This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier: CP6Ou5wdrfAY+17g1W+RB1KgeXs5Z9DVVDIKYfI5TMY=
Subject key identifier: BC:44:8F:1C:4F:61:57:DF:3C:32:3D:85:05:64:EF:89:07:08:D9:98
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 0384
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number: 0381
Signing time: Tue 09 Dec 2025 03:37:28 +0000
Manifest this update: Tue 09 Dec 2025 03:37:28 +0000
Manifest next update: Thu 11 Dec 2025 03:37:28 +0000
Files and hashes: 1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: PRs5FQ5pZ94J09KJ8AkN5Neaf5x1WikT1NH+Jlsw/mI=)
2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 03:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Dec 9 03:37:28 2025 GMT
Not After : Dec 11 03:37:28 2025 GMT
Subject: CN=69379978-93d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:b2:79:14:6d:ee:df:83:31:51:9e:39:2a:
06:f3:3f:24:4b:df:a5:2c:03:36:c8:73:72:4a:27:
f4:a6:b0:33:dd:ce:41:ef:02:82:43:27:92:56:52:
aa:b0:d5:41:80:ed:65:98:2c:ae:c8:77:fc:45:ab:
06:4c:c1:36:ae:83:81:b7:08:b1:2d:56:e1:f7:a9:
2c:bf:34:59:5d:4c:72:ca:60:16:0b:69:c2:de:99:
11:11:85:4c:7e:13:88:8d:3d:04:8f:fc:40:2a:c7:
c9:53:c1:5c:e8:45:cb:53:33:07:f6:2b:8d:c2:5d:
f3:b8:1b:a4:73:7c:f0:1c:99:2d:96:28:79:eb:da:
61:0d:fb:49:27:bc:5f:80:58:3d:68:b7:14:a8:a8:
4d:a7:25:fd:b6:03:7c:30:53:46:9d:ca:b1:5b:f9:
a6:3f:40:36:85:f0:fc:96:be:7f:3c:e7:24:f5:07:
2a:ee:54:98:c6:a2:44:14:66:46:8e:bb:5f:31:0d:
28:13:5e:00:c2:24:b3:42:be:75:e7:5b:2c:af:c8:
b1:16:74:aa:ba:91:25:96:db:c2:51:fa:c6:fa:b3:
f3:7c:68:26:e2:78:35:96:ca:c4:4d:4c:fb:ba:e3:
3e:d6:30:01:76:2d:34:84:f8:ed:f3:ae:50:57:b1:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:8F:1C:4F:61:57:DF:3C:32:3D:85:05:64:EF:89:07:08:D9:98
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:a4:be:84:aa:e9:52:ea:0a:8b:44:c6:f0:e6:c4:1b:b7:
ca:a8:57:0e:f6:4c:94:b4:2f:47:b5:a9:75:4e:db:b9:a8:a3:
3b:d3:52:58:6d:11:61:ce:e0:5c:e9:72:dc:dc:7b:b8:fe:c9:
2f:b4:dd:47:ab:81:fd:e8:79:70:68:7f:b1:cf:40:cd:8a:dd:
33:f6:cb:8e:9a:86:42:93:91:f4:61:09:b1:f6:fa:4f:f1:9e:
5a:58:86:d9:73:01:62:d6:f2:19:57:0a:ee:ff:3c:92:e8:58:
f0:b5:5d:53:26:36:30:06:1c:ba:4e:cd:fb:0b:9a:bd:c7:53:
da:d9:3a:28:6b:ea:54:6f:c1:11:5e:2d:90:fc:ad:c1:45:8b:
81:66:d0:b2:64:f9:58:7a:a3:98:ec:ba:7d:23:1f:a4:4a:39:
dc:0f:f2:12:68:45:d6:a1:8f:99:a8:cc:a4:92:f3:f4:fe:ad:
ae:db:29:10:b7:fa:e5:a7:e3:76:79:7c:c5:79:22:53:6b:cf:
d8:2d:bc:31:06:d0:32:35:61:b2:da:28:0c:15:b2:99:7b:95:
d9:79:30:2b:35:e8:6b:a4:cb:36:db:4b:19:46:00:26:36:53:
ab:6d:7b:ab:27:a0:d7:4d:1b:1c:4e:df:f7:b5:75:83:d5:8e:
b0:58:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:43 2025 by rpki-client