This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File: xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier: OpKf/ZF2C6afhQykiBfp1/sD7+wAqHsBKb40G34UCnw=
Subject key identifier: 9C:28:D8:E8:1F:7D:38:63:CE:D3:7D:7D:DA:81:F0:95:70:7F:BE:66
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer: /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial: 064F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number: 064D
Signing time: Tue 09 Dec 2025 02:22:31 +0000
Manifest this update: Tue 09 Dec 2025 02:22:30 +0000
Manifest next update: Thu 11 Dec 2025 02:22:30 +0000
Files and hashes: 1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: 3WyTsPKqccQ1AtjWlwM3e8TtOuLvfNKlqjSfrVKZGX4=)
2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 02:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Validity
Not Before: Dec 9 02:22:30 2025 GMT
Not After : Dec 11 02:22:30 2025 GMT
Subject: CN=693787e7-47a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:4e:d1:bd:d3:c9:16:e6:e2:44:b5:9a:db:
4d:49:c6:21:20:66:94:a1:26:1a:73:bd:cb:f0:43:
65:e9:05:ed:e8:7e:4d:e6:8c:c7:99:4c:df:c7:a5:
af:78:22:28:2f:0c:6a:5c:42:ba:0c:fa:90:2b:77:
d1:1b:a3:47:d7:20:a0:87:20:59:55:64:62:2e:bf:
52:33:46:8a:3d:68:f4:bc:7d:ae:e7:c9:ce:16:09:
93:6f:b1:2a:6c:ba:3d:f8:b5:9b:76:9a:8b:97:13:
3c:0d:02:2d:d0:be:a4:1d:3f:ae:dd:23:b0:d4:c4:
60:69:7b:aa:db:77:a9:b4:1f:39:ce:36:75:fa:02:
dc:b1:3c:1a:df:34:fb:00:67:7f:3c:87:b5:1a:58:
79:43:66:37:7a:f4:30:ff:5a:fa:13:31:74:6b:7c:
ba:8a:34:c2:c4:50:d6:3c:3e:13:e2:67:f7:28:c5:
35:02:c6:94:e9:9a:00:b6:19:ba:f8:74:9a:42:06:
cb:75:0f:32:d0:f3:1d:4b:38:a8:b4:9e:6d:64:92:
fa:95:12:0f:df:75:29:7c:f9:47:ae:3d:0b:1b:88:
09:f5:82:2a:4c:c8:91:a5:ba:73:0b:b3:b0:3c:24:
bb:de:7c:4c:6f:12:b1:19:0c:fa:5c:86:ad:01:05:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:D8:E8:1F:7D:38:63:CE:D3:7D:7D:DA:81:F0:95:70:7F:BE:66
X509v3 Authority Key Identifier:
keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:e9:ec:31:92:2c:d6:5a:66:38:5e:5f:ee:31:e4:bb:e9:
26:8f:8b:b6:e5:88:5e:a7:36:97:f5:84:2a:3d:36:26:53:24:
ab:80:b9:8d:4f:2b:73:0f:3e:17:cd:6c:bf:03:77:09:48:db:
e6:ae:36:97:81:33:5b:09:d5:da:9d:6c:f0:99:c1:be:f0:51:
cc:82:0d:77:7b:63:d3:09:dc:fd:fa:db:60:a0:96:7d:70:2a:
39:ee:a4:db:2f:ec:7b:92:a2:18:22:3d:e1:7f:7e:fa:18:47:
59:bd:ae:7c:a9:81:bc:4f:aa:ea:77:e8:d7:76:d3:65:83:4b:
30:7e:cb:4c:64:e1:2d:ce:6c:cf:08:95:07:3a:5a:19:94:62:
55:63:04:8c:71:63:0a:86:56:e0:35:8b:d6:ac:25:f8:3d:1d:
95:f2:e9:20:ad:ef:21:07:ef:21:d1:0d:d4:15:45:55:f3:f1:
ed:45:14:3b:47:e8:86:43:60:78:eb:6f:73:14:98:eb:95:df:
47:d3:24:97:fa:18:b9:45:ce:47:1f:d8:d5:e0:62:c1:8f:67:
5e:e6:2d:40:f1:ba:74:59:90:c8:f5:f8:b2:09:44:39:a4:6b:
c2:2b:b3:eb:e5:10:8b:d0:f7:b1:d2:ab:58:7e:0d:dd:6d:c8:
73:b0:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:24 2025 by rpki-client