This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File: hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier: kca0fpc9WxcNGuEHlNdYUO9EwnLCxkEXdlvrlOC2dPE=
Subject key identifier: 4C:39:9C:BE:20:98:28:01:AC:FB:FA:8A:D8:95:B3:0E:96:0F:6C:62
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 04DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number: 04D8
Signing time: Tue 09 Dec 2025 02:57:55 +0000
Manifest this update: Tue 09 Dec 2025 02:57:54 +0000
Manifest next update: Thu 11 Dec 2025 02:57:54 +0000
Files and hashes: 1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: 2jKHQFxnl3d2MShGrY2Mr8Xc3wCLPZpxgwhwVJRzQGY=)
2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 02:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Dec 9 02:57:54 2025 GMT
Not After : Dec 11 02:57:54 2025 GMT
Subject: CN=69379032-6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:2c:48:97:f4:54:aa:bb:83:56:97:cd:90:
72:08:7d:c6:89:b2:90:8f:ea:46:3b:74:5f:dd:d7:
15:3b:37:f3:7c:ae:ba:3e:38:dd:64:fc:25:50:62:
35:6b:3d:e2:d6:6b:e9:96:4f:90:04:c3:bc:12:c6:
37:01:df:6b:5d:fb:f8:01:87:62:a9:4a:8f:4b:c7:
dd:32:8f:8f:93:b0:1c:be:08:db:f4:51:96:b8:d2:
87:cb:4a:d3:d6:f2:b9:ad:86:93:10:b8:14:ac:84:
1a:95:92:3b:68:29:b3:de:1b:3f:93:6a:02:dd:43:
0c:3b:56:2f:62:a5:45:f0:d8:96:1f:a8:1d:d3:fb:
6b:36:3a:c6:c1:6f:b3:31:34:e7:b4:f2:ba:e1:16:
c9:9c:43:1a:0d:e5:9e:1c:e1:b6:88:93:d3:d9:09:
c1:58:d4:b7:3b:1e:47:f3:29:03:9b:c1:59:e8:d9:
39:77:3a:9e:5e:df:54:70:c5:aa:2c:54:64:3a:7e:
6f:50:94:f9:81:da:37:01:38:a6:11:e1:cf:74:ff:
1b:29:76:0f:86:d6:f9:b6:21:ca:d9:2e:f8:46:58:
6e:65:96:8f:1b:19:a9:be:48:23:a3:28:e7:86:dc:
95:d1:b0:43:b9:e5:44:d8:c3:dc:2c:e2:af:11:f5:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:39:9C:BE:20:98:28:01:AC:FB:FA:8A:D8:95:B3:0E:96:0F:6C:62
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2d:f7:94:5f:a4:e9:e9:49:50:77:b1:86:16:20:89:40:ba:
66:8f:43:c5:6b:56:20:41:35:ff:79:fb:9b:2c:46:d8:41:ca:
0f:85:48:07:cb:21:16:c9:eb:84:72:38:7b:9a:1a:89:af:c0:
21:6a:b5:66:b7:ad:e7:41:8d:5f:9f:1c:9c:99:70:45:ec:b2:
1a:a4:2f:2c:ca:7e:5a:98:82:cb:90:d0:31:1b:6e:60:25:54:
77:39:dd:bc:e7:72:c1:e0:f5:00:ce:ca:4b:24:24:cc:df:35:
bd:3f:66:a3:d1:fb:95:aa:5e:04:f4:f1:aa:b5:17:4e:b7:06:
ed:5e:ff:ae:16:69:8c:2d:f9:0f:ac:e5:7a:6f:38:50:fb:9b:
e3:0d:58:ed:49:1b:fe:a2:2f:2c:8b:31:ae:e9:50:b3:00:44:
68:e5:64:19:d7:2c:ec:ef:be:14:e8:15:42:bf:9e:65:d9:f7:
cb:e7:4e:02:10:f7:b6:0a:0b:78:57:87:bb:76:79:05:a3:64:
73:7a:68:a9:bb:51:e1:94:97:78:74:c0:cb:92:6b:5a:dc:d7:
8c:ba:0c:d6:5a:0e:78:f8:ea:5c:4c:90:c0:8a:7d:ec:30:5f:
a8:38:b9:c3:41:eb:65:6b:9f:73:52:3f:5b:69:18:d2:f2:ad:
f4:4e:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:56 2025 by rpki-client