This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: ROX49IpBKv1J2PyZxXkT+OOVFNQMmN/0q8pQ4lF8+58=
Subject key identifier: A9:49:35:81:5D:38:62:DC:EA:B1:B2:E5:2A:55:9F:A4:8F:3E:2F:F5
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 0987
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 0986
Signing time: Thu 04 Dec 2025 01:25:09 +0000
Manifest this update: Thu 04 Dec 2025 01:25:08 +0000
Manifest next update: Sat 06 Dec 2025 01:25:08 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: lyCtBEP4Xf0m/w3Jf7v43roREQJRh3Fnp/hN1JDwZCM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Dec 2025 01:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439 (0x987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Dec 4 01:25:08 2025 GMT
Not After : Dec 6 01:25:08 2025 GMT
Subject: CN=6930e2f5-0785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:cf:00:b9:1a:97:c5:78:12:03:70:9d:6f:
07:38:4d:ff:d4:46:a7:35:f5:91:74:f0:f9:05:ba:
77:63:f7:ea:76:b1:69:2c:29:77:98:d9:16:3d:45:
4f:27:77:49:4f:27:8e:d0:f9:36:00:e0:86:d3:89:
c5:cc:97:b4:6e:33:9a:f1:c0:e7:57:85:56:82:3e:
5e:b4:08:b5:77:c3:61:d6:ee:f2:ed:4e:6e:57:3f:
61:c1:4e:4f:e1:b8:a6:fc:c0:93:55:2c:30:83:85:
23:92:49:ce:30:73:84:13:0d:46:5c:6f:25:ce:3c:
4a:30:2c:cb:f4:49:59:fb:32:bb:22:a1:50:bc:7c:
87:93:43:fa:4a:ec:42:eb:1a:f9:08:bf:6d:60:4b:
11:7b:81:ea:cc:41:2a:35:a7:b0:48:98:f2:bc:df:
30:8d:a3:70:be:8f:ba:3b:07:ef:32:62:61:90:19:
53:b7:28:b4:cd:a0:6d:e9:9f:58:73:c0:21:ca:2d:
4f:47:2a:22:bd:c3:6a:fe:be:c9:ce:98:f3:5b:b3:
f6:68:af:da:3c:c9:53:62:08:0f:83:62:4d:40:9f:
3c:17:8e:39:fa:d5:db:78:68:85:49:d1:98:84:a4:
18:7e:34:b6:42:e5:0a:d6:b3:a4:35:c9:9f:b8:91:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:35:81:5D:38:62:DC:EA:B1:B2:E5:2A:55:9F:A4:8F:3E:2F:F5
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b0:3f:df:82:a1:07:78:14:5c:9c:30:64:2d:87:a9:54:4e:
f3:0f:54:37:b9:0c:69:3e:14:2e:90:f6:62:fc:17:a9:f6:af:
c1:28:f8:12:ae:72:6e:92:11:96:53:44:ca:1c:97:8a:51:37:
0c:1d:14:39:43:eb:53:e7:45:e1:25:af:2c:4f:35:1b:04:12:
2c:91:2b:5f:f6:ef:f7:83:a9:26:90:25:dc:c1:44:66:b5:79:
67:50:31:ae:8d:49:4a:6e:0d:84:a9:04:ac:93:c0:7e:7a:7c:
d2:c0:ca:5f:77:b0:04:23:03:22:6c:2b:85:38:aa:d2:33:a5:
3c:80:d9:2c:c1:64:1b:97:b1:ae:c7:03:e5:a5:a1:b4:11:d5:
40:16:58:41:b3:e6:cf:b0:a0:f7:62:c2:4f:fe:20:8a:a5:f4:
bb:fe:60:d8:14:50:ca:8d:91:f2:85:d7:48:7b:a2:ab:4c:2f:
0d:45:53:05:6a:9f:bd:ed:e1:97:a5:22:7d:1f:77:6a:94:56:
ed:ad:f4:48:b8:93:7a:f3:12:2d:2e:d4:41:80:50:ac:c2:aa:
fc:e0:7b:2d:a2:6e:a1:33:38:a8:2a:46:ca:90:10:4e:07:29:
81:c6:2c:22:2e:31:aa:dc:8e:f7:a3:81:21:f8:7c:fc:eb:08:
0f:7f:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 23:36:55 2025 by rpki-client