This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File: FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier: N24bUTE7PAh6h76dRN40EcybOwTi7es7bdBX1triES8=
Subject key identifier: A4:5F:78:C4:D4:3C:DD:DC:E6:63:D4:72:6D:0C:B6:C3:0B:9A:7B:B3
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer: /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial: 044D
Authority info access: rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number: 044A
Signing time: Sun 21 Dec 2025 03:12:58 +0000
Manifest this update: Sun 21 Dec 2025 03:12:57 +0000
Manifest next update: Tue 23 Dec 2025 03:12:57 +0000
Files and hashes: 1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: b4g3N+sx2l13f9Ff6vf/cjGSxCs+XlbPeOEIXBUDSmk=)
2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Validity
Not Before: Dec 21 03:12:57 2025 GMT
Not After : Dec 23 03:12:57 2025 GMT
Subject: CN=694765ba-8936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:1a:37:6c:ce:c8:2e:91:20:0b:f3:58:5f:
7a:8d:fc:c0:3a:32:d3:83:de:ae:b5:68:ba:80:18:
25:27:9c:23:bf:92:54:9b:c6:82:5c:ac:3c:6d:8a:
8b:73:41:43:8a:a7:10:5e:a2:29:90:07:98:27:f6:
bb:26:c2:b7:21:8f:41:e8:87:dd:fc:56:e4:a6:8a:
ff:06:b7:99:c7:22:9f:eb:57:36:b2:08:68:71:70:
2b:97:98:15:ca:d4:d1:3f:33:c1:3e:40:2f:9e:3b:
2c:29:91:ae:7e:11:c9:14:16:08:8e:06:aa:fd:b6:
46:d9:9f:72:82:e2:83:e7:1b:94:ce:a4:3d:c7:e2:
97:65:bb:1b:fd:5d:21:e9:17:52:1a:9f:a6:2a:3e:
12:d4:c1:44:b6:3f:6a:e2:a7:e3:bd:0e:98:6e:d4:
39:73:c2:95:c4:4b:89:e0:4f:a9:a5:c2:9c:fa:6c:
0d:e3:b4:fc:64:61:61:c5:81:10:86:27:f5:19:e6:
55:a7:9c:86:d3:1b:66:7a:10:72:cb:64:5c:e4:9b:
20:54:81:be:e0:df:d0:b0:86:cc:5c:db:17:2b:8c:
7a:6c:93:4c:6f:c4:d2:0e:43:8c:e9:a4:9c:50:4c:
1a:e6:0c:73:9b:dd:b6:0b:3c:e9:14:6c:2f:43:cb:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:78:C4:D4:3C:DD:DC:E6:63:D4:72:6D:0C:B6:C3:0B:9A:7B:B3
X509v3 Authority Key Identifier:
keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ab:fe:b9:13:81:44:3d:9e:d2:19:ee:14:08:9b:75:11:5b:
a5:58:e3:6e:7a:bf:86:4b:06:ae:3c:4c:90:d4:d1:1b:85:32:
bb:e4:70:e1:c7:0b:6c:33:a4:05:c7:a8:b3:ba:67:8c:41:31:
8d:7f:bc:ad:9f:de:2e:7d:47:08:9a:ad:d5:5c:85:55:98:0f:
1b:04:d9:a1:f3:9a:74:04:2e:08:89:df:4d:e3:3d:3d:c3:93:
d6:24:d8:68:95:ac:10:55:88:49:78:4b:9c:7e:a7:e4:df:3a:
f4:be:9a:6d:a9:b4:32:38:ce:c2:82:fb:d4:0c:ea:99:6e:d9:
45:23:f6:bf:ac:ca:e2:bd:7a:5f:92:28:2d:a1:ca:31:30:3d:
92:11:ef:a4:ea:62:65:fa:3f:f3:c6:0e:0f:0a:eb:6a:09:cc:
96:b1:2a:ee:e4:25:7d:71:93:c0:24:91:ac:c8:d0:3e:81:f2:
74:59:96:28:86:93:41:0e:58:ee:3d:26:bb:87:87:85:ff:ca:
b2:e9:c8:8a:ee:a6:6e:94:f5:45:9d:c2:64:ff:ba:2d:cf:b2:
00:48:11:da:83:1f:fb:c6:5d:e9:13:1d:91:d6:1c:67:87:89:
7f:fc:8d:41:58:d7:70:dd:df:9e:fb:2c:87:f8:ec:99:e5:bf:
cf:dc:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:52:32 2025 by rpki-client