This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File: zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier: RlwmUoqHUZmtLDk8Lt6mmKEesq3c9JVTFcF3qcZWj8I=
Subject key identifier: FF:DA:DA:BD:92:F0:43:F2:A2:B8:F5:9A:ED:18:61:7D:9C:54:DC:59
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 020E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number: 020A
Signing time: Tue 09 Dec 2025 04:25:06 +0000
Manifest this update: Tue 09 Dec 2025 04:25:05 +0000
Manifest next update: Thu 11 Dec 2025 04:25:05 +0000
Files and hashes: 1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: 9G1n0MDxHdy61V8+/nJ6B78gACL4eYPZhl2BSZ0itrM=)
2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 04:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Dec 9 04:25:05 2025 GMT
Not After : Dec 11 04:25:05 2025 GMT
Subject: CN=6937a4a2-cb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:17:4b:c0:d2:e8:13:3a:88:0e:26:be:78:
ae:c8:2f:60:39:0e:23:35:44:81:e9:1a:1a:0e:cb:
eb:1c:3a:18:e7:ef:57:5a:d2:5d:59:90:b9:cc:0a:
f3:9a:1a:f1:ad:9d:8b:9e:82:c1:e5:a4:d9:72:d3:
37:67:ee:eb:f5:ad:ea:26:c6:2f:c8:9a:3e:16:d7:
44:d9:83:53:66:0a:b6:51:fe:27:7b:56:36:26:f3:
80:65:d8:9d:00:da:9a:49:b1:42:4d:a6:d4:96:19:
0f:a7:2f:25:e8:6b:6d:79:18:b7:32:11:93:c8:c9:
6f:aa:29:18:e7:94:e5:09:52:92:e3:12:89:af:77:
3e:60:ed:e4:78:97:b7:1c:01:62:d8:2e:c4:e2:b1:
14:c0:77:15:cd:ab:f4:22:30:ac:c5:2e:0e:d5:33:
14:bb:a4:d0:b8:31:87:7a:6b:bd:55:50:d4:95:49:
17:f4:6e:f4:0a:af:d8:be:71:35:05:44:ba:0f:9a:
5c:9f:62:94:f5:ef:4a:69:e0:bd:23:74:a4:4d:17:
33:c6:10:5a:b0:24:1f:d3:89:dc:0f:0a:11:7a:5b:
56:70:ca:8a:f5:4d:eb:5f:db:94:f8:b1:89:15:27:
c6:98:6e:e8:c7:1d:bf:7d:a6:19:c8:19:7e:b0:57:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DA:DA:BD:92:F0:43:F2:A2:B8:F5:9A:ED:18:61:7D:9C:54:DC:59
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d9:f1:41:8d:09:b3:44:db:9d:9a:e4:12:c9:89:5c:d3:e2:
58:01:0c:5a:2c:46:59:55:bb:09:d7:a3:32:3b:99:0c:0c:57:
cc:5d:4e:10:4d:5c:bc:64:59:40:1c:a8:ff:6f:dc:0e:ed:88:
6b:7f:a7:b6:c1:e6:e9:61:9e:9c:dc:1d:bc:8c:35:ae:0a:ed:
29:97:53:8d:e9:29:fe:07:9c:67:3d:da:df:3d:f5:b5:1d:a6:
6c:7b:b2:73:22:d5:da:22:ca:4f:d8:60:64:82:0a:e9:54:48:
7e:23:84:88:58:79:e7:0d:31:cb:0f:58:e6:13:bc:ad:d1:15:
c0:a0:54:4d:78:a6:1e:e6:36:8f:a4:ef:ec:ff:cd:ce:d1:24:
d3:0e:37:86:93:84:19:b9:99:29:66:cb:67:d4:fe:3e:41:b7:
b3:26:d9:16:da:07:b1:3c:bc:75:04:85:6b:e3:09:31:f8:34:
f0:5e:58:38:cc:e4:9c:6f:9f:4b:2c:3b:bb:0e:8e:4d:59:a8:
0b:d8:96:db:ec:30:e5:d8:bd:cb:71:b6:6e:9f:5f:9b:2b:d7:
7d:2e:00:04:fc:d2:5d:1d:73:97:4c:9c:f0:d5:92:af:30:0d:
d8:75:88:52:d8:93:ff:8b:8e:af:42:ff:38:b4:56:f4:13:6e:
41:d0:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:20:14 2025 by rpki-client