F:3D:BB:5D
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:9f:ab:41:6c:ff:77:57:31:b3:b7:a0:02:ee:f3:81:92:
85:70:dc:7e:dc:44:77:47:9b:d3:54:41:cd:b1:98:bc:2a:d6:
6a:fb:78:de:c7:5f:e9:b9:85:21:c1:58:17:3b:0b:ba:b8:95:
ae:2e:42:d7:f9:b6:b2:02:97:b1:d0:1e:96:bc:12:02:d8:d2:
5d:60:f0:fd:5e:aa:2e:c3:64:eb:ee:a5:83:54:d6:aa:c0:06:
be:a6:94:e1:65:0d:7e:29:e3:1f:7e:ef:0e:9f:34:cf:a4:a2:
36:8b:ef:75:6a:32:62:e2:6d:66:8d:d5:8e:f6:f4:60:83:95:
0c:1b:82:50:ee:d4:c8:e2:46:0c:03:92:b8:32:71:86:1c:c9:
f5:c7:88:6d:32:75:a3:03:a6:99:42:fd:00:f9:6d:4f:9f:01:
de:35:8b:3a:b2:10:d0:09:a2:79:fd:4f:10:c7:19:12:22:e5:
0f:10:5e:e9:cb:3d:f0:07:75:ae:ad:41:08:59:81:13:cc:0a:
08:19:70:d4:e7:b9:66:7d:ad:aa:70:7b:c0:3e:90:3e:7a:17:
24:b6:37:2b:ba:19:43:30:6c:8a:dc:1d:d7:17:d0:46:28:7e:
0b:61:a7:e7:b6:bf:76:ae:f7:31:50:28:26:3a:9c:38:b7:c3:
dc:80:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:32:00 2025 by rpki-client