This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
File: ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft (raw, json)
Hash identifier: A4ZgQp5KHSp9rlgpCDx+GVToWsYnoIW9NQOjlx80vyI=
Subject key identifier: 7A:28:29:CD:86:BC:0E:CB:08:A9:7C:27:C1:1D:61:68:50:93:9B:41
Authority key identifier: 38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
Certificate issuer: /CN=F3674908AF/serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Certificate serial: A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
Manifest number: A0
Signing time: Thu 04 Dec 2025 05:02:29 +0000
Manifest this update: Thu 04 Dec 2025 05:02:28 +0000
Manifest next update: Sat 06 Dec 2025 05:02:28 +0000
Files and hashes: 1: ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl (hash: q3TQSh8fdMv3xwZhLsNB0LZ3WlEGZCaU8qhCKY8WyNo=)
2: 1F963ED8564511F0A6FF3AF2DAE4EC9C.roa (hash: X2krD4jdJ7pGQ3zXFaC89RNcw5IbwbOm7CUbTFo1if4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Dec 2025 05:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674908AF, serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Validity
Not Before: Dec 4 05:02:28 2025 GMT
Not After : Dec 6 05:02:28 2025 GMT
Subject: CN=693115e5-5664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:5a:22:75:fb:ae:52:af:04:ac:88:53:81:
55:94:35:43:51:ae:d6:93:5e:31:f5:07:f1:4f:c3:
5d:da:45:ef:c1:0e:3e:7d:d9:45:42:bd:83:64:e8:
93:aa:77:a3:3f:cd:ca:7d:99:7d:88:23:48:b6:97:
bb:d5:27:2a:b9:16:78:73:99:33:42:68:39:75:0c:
91:f0:d5:b4:09:24:c1:65:ed:4f:59:61:72:f7:bf:
82:72:e9:b5:07:31:07:2a:f8:f6:63:c6:7c:8e:2d:
b0:f2:92:7f:8c:7f:dc:db:6a:62:cf:44:6f:f2:93:
22:4f:0e:07:81:c5:02:db:27:b8:59:0b:57:e0:03:
3d:70:62:d3:a9:b3:a1:10:7f:1b:7c:70:38:12:ac:
fe:a1:69:59:bb:62:06:52:70:5d:1e:aa:b3:4f:b1:
b7:57:e4:9d:46:b9:02:9f:11:46:32:11:50:51:4e:
23:0c:00:c6:50:4a:1f:60:96:df:9b:41:6a:1d:e8:
d2:4d:ed:10:31:c6:40:e0:fb:8f:8a:58:38:95:b8:
6b:9b:0c:cc:35:83:44:cd:20:fb:f1:1b:63:d2:9a:
67:51:04:24:ae:9c:a8:05:5a:c1:93:73:db:84:d5:
6e:87:f2:66:1f:4a:b1:a1:8d:9b:f8:0f:6a:c5:77:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:29:CD:86:BC:0E:CB:08:A9:7C:27:C1:1D:61:68:50:93:9B:41
X509v3 Authority Key Identifier:
keyid:38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:dd:e4:a1:a6:40:fa:82:db:e9:7f:1d:c0:06:ab:e6:55:
9a:38:69:63:f2:18:25:56:ef:20:4d:6e:57:9c:58:3e:7a:84:
15:0b:84:68:d1:87:77:c8:c6:85:aa:79:b5:03:ef:62:dd:b3:
98:df:0f:91:e6:25:fa:7e:f0:dd:3e:a4:14:c5:8f:cf:e3:f9:
4a:44:83:64:f1:41:23:4a:e8:03:e1:fb:95:9e:ff:03:7f:58:
cc:a5:94:e4:2c:3f:39:36:d4:21:c7:63:7d:f5:c8:06:04:9a:
33:52:91:79:18:42:56:ee:9d:b1:61:15:d8:7d:36:0b:0a:83:
3b:98:7c:42:d4:c9:91:e3:85:f7:3f:75:31:4e:4b:c8:15:74:
da:71:f9:55:7d:58:43:6b:95:25:3b:09:02:10:c2:1d:5f:f1:
13:6f:a5:83:1b:a2:1e:ae:ab:08:0e:ca:2d:e1:d6:cf:63:4e:
43:8c:72:ee:6d:15:61:19:cf:79:e0:35:c3:ef:b7:5b:27:2a:
44:98:da:fa:7d:f7:e3:66:59:b6:e9:bf:f2:64:07:47:95:0c:
27:10:35:8c:00:79:45:72:2d:47:fd:cf:0e:5d:47:ae:e3:88:
f1:10:aa:88:b1:20:7d:54:37:c9:7f:12:6e:c1:81:df:3b:3e:
8c:cb:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:29:15 2025 by rpki-client