This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: s6TGd6HBTWFluxx2a/Fu17WN0OXyzoqISKlrr4Wo6mw=
Subject key identifier: 3B:8F:30:3E:76:76:FD:4E:E6:53:9D:83:AD:F2:CB:0D:1C:71:C6:BC
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 021B
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 021B
Signing time: Thu 04 Dec 2025 04:20:24 +0000
Manifest this update: Thu 04 Dec 2025 04:20:23 +0000
Manifest next update: Sat 06 Dec 2025 04:20:23 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: Q3cbpnd9q8QYGCJNpbe+EoIOaLeVj90zt3mMwBEdzLo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Dec 2025 04:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Dec 4 04:20:23 2025 GMT
Not After : Dec 6 04:20:23 2025 GMT
Subject: CN=69310c08-c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:75:85:dc:14:33:69:9d:72:9c:7b:9c:9f:
17:b4:1f:dc:46:a0:a1:df:d7:84:e7:5f:d8:98:47:
a1:4f:25:74:f9:8d:7d:90:e9:ea:ce:ee:45:bf:54:
da:e8:74:6a:a9:74:36:d9:9d:37:94:8e:fc:91:70:
2b:b1:97:e1:22:4b:62:df:f5:56:ba:9a:cc:bb:7b:
4b:68:58:09:c5:bb:32:6a:89:7b:5e:57:34:86:ba:
78:aa:4a:9e:95:5c:31:ea:bb:3d:29:b7:eb:04:eb:
1b:91:91:76:7b:ef:5b:cb:c1:15:d4:4e:c0:5c:74:
1d:16:b8:1d:2e:de:71:4e:01:ef:df:34:53:a8:49:
5c:e3:f4:af:ea:e2:e8:cc:2e:fc:19:51:98:be:84:
20:1e:7d:6a:81:7c:0f:e4:63:d2:65:b5:35:d2:39:
89:35:15:da:00:1a:48:0b:98:d5:c0:32:a6:29:71:
6a:13:35:4e:27:02:7a:fa:21:69:d6:02:0b:78:ab:
f0:7e:62:6b:0e:1e:90:33:cd:e9:33:c5:6d:97:fe:
42:db:da:f8:ca:2b:20:d7:2a:48:bf:45:05:7d:bb:
78:21:ee:38:73:13:fc:72:e9:63:01:a8:8a:81:81:
6b:d5:1a:71:fb:1b:ab:4e:f7:f0:4b:dc:13:aa:ea:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:30:3E:76:76:FD:4E:E6:53:9D:83:AD:F2:CB:0D:1C:71:C6:BC
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:31:d5:29:1a:78:37:71:de:43:1b:81:ac:94:c2:20:c2:60:
f1:ab:63:d0:e8:c9:10:7b:f1:57:b3:57:bb:26:40:6b:54:39:
c5:b3:31:fb:f8:91:e2:a9:26:e2:37:5f:61:a4:10:ca:8f:73:
9d:7f:74:ac:9c:68:04:79:57:bb:14:4a:d4:1b:91:0d:ec:d3:
c3:4b:df:4b:ea:4b:6c:fd:2c:05:21:af:7c:33:5f:dd:c9:e3:
97:59:53:db:b3:70:a9:4b:6c:51:84:e8:be:df:0c:43:52:e3:
87:a3:8d:a4:36:98:05:dd:a6:af:4f:e8:c8:55:91:77:6c:2d:
8e:25:89:20:05:e4:7d:40:31:9b:a6:3f:c9:f3:52:14:d4:25:
d5:91:fa:7e:c3:36:3a:58:f4:74:58:ba:f7:9b:71:35:8b:ba:
96:91:b3:69:2f:1a:a7:62:bb:67:af:22:f5:56:4d:0c:3b:4b:
51:74:a4:80:50:84:ba:87:c1:da:17:da:17:1d:fd:41:29:b5:
b9:f5:67:82:1c:c4:5d:69:57:c0:6b:fd:e6:8e:02:85:51:41:
59:c6:b6:88:46:95:cf:33:e1:6a:f9:59:a6:1d:e3:31:31:05:
af:bb:fc:39:ff:40:de:ff:72:05:0a:8c:51:f9:ae:0f:07:c6:
f4:aa:42:1c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAhswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDQjFBUjExMC8GA1UEBRMoQTZBMzQzQjI3RjlGNzYyQUU0MUNGN0M1QkM2QjUx
MTRDMjg4NUE3NzAeFw0yNTEyMDQwNDIwMjNaFw0yNTEyMDYwNDIwMjNaMBgxFjAU
BgNVBAMTDTY5MzEwYzA4LWM0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu6XWF3BQzaZ1ynHucnxe0H9xGoKHf14TnX9iYR6FPJXT5jX2Q6erO7kW/
VNrodGqpdDbZnTeUjvyRcCuxl+EiS2Lf9Va6msy7e0toWAnFuzJqiXteVzSGuniq
Sp6VXDHquz0pt+sE6xuRkXZ771vLwRXUTsBcdB0WuB0u3nFOAe/fNFOoSVzj9K/q
4ujMLvwZUZi+hCAefWqBfA/kY9JltTXSOYk1FdoAGkgLmNXAMqYpcWoTNU4nAnr6
IWnWAgt4q/B+YmsOHpAzzekzxW2X/kLb2vjKKyDXKki/RQV9u3gh7jhzE/xy6WMB
qIqBgWvVGnH7G6tO9/BL3BOq6h+XAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUO48w
PnZ2/U7mU52DrfLLDRxxxrwwHwYDVR0jBBgwFoAUpqNDsn+fdirkHPfFvGtRFMKI
WncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQ0IxLzQyODBDRTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBL3BxTkRz
bi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3BxTkRzbi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDJDQjEvNDI4MENFNjAzNDg5MTFFRkFBMTg2NkEyNzYyRTk1
MUEvcHFORHNuLWZkaXJrSFBmRnZHdFJGTUtJV25jLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVMdUpGng3cd5DG4GslMIgwmDxq2PQ6MkQ
e/FXs1e7JkBrVDnFszH7+JHiqSbiN19hpBDKj3Odf3SsnGgEeVe7FErUG5EN7NPD
S99L6kts/SwFIa98M1/dyeOXWVPbs3CpS2xRhOi+3wxDUuOHo42kNpgF3aavT+jI
VZF3bC2OJYkgBeR9QDGbpj/J81IU1CXVkfp+wzY6WPR0WLr3m3E1i7qWkbNpLxqn
YrtnryL1Vk0MO0tRdKSAUIS6h8HaF9oXHf1BKbW59WeCHMRdaVfAa/3mjgKFUUFZ
xraIRpXPM+Fq+VmmHeMxMQWvu/w5/0De/3IFCoxR+a4PB8b0qkIc
-----END CERTIFICATE-----
Generated at Thu Dec 4 23:39:00 2025 by rpki-client