This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File: mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier: 81JhS+UbnomvBIZy+CsQ7cCYcXdydfti5p2Z4eA87rA=
Subject key identifier: 3B:EF:F1:8F:86:16:5B:93:17:50:F0:0A:9F:97:8C:EE:A7:AF:9F:31
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer: /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial: 099A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number: 0995
Signing time: Thu 18 Dec 2025 01:28:30 +0000
Manifest this update: Thu 18 Dec 2025 01:28:29 +0000
Manifest next update: Sat 20 Dec 2025 01:28:29 +0000
Files and hashes: 1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: 27xI5sk0IkaN5XqOrRkyTl+ofAe8TwiXsqCkQSo/nJs=)
2: A59E099282C411F0B018AEC1DAE4EC9C.roa (hash: okBnUm/NcC2euNDAK0BM3ThQh/20GIpH4iqpfDhnEF8=)
3: E600EA8C82C311F0AA9237BDDAE4EC9C.roa (hash: fG/5xWCUdEM58O5TjC0L4Y26zDzPnoakqNic7vSKxmM=)
4: 193C239E82C411F090E870BDDAE4EC9C.roa (hash: aipTiaVnDtgCS5hSfDq+yj7qAJemAqvJkMKoIB8dgLA=)
5: A800754A82C311F09AF518BBDAE4EC9C.roa (hash: SAIigmdTDHDxOusEjUmretqLmVMcAl3gAWgtzTQZPeI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Dec 2025 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Validity
Not Before: Dec 18 01:28:29 2025 GMT
Not After : Dec 20 01:28:29 2025 GMT
Subject: CN=694358be-4ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:62:a9:0d:18:a6:76:03:fb:e2:73:39:92:
48:61:36:dc:08:2e:a4:dc:ad:a4:d3:e8:5d:bf:94:
13:92:b1:30:6f:72:2f:40:8b:63:ce:2a:8c:65:8b:
70:06:7f:02:36:80:d6:e4:fc:9c:f1:d8:b4:95:58:
5e:bb:d6:04:a3:cc:3e:c0:12:f6:f9:24:82:fa:18:
c4:29:d5:e4:a9:c7:47:58:aa:9c:79:40:68:50:7e:
61:41:ad:57:e0:7b:e7:39:4b:13:b1:c5:9a:7d:5a:
83:da:5f:71:90:38:99:ea:5f:27:d4:f7:42:a6:20:
1d:95:e1:ec:0f:1f:20:31:38:54:99:b3:1c:10:08:
b0:74:e3:1d:b0:1a:60:ff:17:ed:a9:76:b8:ff:8f:
d9:ef:82:24:8b:bb:47:ab:b4:e0:15:d6:b9:35:0c:
36:df:7e:65:6f:0c:51:1f:0e:ed:e0:d0:93:27:47:
8b:66:93:34:3a:ba:ae:e0:51:60:f8:a1:d3:2a:39:
1b:a0:cc:35:c9:7a:93:3c:0e:3b:e4:7b:88:ed:db:
01:c7:69:f7:b5:10:b2:62:a6:44:18:9b:99:f9:52:
7c:9d:9e:7a:a4:96:7c:95:a1:18:4f:34:92:f8:d6:
5f:13:83:d2:2c:44:c6:45:fb:06:fb:92:39:04:96:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:F1:8F:86:16:5B:93:17:50:F0:0A:9F:97:8C:EE:A7:AF:9F:31
X509v3 Authority Key Identifier:
keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:30:60:56:ca:ae:4b:ee:51:9a:2f:f1:23:e4:40:33:31:dc:
cd:4c:bb:b2:79:ba:d4:63:8d:34:89:f1:90:ce:a5:86:4c:67:
0c:93:94:d4:47:db:cc:6a:d7:25:cc:44:ac:00:3b:bc:5e:7d:
90:bc:a1:f2:eb:2a:b1:4b:ba:c3:5a:24:53:d9:0b:3c:56:3c:
99:4b:dc:22:bf:b0:12:90:7f:e3:bb:71:2c:da:a0:ab:32:cc:
26:71:03:0c:32:67:41:77:c4:bf:d6:04:09:9f:a4:ae:20:1e:
88:cc:28:14:01:9f:13:55:89:53:b0:18:b2:f8:34:b2:86:d0:
fd:90:42:63:4d:d1:9a:ff:22:b5:ed:bd:ae:18:a0:5e:a8:d8:
76:39:9c:ef:4c:68:06:cd:fa:ce:cf:23:9e:88:f1:2e:b1:a3:
1e:ba:aa:e7:65:96:c7:b2:f4:07:9b:6c:ed:d9:51:43:da:73:
27:2e:fa:5e:f3:79:97:00:08:d0:92:20:44:45:1e:79:93:12:
b3:0e:66:02:41:1b:6a:3e:7d:bc:8a:32:80:a1:bb:2d:d7:5d:
f6:23:af:50:37:02:da:d0:8c:15:43:dc:35:a8:4b:47:fe:4a:
42:0c:be:3a:7c:ba:54:b0:d5:47:1a:36:35:69:55:2b:e3:17:
40:37:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:44:56 2025 by rpki-client