This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File: aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier: 1yakvO6pK1uONzi2tuaRze8G6euu9bDIMEcu2Qp9AJI=
Subject key identifier: 08:B3:BC:AB:BF:79:C3:DA:1C:A8:93:2A:47:58:51:88:45:B3:B1:A1
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer: /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial: A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number: A2
Signing time: Tue 09 Dec 2025 05:04:13 +0000
Manifest this update: Tue 09 Dec 2025 05:04:13 +0000
Manifest next update: Thu 11 Dec 2025 05:04:13 +0000
Files and hashes: 1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: VYXDB2wIYhmA1wxeyUhRxTtu6CJNiChDrq8Ei68wC1I=)
2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 05:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Validity
Not Before: Dec 9 05:04:13 2025 GMT
Not After : Dec 11 05:04:13 2025 GMT
Subject: CN=6937adcd-f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:bc:f0:6d:de:2a:76:f0:0e:39:2b:bc:00:
58:60:6c:4e:25:26:40:0b:28:46:3f:c9:15:4e:fc:
26:df:41:ae:6b:e5:6d:17:11:28:af:b1:a8:14:b4:
9a:99:2f:00:80:f0:c5:17:76:a8:33:87:e7:15:a2:
34:08:22:d0:aa:da:cb:40:af:47:3d:7a:19:73:c5:
f2:6f:c4:b2:8f:88:a2:20:56:c5:53:bd:40:7d:33:
35:22:50:d0:ee:d9:22:f2:f0:fe:15:e7:d7:23:27:
72:98:74:54:5e:9e:f7:55:52:b2:24:65:9b:63:b9:
ca:5a:46:0a:04:fb:55:2e:98:2e:e2:4d:8e:39:87:
6e:60:a3:42:fe:db:53:e7:66:26:6a:8a:96:e7:0e:
99:f1:f2:1b:6d:65:24:26:7e:99:a5:32:a8:95:c5:
ba:bd:cc:37:7c:53:bf:65:1c:c6:c4:e9:7f:7d:e9:
6a:00:d7:98:e5:6f:e3:35:6c:16:ca:48:37:c3:70:
04:b3:a2:3b:00:1b:a3:c3:a3:7b:78:91:09:bc:24:
a6:79:11:39:09:ca:66:b4:05:83:16:91:2b:a1:63:
db:c7:04:52:76:9e:2d:76:9c:c4:bd:6d:c8:1d:13:
a4:08:6d:a1:d8:a2:3d:1c:67:65:ae:d9:0e:13:48:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:BC:AB:BF:79:C3:DA:1C:A8:93:2A:47:58:51:88:45:B3:B1:A1
X509v3 Authority Key Identifier:
keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:72:ab:fb:c0:08:fb:d1:f9:fc:53:ab:ed:fb:61:90:78:b1:
a5:dc:00:ed:43:a9:da:43:76:24:d2:bd:5d:05:24:f1:41:61:
5e:32:7f:87:f6:40:3d:32:e2:1b:6a:40:00:31:55:89:77:84:
20:60:1f:b4:13:42:22:a8:85:1a:62:46:fa:b9:80:d8:f7:04:
8d:1b:3f:3e:f8:dc:c0:f5:f1:ed:14:8a:c5:50:c0:3d:2f:c4:
2a:85:c9:b8:fb:ff:bf:45:e5:27:b7:50:28:88:ae:42:72:fd:
7f:23:0f:6e:0f:0d:5f:e7:5b:c4:ce:77:56:35:2a:a6:b0:a9:
7a:6b:ae:d9:24:17:2b:aa:e4:9e:28:b4:4e:71:c6:e2:0c:e6:
b2:31:53:74:e4:cd:c4:4a:74:04:64:d0:40:77:f1:3a:2f:ad:
86:3a:e3:79:47:2a:b0:97:8f:7a:9e:4a:fc:b9:c5:e6:e0:95:
0c:a9:64:8e:22:be:a4:77:64:ff:38:d5:b2:8d:32:f2:71:5b:
60:16:15:c5:f4:4d:68:e0:23:60:e7:03:93:55:6a:fa:c0:fe:
78:0f:ce:11:c8:a1:f9:50:25:b7:0e:39:83:8d:c4:14:54:7a:
90:6c:82:82:1a:7e:73:a2:b2:c4:08:47:6d:b0:5d:bb:3c:d5:
ff:a1:30:53
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDFERENBRjExMC8GA1UEBRMoNjlBMUIyNzU0RDJDNkY2QjQ3MjY2NzdBNzIwNDUw
MjM2QkQyRUNEMTAeFw0yNTEyMDkwNTA0MTNaFw0yNTEyMTEwNTA0MTNaMBgxFjAU
BgNVBAMTDTY5MzdhZGNkLWYwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMm7zwbd4qdvAOOSu8AFhgbE4lJkALKEY/yRVO/CbfQa5r5W0XESivsagU
tJqZLwCA8MUXdqgzh+cVojQIItCq2stAr0c9ehlzxfJvxLKPiKIgVsVTvUB9MzUi
UNDu2SLy8P4V59cjJ3KYdFRenvdVUrIkZZtjucpaRgoE+1UumC7iTY45h25go0L+
21PnZiZqipbnDpnx8httZSQmfpmlMqiVxbq9zDd8U79lHMbE6X996WoA15jlb+M1
bBbKSDfDcASzojsAG6PDo3t4kQm8JKZ5ETkJyma0BYMWkSuhY9vHBFJ2ni12nMS9
bcgdE6QIbaHYoj0cZ2Wu2Q4TSNIPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCLO8
q795w9ocqJMqR1hRiEWzsaEwHwYDVR0jBBgwFoAUaaGydU0sb2tHJmd6cgRQI2vS
7NEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQxRERDLzkxQkU5OTI2NThDRDExRjA4NkJGN0NFQURBRTRFQzlDL2FhR3lk
VTBzYjJ0SEptZDZjZ1JRSTJ2UzdORS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FhR3lkVTBzYjJ0SEptZDZjZ1JRSTJ2UzdORS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDFEREMvOTFCRTk5MjY1OENEMTFGMDg2QkY3Q0VBREFF
NEVDOUMvYWFHeWRVMHNiMnRISm1kNmNnUlFJMnZTN05FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7cqv7wAj70fn8U6vt+2GQeLGl3ADt
Q6naQ3Yk0r1dBSTxQWFeMn+H9kA9MuIbakAAMVWJd4QgYB+0E0IiqIUaYkb6uYDY
9wSNGz8++NzA9fHtFIrFUMA9L8Qqhcm4+/+/ReUnt1AoiK5Ccv1/Iw9uDw1f51vE
zndWNSqmsKl6a67ZJBcrquSeKLROccbiDOayMVN05M3ESnQEZNBAd/E6L62GOuN5
Ryqwl496nkr8ucXm4JUMqWSOIr6kd2T/ONWyjTLycVtgFhXF9E1o4CNg5wOTVWr6
wP54D84RyKH5UCW3DjmDjcQUVHqQbIKCGn5zorLECEdtsF27PNX/oTBT
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:30:45 2025 by rpki-client