This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File: ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier: 2S5/Txgp31J/1tr1VxymQUxd9k6G1vaSmW48wlL2UZc=
Subject key identifier: 58:40:36:9A:78:73:45:BE:2E:00:CA:A9:9B:B4:8E:D1:A2:C9:2E:CD
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer: /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial: 028E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number: 028C
Signing time: Tue 09 Dec 2025 04:08:54 +0000
Manifest this update: Tue 09 Dec 2025 04:08:53 +0000
Manifest next update: Thu 11 Dec 2025 04:08:53 +0000
Files and hashes: 1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: LlVbgQ4bNbRajcUDl+++nebKldQGenrqHBhjFQkGfPI=)
2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 04:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Validity
Not Before: Dec 9 04:08:53 2025 GMT
Not After : Dec 11 04:08:53 2025 GMT
Subject: CN=6937a0d6-0246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:5e:cf:91:26:88:b9:64:4e:13:4a:7b:e0:
eb:77:7a:09:ec:9c:7a:eb:f9:44:34:db:d3:d2:cc:
24:90:da:8b:95:3a:a8:7e:59:f4:a2:a7:e4:6e:31:
5d:73:3f:f9:d3:98:64:45:2f:82:9c:ad:49:0f:96:
da:a0:5d:d8:d2:fb:8b:b7:1e:a3:ca:09:4e:8e:2a:
1a:b7:9d:ce:2a:b4:8f:97:04:84:a8:7e:b2:f4:d3:
e0:2d:29:c6:0e:66:b5:29:61:1d:41:3d:9d:ec:5e:
3a:2d:a4:b7:cc:f6:e9:a2:cc:86:69:5c:5c:00:79:
a3:53:ef:ed:93:f3:03:3c:f7:b0:bb:3d:0a:62:42:
67:6e:a5:d1:77:a9:06:b6:f1:82:0c:03:f9:4e:90:
76:b3:51:55:ac:6b:7d:2b:4f:50:7b:da:a0:e1:50:
97:ce:d5:d0:fd:d3:0d:ee:76:28:32:3d:d6:33:e5:
f5:c6:6e:49:57:2e:72:00:67:71:6a:bd:9c:c7:b3:
e8:65:04:d1:21:87:70:8d:66:1e:0a:2c:f2:1f:29:
9d:9e:12:4a:49:38:70:d7:e5:81:6c:b9:7c:f5:f6:
86:26:d8:d5:73:dc:af:82:d2:18:dd:e5:4e:04:f9:
64:72:45:f9:15:92:5d:1f:2c:9e:90:b9:d1:34:3b:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:36:9A:78:73:45:BE:2E:00:CA:A9:9B:B4:8E:D1:A2:C9:2E:CD
X509v3 Authority Key Identifier:
keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:c9:be:44:a5:75:44:d5:f3:b8:2f:bf:90:30:bd:e1:34:d6:
eb:45:f1:5a:60:96:b1:0c:18:cf:6e:4f:d0:16:b1:7f:35:a4:
38:e8:e2:91:97:76:56:77:ee:94:0b:63:7a:64:4d:ac:ec:7c:
b7:bd:c3:8e:cc:00:de:5d:0a:33:83:d6:8c:6e:3c:cd:4f:4c:
16:96:0c:49:2e:89:fe:28:2c:eb:f1:a6:33:83:bd:59:d6:9d:
2e:20:1a:e8:ab:8a:47:72:a6:d1:a6:05:54:b3:66:63:b5:5e:
9a:96:e7:de:f1:a7:17:7b:1e:7e:f0:e3:43:be:7b:03:78:35:
09:15:c8:95:50:58:37:59:b6:1f:6a:5b:29:80:4d:ef:87:52:
53:54:c1:fc:9a:34:01:87:77:d1:31:70:27:8b:a1:ad:c1:53:
99:48:4a:6c:e2:53:f8:0a:fd:05:8c:4e:75:92:13:44:03:f3:
00:c7:8a:88:e2:eb:b6:7d:6a:d8:0f:58:13:1d:c6:8c:c2:0e:
6f:cd:5b:11:cb:42:03:3c:95:bf:61:3d:ff:bb:be:19:9f:7f:
7a:d8:9e:6b:91:4b:d6:33:0e:0f:4a:52:b9:2e:83:ce:6f:7d:
cb:19:52:13:98:be:12:1e:59:67:2d:b6:ee:f0:3f:e5:0d:dd:
15:34:04:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk2ODBBRjExMC8GA1UEBRMoQkEyRkZENUNFMzdDMDFDNkVEOTRGQjk1QzM1OEQ3
MEEyOThEQzk3NDAeFw0yNTEyMDkwNDA4NTNaFw0yNTEyMTEwNDA4NTNaMBgxFjAU
BgNVBAMTDTY5MzdhMGQ2LTAyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDH1l7PkSaIuWROE0p74Ot3egnsnHrr+UQ029PSzCSQ2ouVOqh+WfSip+Ru
MV1zP/nTmGRFL4KcrUkPltqgXdjS+4u3HqPKCU6OKhq3nc4qtI+XBISofrL00+At
KcYOZrUpYR1BPZ3sXjotpLfM9umizIZpXFwAeaNT7+2T8wM897C7PQpiQmdupdF3
qQa28YIMA/lOkHazUVWsa30rT1B72qDhUJfO1dD90w3udigyPdYz5fXGbklXLnIA
Z3FqvZzHs+hlBNEhh3CNZh4KLPIfKZ2eEkpJOHDX5YFsuXz19oYm2NVz3K+C0hjd
5U4E+WRyRfkVkl0fLJ6QudE0OwCtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWEA2
mnhzRb4uAMqpm7SO0aLJLs0wHwYDVR0jBBgwFoAUui/9XON8AcbtlPuVw1jXCimN
yXQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NjgwLzY3MTAxRjUwRTI5MTExRUVCQzlBNzI1ODc3NTQxMkU2L3VpXzlY
T044QWNidGxQdVZ3MWpYQ2ltTnlYUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VpXzlYT044QWNidGxQdVZ3MWpYQ2ltTnlYUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk2ODAvNjcxMDFGNTBFMjkxMTFFRUJDOUE3MjU4Nzc1
NDEyRTYvdWlfOVhPTjhBY2J0bFB1VncxalhDaW1OeVhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYyb5EpXVE1fO4L7+QML3hNNbrRfFa
YJaxDBjPbk/QFrF/NaQ46OKRl3ZWd+6UC2N6ZE2s7Hy3vcOOzADeXQozg9aMbjzN
T0wWlgxJLon+KCzr8aYzg71Z1p0uIBroq4pHcqbRpgVUs2ZjtV6alufe8acXex5+
8ONDvnsDeDUJFciVUFg3WbYfalspgE3vh1JTVMH8mjQBh3fRMXAni6GtwVOZSEps
4lP4Cv0FjE51khNEA/MAx4qI4uu2fWrYD1gTHcaMwg5vzVsRy0IDPJW/YT3/u74Z
n3962J5rkUvWMw4PSlK5LoPOb33LGVITmL4SHllnLbbu8D/lDd0VNAQC
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:31:39 2025 by rpki-client