This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File: DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier: k0rtfNmEzh0IPTzjBgyVEZu+O36CeOLAythP2x4nQZM=
Subject key identifier: 66:37:3F:63:D8:61:99:C0:6F:52:F0:42:76:8D:69:D6:2E:01:03:29
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: 01A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number: 01A1
Signing time: Tue 09 Dec 2025 04:41:19 +0000
Manifest this update: Tue 09 Dec 2025 04:41:18 +0000
Manifest next update: Thu 11 Dec 2025 04:41:18 +0000
Files and hashes: 1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: c2Scp21VDGS0cabCgSxWlBAtVFbVOV6OYmqiTYvFwoM=)
2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 04:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Validity
Not Before: Dec 9 04:41:18 2025 GMT
Not After : Dec 11 04:41:18 2025 GMT
Subject: CN=6937a86f-7e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:e9:8f:fd:f9:19:31:32:2b:bf:3a:4b:6b:
aa:45:80:83:1f:d0:da:ff:a6:57:c8:b7:3d:d3:13:
11:76:d7:34:df:55:3d:53:23:8c:b2:ae:7b:9f:62:
e3:1d:d3:3f:d0:48:bf:d4:0a:59:b6:f0:5b:11:d1:
79:ba:3b:3a:75:e7:ef:7b:ce:cd:6a:f2:95:38:48:
64:f7:2c:03:96:2e:0f:ee:21:39:05:9b:2b:9a:58:
52:0c:bf:33:f4:6c:75:b6:eb:16:e6:53:42:71:7d:
c2:3c:25:31:da:37:33:88:94:f1:e1:63:1f:24:19:
d1:61:6d:15:a0:99:6b:a9:81:96:c1:2e:01:a1:03:
7b:f2:c8:59:dc:1f:1e:97:ae:01:a5:d3:b2:6b:3d:
46:c3:55:e9:be:9d:7e:a6:75:2c:4a:d7:b8:d5:ff:
2b:70:b4:39:14:61:e9:26:a2:e2:fc:ec:a8:d0:e6:
a7:6d:7e:34:43:dc:09:6a:e6:76:52:ae:6e:76:ba:
3d:a6:69:5e:f9:ca:f8:ee:2c:ec:16:53:eb:aa:6f:
07:c1:59:29:e7:36:a5:58:28:7a:8c:0a:ee:88:17:
ae:a0:c0:72:93:e7:15:d9:34:28:d5:88:32:85:74:
0d:c4:61:63:9f:66:51:a9:23:39:1d:76:d6:04:4b:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:3F:63:D8:61:99:C0:6F:52:F0:42:76:8D:69:D6:2E:01:03:29
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f7:5f:56:38:37:f6:d7:5d:98:30:d1:4b:ed:01:94:c4:30:
49:71:24:76:93:1e:01:a0:57:fb:85:23:65:0e:62:69:c2:4c:
2f:fc:e4:fd:e1:e7:77:fe:a1:41:29:01:1d:03:f4:e9:25:37:
1d:72:3d:b5:9f:a4:34:09:50:0f:b8:2f:c5:78:0f:3b:15:b5:
51:ee:5a:d9:03:91:cb:13:f8:2f:eb:d6:21:de:54:18:ec:7b:
69:e9:9c:41:be:f2:77:ed:71:28:4a:ba:33:fc:77:9a:aa:76:
ff:2f:9c:50:2f:04:d1:83:17:66:fb:fd:fe:ce:3e:b4:a0:a0:
9b:d0:3c:77:51:a3:f3:39:66:c5:18:ba:92:63:64:81:8c:a5:
54:02:d3:e9:28:69:d5:b9:f5:7e:11:d9:61:1a:7e:8b:7c:12:
e4:5f:1b:5c:82:30:ef:35:63:05:d4:d8:c5:13:e9:a3:4d:b9:
8d:8b:58:a5:10:e3:19:98:12:67:f5:04:f7:35:c3:03:97:09:
c0:75:17:ae:7f:5a:a4:5c:45:cb:0c:86:f8:b0:fe:71:dd:c6:
3c:6f:b5:7b:36:eb:f7:de:e1:11:99:29:cd:72:f0:09:98:f5:
ed:86:30:27:d7:e7:4c:e9:83:63:9a:fd:10:de:85:5a:4d:34:
4f:e4:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:23:50 2025 by rpki-client