This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File: 0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier: 6mJjn3ezu38v+c5dz4FHc2m9vwpy77+8X5P49Aas5yU=
Subject key identifier: 84:90:71:BB:F8:6D:D8:F2:46:A3:46:61:04:2C:5B:89:61:7A:08:66
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer: /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial: 0632
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number: 062D
Signing time: Tue 09 Dec 2025 02:26:49 +0000
Manifest this update: Tue 09 Dec 2025 02:26:48 +0000
Manifest next update: Thu 11 Dec 2025 02:26:48 +0000
Files and hashes: 1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: l2gKCR32Zw6tTNwNhVSILFctllBmgFg/pfsGyVvRXIc=)
2: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (hash: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=)
3: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
4: FE6EB5FE1A4311ED966281A5F1222468.roa (hash: lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=)
5: 7F3D996AEE3411ED84E7435C4AD9E6FC.roa (hash: HFYeFndb2JxxOdKSqCujEOpY8n28a0y4vmxd4LvSXs4=)
6: 35E0C666207711ECA71BBD26D8A014CE.roa (hash: +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 02:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1586 (0x632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Validity
Not Before: Dec 9 02:26:48 2025 GMT
Not After : Dec 11 02:26:48 2025 GMT
Subject: CN=693788e9-3257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:a8:63:2d:01:4f:a4:9e:48:c1:b6:26:41:
f2:2e:a8:9c:04:5e:4c:15:43:e7:51:17:a7:e6:eb:
78:d6:1c:0f:c9:b3:16:bc:88:e9:53:09:d3:8d:69:
0f:44:d3:05:92:e3:41:40:10:ce:9d:69:7e:39:50:
70:7a:2a:c6:49:c7:38:d1:21:c3:3b:34:55:b5:c5:
b1:9f:1a:aa:56:d5:62:c5:ca:d2:36:bd:25:1a:33:
83:77:b7:da:e6:91:97:25:f4:22:01:46:1a:36:00:
05:2c:ac:3a:80:b9:cc:18:c7:59:05:49:f5:87:90:
f0:1c:11:17:d6:3c:46:e0:e3:31:9d:a7:c7:31:ff:
9c:b2:03:9f:ab:f7:94:37:bd:63:af:9f:f7:66:6b:
d3:a4:f0:df:36:bc:28:da:25:62:cf:05:13:2b:77:
2f:f7:25:da:1a:aa:86:0c:30:87:3c:08:c5:1b:48:
d8:4f:9f:db:af:7a:c7:c4:b4:c9:5b:9c:11:c2:11:
f4:29:81:a4:86:98:15:f9:66:ce:ee:c1:ae:e7:1c:
17:1a:2c:37:61:b8:9f:c1:0d:58:2c:77:74:e9:89:
8a:df:72:22:9c:38:01:c5:32:54:09:ca:3e:96:13:
df:af:88:23:77:c4:56:e0:1a:4c:3f:ad:d9:d3:64:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:71:BB:F8:6D:D8:F2:46:A3:46:61:04:2C:5B:89:61:7A:08:66
X509v3 Authority Key Identifier:
keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:ce:d2:f2:81:0c:3e:4d:aa:29:ec:93:64:8b:7c:32:74:17:
7b:23:f8:ce:17:15:bc:fe:5c:c8:6f:de:0d:b0:b8:2d:e3:b5:
24:20:db:9e:93:af:05:25:26:87:79:a5:b9:bf:ce:32:ec:29:
64:10:55:4e:32:91:dd:dd:bc:38:a5:9a:6d:23:3e:db:06:a2:
9c:4a:d9:8f:99:7a:d1:4c:4c:4a:ca:5e:4c:7b:05:eb:31:37:
91:e4:36:9c:99:6a:29:be:ce:14:60:59:2a:f7:e0:f3:97:f3:
0b:ae:dd:66:2e:82:7d:42:25:1b:52:c2:12:93:9d:fd:d7:d1:
aa:fb:6d:61:de:42:24:64:3d:6e:32:3e:7c:a2:73:54:49:9e:
a6:84:4d:2c:85:8f:9c:52:bd:0e:7d:2b:29:08:5c:b2:d3:71:
a4:bf:7d:06:20:97:c5:a4:ca:5c:41:c7:cf:7a:19:d4:03:a7:
94:32:52:72:da:68:fb:2f:19:31:3e:33:07:44:c6:5f:0c:bd:
58:9f:a9:c2:b4:f2:d0:de:60:14:2f:54:56:9c:16:a3:ab:84:
8b:8d:0a:3f:44:46:4b:4a:09:e9:fb:fc:69:6e:1e:75:d5:08:
4e:3d:95:69:04:a6:61:e9:f3:ad:4d:2a:11:6b:fc:b6:9e:bb:
38:be:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:13 2025 by rpki-client