This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
File: 2XFO6UZLDHro1GvxAWN4ShYPcXI.mft (raw, json)
Hash identifier: dKVRuws7FQDsEw7bPskwZPTmT4RWRYQEiCpRxNm5joQ=
Subject key identifier: 84:35:4C:5E:84:7A:62:22:31:21:A6:0A:18:DE:2C:65:2E:E2:3A:DF
Authority key identifier: D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
Certificate issuer: /CN=F365461DAF/serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Certificate serial: 73
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
Manifest number: 72
Signing time: Tue 09 Dec 2025 05:12:02 +0000
Manifest this update: Tue 09 Dec 2025 05:12:01 +0000
Manifest next update: Thu 11 Dec 2025 05:12:01 +0000
Files and hashes: 1: 2XFO6UZLDHro1GvxAWN4ShYPcXI.crl (hash: jDTz6rNyHpfo7gMjZA+I4ZXNPAW/y+0KC6FzlsTx41Y=)
2: 100568547E5E11F0A78B849ADAE4EC9C.roa (hash: PvZoBj2A7ENispwmai6nCrzzAnKO2XiSPBgvLBIB2QA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 05:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365461DAF, serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Validity
Not Before: Dec 9 05:12:01 2025 GMT
Not After : Dec 11 05:12:01 2025 GMT
Subject: CN=6937afa2-b7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:31:ce:60:bf:84:33:b9:b7:a9:54:6f:23:
da:83:46:f4:74:00:6e:0b:7a:06:3c:c7:92:4f:72:
30:ae:32:33:85:27:a7:40:77:5a:3b:95:76:34:40:
87:a9:e3:44:e9:a7:44:9f:57:43:f5:25:54:55:1d:
0b:92:88:2a:bc:ea:9f:17:cd:9e:c7:e2:9b:68:94:
52:4a:1e:06:5c:54:25:15:5e:b7:3b:5e:fb:3b:46:
81:18:49:73:9a:dc:44:a3:d1:3e:98:1c:55:95:d4:
1a:46:4d:06:4f:4b:03:14:48:c5:51:a4:b6:92:ed:
0e:bf:a3:49:a0:95:30:2c:36:da:fe:45:36:d6:e5:
f1:55:85:1f:2d:41:53:52:a5:78:fb:95:ba:08:91:
ce:9b:b9:5b:c5:69:dd:c2:c3:cf:53:25:c1:63:2a:
9d:91:49:36:0f:d0:03:65:95:53:ec:13:b7:15:84:
e5:69:09:02:c8:0c:dd:1b:8c:1c:43:50:83:0b:a6:
e9:3f:e6:c7:be:fd:36:94:92:b1:32:d7:6d:a2:4a:
b1:c8:81:3b:5f:7a:16:99:85:e0:fb:a2:25:13:44:
9f:6a:f8:7c:a8:0c:39:35:2a:84:b8:95:63:e9:65:
ea:bd:30:59:c4:16:1f:05:78:27:1b:90:bc:42:3d:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:4C:5E:84:7A:62:22:31:21:A6:0A:18:DE:2C:65:2E:E2:3A:DF
X509v3 Authority Key Identifier:
keyid:D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:24:2d:f3:b9:6d:b1:d0:c2:04:d2:d3:12:95:72:cd:16:cc:
31:5a:18:7c:7d:4d:a6:c2:23:80:c9:c4:b0:e1:4a:bd:11:61:
24:f2:53:e7:fd:8b:f9:0a:53:21:da:71:aa:ed:39:70:bd:f5:
db:d8:3c:4a:f1:a8:90:f3:17:8a:dd:52:e0:3a:69:ad:54:2e:
9e:42:c4:d0:42:a0:d5:e0:fb:a1:9b:36:a8:c7:43:70:00:a2:
c8:87:68:80:c6:78:df:a5:09:c5:ac:68:fb:98:2c:29:a3:dd:
bb:44:49:0b:da:f3:09:ab:1b:ef:81:a8:f9:04:d8:d1:11:2d:
1d:c9:a5:d1:6b:92:e3:16:44:c6:e2:f7:a0:df:31:22:56:21:
b7:01:dd:2b:2e:50:78:f6:5c:d8:5c:d4:35:a3:e6:1f:57:be:
20:54:45:44:30:38:c3:fa:00:25:28:f7:fc:40:38:0f:d5:b3:
0f:b4:3e:96:ba:3a:80:c0:b0:b6:f0:f2:42:65:13:97:58:53:
44:ae:e1:88:42:3e:4a:4e:97:c1:2a:b7:2c:e1:40:d7:54:e2:
63:10:ac:80:24:de:3e:c2:86:8d:72:f5:82:9a:cd:05:d6:91:
b3:f1:12:eb:27:0d:6e:66:02:79:8d:ab:ba:2f:a1:ae:2c:b1:
50:33:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:17:20 2025 by rpki-client