This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: OqCFyLJX8QW6jE+5DieAzOnkd/6ghiEcPTIrpujpxYY=
Subject key identifier: F7:D3:FB:92:00:21:28:8C:BD:C1:33:49:9E:B4:CA:54:04:A0:3C:4E
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 03FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 03FE
Signing time: Tue 09 Dec 2025 03:22:09 +0000
Manifest this update: Tue 09 Dec 2025 03:22:08 +0000
Manifest next update: Thu 11 Dec 2025 03:22:08 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: R++rSqwJRhOzbVy50gbvgwZvxMBc3OlhDEROj4zeNKk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 03:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Dec 9 03:22:08 2025 GMT
Not After : Dec 11 03:22:08 2025 GMT
Subject: CN=693795e1-54cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:55:11:3c:48:03:8b:c3:da:cf:f5:c0:53:
e2:e8:31:56:44:c7:c3:9d:ab:15:6b:85:0a:4c:bd:
82:a1:a3:59:3f:83:2f:6c:4e:12:b3:41:5b:67:75:
4f:a5:51:83:d4:dd:bc:4a:cf:5d:ca:96:d2:fa:5b:
eb:89:96:7e:76:b7:4d:29:8c:7d:ad:9c:47:8f:86:
ce:1c:44:18:52:82:95:e0:90:e1:05:e1:dd:14:50:
fd:f3:9f:e4:6b:33:d8:cc:c6:6a:fd:f3:95:ad:f3:
90:b1:26:9e:92:20:48:2d:84:9a:a2:06:10:47:c4:
6b:a1:14:df:69:bb:98:56:66:9e:51:18:81:5b:a4:
f3:88:07:b1:83:eb:70:fe:79:ed:2e:a9:21:c5:27:
ab:37:3c:e9:f6:fa:f6:53:86:53:97:65:ac:38:43:
cd:78:a9:dd:ce:f3:bb:e6:47:a9:7f:b6:1a:ce:88:
ba:63:bc:07:9f:f6:24:cd:9c:1f:09:4f:ef:40:d0:
5b:04:a6:f0:58:b7:ff:ae:20:88:8d:6c:bd:98:97:
de:a6:aa:11:c2:d9:98:a2:7d:19:56:b8:5d:00:fb:
e0:63:c8:8b:5f:fa:64:76:42:c0:97:e1:9f:c0:6b:
82:aa:ed:df:22:2a:17:b5:c6:80:cf:7b:5f:13:52:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:FB:92:00:21:28:8C:BD:C1:33:49:9E:B4:CA:54:04:A0:3C:4E
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b1:90:44:93:22:5c:f1:ec:12:9a:a8:ad:1f:67:3f:03:84:
54:9f:e2:a6:3a:c4:a2:f0:f4:9b:d2:86:1c:b1:9e:d5:57:c6:
2c:7e:16:1d:5a:32:82:3c:ea:e2:38:16:b1:1b:aa:5d:a2:54:
df:ad:59:45:fa:8f:ad:5a:e8:71:b4:52:50:7e:e3:41:79:69:
12:12:ed:70:02:32:75:a7:ff:64:62:4c:21:ea:12:61:53:e9:
d6:cc:7a:b8:16:d2:a3:f8:48:1d:45:d7:9a:14:dc:22:7c:77:
e4:da:00:ef:75:21:f6:92:39:ba:af:ec:0a:23:7e:da:5e:6b:
fd:a0:21:ed:26:64:ee:d5:37:0d:38:04:df:f6:f8:61:f8:ac:
d7:44:db:b7:9b:e1:e9:f1:2b:4c:c2:f8:37:50:76:ee:7d:f2:
91:f4:c6:b4:ce:2b:02:e0:bc:3b:bf:bf:d0:25:df:cd:9d:85:
c6:5f:e4:84:18:9f:5e:c5:7a:b6:33:e0:e4:fa:5d:3c:d6:9b:
36:2f:19:fc:58:93:94:98:ce:fe:70:f2:51:32:e7:c2:f1:d2:
6c:3e:71:5d:4c:30:2a:0d:77:37:ec:4f:c2:2a:f6:c0:c3:2f:
2a:95:4c:0c:28:d9:e5:fe:6a:2e:71:22:0e:0b:c3:13:ae:1a:
8b:20:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:53 2025 by rpki-client