This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File: x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier: 5tkCzk1x2MHMVP4T/uO8E1RDwd3H5mOQXhRSObaazI0=
Subject key identifier: CF:9C:E4:E6:EE:32:EA:AB:31:D1:D1:EE:25:39:DB:6B:7A:F2:0A:C9
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer: /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial: 0478
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number: 0473
Signing time: Tue 09 Dec 2025 03:08:25 +0000
Manifest this update: Tue 09 Dec 2025 03:08:24 +0000
Manifest next update: Thu 11 Dec 2025 03:08:24 +0000
Files and hashes: 1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: lz32WYm1aVcRAsLG5zGueCg1avCxkiZ9aBuMOBv3aME=)
2: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
3: B6F83C207D4111ED99A5A8DEF1222468.roa (hash: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=)
4: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 03:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Validity
Not Before: Dec 9 03:08:24 2025 GMT
Not After : Dec 11 03:08:24 2025 GMT
Subject: CN=693792a9-bae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:92:99:5e:98:bd:be:39:0b:39:c7:b7:23:
15:c7:c4:65:56:00:36:b8:4f:9d:ba:0b:f5:15:18:
b7:b3:4d:eb:3d:f3:fe:00:a1:fd:2a:d3:3c:c7:16:
c6:3f:48:40:11:5c:dc:c3:43:7d:7e:3a:22:42:70:
ec:9c:6c:f2:30:2b:2b:a9:52:67:1d:ff:33:16:c9:
79:2b:b4:98:fc:41:46:6c:1d:fc:01:9f:be:6d:4d:
20:77:87:3c:43:a8:81:e7:a2:f6:44:d1:33:bc:fc:
bc:a5:cb:e3:10:0d:43:6c:41:f7:27:f1:70:8c:ee:
73:ed:9b:d3:b2:6b:d5:2a:a4:81:2e:7f:04:e1:c2:
b1:d7:5c:27:b6:87:9d:ed:7a:d0:91:a6:40:46:90:
86:33:4a:40:81:b1:e7:ec:0d:92:b4:98:0b:94:fa:
8d:1e:be:68:79:e5:ca:91:15:6b:95:9c:d8:31:02:
ea:aa:eb:10:31:27:d1:df:59:aa:aa:4c:15:a7:c9:
90:16:11:b1:62:11:bc:fe:42:e7:8a:3c:38:6c:0a:
ca:11:40:c2:9c:40:41:48:49:75:c8:6e:3f:eb:ff:
97:25:5c:1e:6d:b2:8e:6c:ca:1d:92:ab:b7:9e:b1:
a7:f5:61:a2:b0:26:bf:c2:da:72:fc:29:3c:dd:88:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:E4:E6:EE:32:EA:AB:31:D1:D1:EE:25:39:DB:6B:7A:F2:0A:C9
X509v3 Authority Key Identifier:
keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:58:0f:07:16:da:ec:78:27:46:59:2c:f7:2e:de:eb:2c:56:
b8:07:87:80:01:dc:f5:a4:67:cd:3c:69:31:09:5e:01:c0:9d:
bb:1d:86:3c:b5:97:82:c2:bb:69:92:16:37:c7:c6:6b:eb:39:
f6:1f:44:8b:c8:fc:1f:a0:f0:e3:fb:f2:98:40:e0:d6:4c:9c:
58:75:c6:97:c0:18:8c:04:66:0f:d5:03:ca:b1:3e:f2:fb:e1:
40:e1:79:44:b9:be:b2:72:e8:e0:bd:ad:23:30:f2:ee:11:20:
e6:0e:10:b7:26:71:9a:5e:35:3e:26:39:86:df:e9:96:df:b4:
da:38:98:2c:2d:12:a6:be:f7:f8:3e:e0:e8:99:97:66:bf:07:
56:a4:dd:d0:bf:6d:ca:27:31:79:ec:ff:f1:96:f8:f9:a4:62:
80:7c:82:88:47:e7:8e:dc:90:fa:69:45:b2:c5:9b:2d:b2:5e:
91:ee:92:81:55:28:28:84:64:17:c9:8b:cd:f3:19:b0:08:94:
91:0e:af:87:74:ec:a1:fd:b8:ad:90:0e:59:e9:a6:1e:e0:06:
12:a6:19:4d:9d:34:59:88:fd:82:4a:f1:d8:8b:d6:26:c4:03:
52:69:65:09:e4:38:71:54:0f:ae:c6:8c:50:a0:09:41:6a:e9:
a7:1c:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:25 2025 by rpki-client