This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
File: gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft (raw, json)
Hash identifier: oF/LnPIxpHUQlEEuLe+E3kNB/2Ic+49cOFXNgrYhJVA=
Subject key identifier: EE:83:D5:A5:1B:F1:C7:36:9B:27:B2:A7:7B:AD:F1:60:04:0C:7A:5A
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Certificate issuer: /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial: 048B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
Manifest number: 0487
Signing time: Sat 20 Dec 2025 03:08:06 +0000
Manifest this update: Sat 20 Dec 2025 03:08:05 +0000
Manifest next update: Mon 22 Dec 2025 03:08:05 +0000
Files and hashes: 1: gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl (hash: 9eP5Q4hKuSQEhUycU5OI0OvvMy3Tgbny4/bB7/svmxo=)
2: 663621FC6FE611ED9793E2A2F1222468.roa (hash: pOiXMCETpHqkEhDUTKpvHVFnDi/EWrRzid1oTDEvNYI=)
3: BA1164B26FE611ED9E57C5A3F1222468.roa (hash: cj0paKj6uAYyRz3Vt8WdaCe+4/4R7mr0wnlwDucUaow=)
4: 309F4CEE6FE611ED945B4DA2F1222468.roa (hash: qv6IGwKqJEtixNqBWOezaW48ALRNnYqv01ysaSDGwCU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Dec 2025 00:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1163 (0x48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Validity
Not Before: Dec 20 03:08:05 2025 GMT
Not After : Dec 22 03:08:05 2025 GMT
Subject: CN=69461316-abd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4b:1c:c4:d5:79:b0:90:6e:58:34:db:0d:ec:
03:c0:6e:8c:0f:7a:aa:22:e8:65:05:48:76:75:af:
29:d7:4b:d5:20:8d:13:4b:c6:c5:2d:73:0d:15:84:
a4:90:9c:ca:5c:06:1d:77:71:5b:21:34:71:2a:9b:
88:d9:75:41:45:93:be:43:6c:dd:76:a6:ce:30:b0:
2c:88:e4:34:b3:e1:e1:54:1f:dd:73:a3:b3:ec:2f:
97:08:bb:93:1e:8b:52:0c:78:42:e1:48:e5:b0:09:
4f:b6:7d:0d:fa:e0:12:05:39:43:43:be:81:1e:6d:
78:cf:27:80:23:10:4d:ac:82:88:4f:b2:1d:9e:e3:
3c:90:fa:37:e1:4a:2a:37:3d:61:cf:05:81:d3:37:
c2:d4:e2:92:1a:ef:9b:29:a5:b1:85:ae:e1:13:df:
ed:04:cc:ae:df:99:88:41:93:6f:59:34:2e:17:fc:
5b:8c:7e:72:1d:eb:6c:d1:9a:67:08:61:df:e0:72:
a3:c0:43:2c:6c:9e:d9:f8:7d:ab:db:8e:58:15:1c:
e4:0e:b2:8b:5f:c2:e6:3b:fd:12:24:58:be:74:d4:
18:4c:a8:6a:bd:c6:93:e5:44:d6:4d:3c:a3:97:4e:
24:e5:d2:08:7d:57:b8:0a:01:db:39:dc:99:4d:d4:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:D5:A5:1B:F1:C7:36:9B:27:B2:A7:7B:AD:F1:60:04:0C:7A:5A
X509v3 Authority Key Identifier:
keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:aa:a2:c3:ec:44:21:22:64:d9:f6:22:5e:86:f7:32:00:20:
49:34:af:c1:a6:a2:aa:1a:e2:c0:18:f5:1f:1b:74:f1:7f:ec:
20:4f:5e:e5:5c:1e:76:80:85:36:df:5e:7f:0f:81:0b:bb:23:
1a:7e:da:cf:be:db:45:8f:d0:84:e2:6d:08:5b:dc:99:8c:e3:
48:11:b6:fc:d2:96:1c:37:9e:b2:ea:c9:c1:1d:12:c1:bd:26:
a0:45:5c:60:62:53:10:5f:3e:d9:4d:36:2e:1d:44:45:98:fd:
06:33:14:aa:04:c0:a7:e0:55:f4:f5:01:a9:23:2a:8e:c6:25:
20:5e:35:f6:1e:1b:2e:00:2f:f5:f4:03:94:85:77:4f:2a:33:
f1:33:04:cc:81:37:ad:0b:a8:44:b3:9b:6f:86:bc:70:ff:95:
f5:16:fc:78:12:aa:69:fd:c7:6f:b2:0b:0f:70:07:dd:1a:a5:
6a:0c:47:26:31:ea:a0:7a:ad:39:57:ce:c9:47:ea:de:ec:a9:
c5:c5:bb:4f:ba:7a:36:c1:27:c2:73:94:a9:cd:15:f7:59:44:
ed:f4:4a:91:5c:7e:d8:df:af:91:e7:87:e2:02:fb:d8:70:70:
88:ad:83:45:f6:44:46:75:ea:d3:13:54:c9:d5:58:ef:09:ca:
25:7b:c0:11
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBIswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA2QjhBRjExMC8GA1UEBRMoODA3MzgyMzYyNEFFQzFGNkFDMUFCMDY5RDk3OEU2
NUQ5RjcyMDU2QjAeFw0yNTEyMjAwMzA4MDVaFw0yNTEyMjIwMzA4MDVaMBgxFjAU
BgNVBAMTDTY5NDYxMzE2LWFiZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvSxzE1XmwkG5YNNsN7APAbowPeqoi6GUFSHZ1rynXS9UgjRNLxsUtcw0V
hKSQnMpcBh13cVshNHEqm4jZdUFFk75DbN12ps4wsCyI5DSz4eFUH91zo7PsL5cI
u5Mei1IMeELhSOWwCU+2fQ364BIFOUNDvoEebXjPJ4AjEE2sgohPsh2e4zyQ+jfh
Sio3PWHPBYHTN8LU4pIa75sppbGFruET3+0EzK7fmYhBk29ZNC4X/FuMfnId62zR
mmcIYd/gcqPAQyxsntn4favbjlgVHOQOsotfwuY7/RIkWL501BhMqGq9xpPlRNZN
PKOXTiTl0gh9V7gKAds53JlN1HJzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7oPV
pRvxxzabJ7Kne63xYAQMelowHwYDVR0jBBgwFoAUgHOCNiSuwfasGrBp2XjmXZ9y
BWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYxMjIyNDY4L2dIT0NO
aVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dIT0NOaVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDA2QjgvMTY2OTFCQjI2RkU1MTFFRDg1NEI1OTlGRjEy
MjI0NjgvZ0hPQ05pU3V3ZmFzR3JCcDJYam1YWjl5QldzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdqqLD7EQhImTZ9iJehvcyACBJNK/B
pqKqGuLAGPUfG3Txf+wgT17lXB52gIU2315/D4ELuyMaftrPvttFj9CE4m0IW9yZ
jONIEbb80pYcN56y6snBHRLBvSagRVxgYlMQXz7ZTTYuHURFmP0GMxSqBMCn4FX0
9QGpIyqOxiUgXjX2HhsuAC/19AOUhXdPKjPxMwTMgTetC6hEs5tvhrxw/5X1Fvx4
Eqpp/cdvsgsPcAfdGqVqDEcmMeqgeq05V87JR+re7KnFxbtPuno2wSfCc5SpzRX3
WUTt9EqRXH7Y36+R54fiAvvYcHCIrYNF9kRGderTE1TJ1VjvCcole8AR
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:09:24 2025 by rpki-client