This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File: iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier: XBvFOuJ78aUg7F7qiAJH1CUjXaLsSEdlgp9zhN7mUVI=
Subject key identifier: 4F:29:28:C9:7B:A9:47:12:69:95:A6:A5:C4:AF:A4:4D:2A:3D:FD:50
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer: /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial: 04C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number: 04BF
Signing time: Tue 09 Dec 2025 03:02:03 +0000
Manifest this update: Tue 09 Dec 2025 03:02:02 +0000
Manifest next update: Thu 11 Dec 2025 03:02:02 +0000
Files and hashes: 1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: USQ9pR7QDKXchQqK0Y344ZWXbQypp/Hvy2FKDCKmMAU=)
2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3E3DAF, serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Validity
Not Before: Dec 9 03:02:02 2025 GMT
Not After : Dec 11 03:02:02 2025 GMT
Subject: CN=6937912b-bff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:88:a4:9e:1e:25:e6:8e:1a:07:db:82:64:
53:f2:5d:1e:f7:44:95:e2:cf:7a:7f:e9:e5:47:aa:
11:24:81:67:0a:0f:33:ee:6f:72:e0:16:fc:57:5d:
90:db:9b:4b:c5:92:cd:8e:95:41:86:e0:aa:d8:5a:
8e:79:35:3e:88:fc:38:c4:f6:0e:6e:01:ac:ab:ca:
6e:7c:30:f5:cc:8a:c0:64:17:5f:6c:6c:b3:45:01:
43:06:b1:05:d1:54:98:ed:89:41:b5:e5:ad:6a:6d:
e5:9d:2b:b0:80:89:79:96:aa:b7:38:3b:f4:4f:9e:
23:c9:78:26:61:93:88:dc:7b:ff:75:b2:5a:d1:7a:
f7:ba:7b:a8:54:a6:d0:41:d6:b8:f2:e2:98:2a:b8:
26:06:81:35:73:ef:bf:1f:6e:bf:64:f0:d6:47:c0:
87:eb:61:71:52:13:9f:7c:31:91:8b:f9:79:10:1d:
be:29:46:a0:c0:80:df:74:6e:a7:9f:16:38:5f:5a:
d1:d4:d6:f6:b9:c4:3b:67:6c:b3:67:b0:97:b2:57:
d3:1d:b3:56:90:68:da:b8:a6:4b:26:7e:c2:59:04:
5c:9a:c4:f9:67:9d:17:ef:04:83:d3:b4:ef:93:aa:
86:b2:b7:69:f5:24:5e:4f:f7:21:bb:02:bf:a3:0b:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:28:C9:7B:A9:47:12:69:95:A6:A5:C4:AF:A4:4D:2A:3D:FD:50
X509v3 Authority Key Identifier:
keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:ef:0d:8b:28:20:12:0e:08:c1:d0:61:ac:71:0a:b2:72:
41:45:fc:5d:51:5e:b0:77:06:19:45:5b:45:67:41:6e:c6:a1:
8e:a0:99:bb:fd:32:13:e0:ee:27:6f:9e:01:36:c2:a9:d9:ac:
84:eb:8f:74:16:81:73:52:d4:27:90:77:fb:46:89:e6:0f:8d:
fa:52:b4:9b:59:df:e0:42:cb:92:7c:a6:4e:94:5e:e3:c0:31:
9b:16:1e:d7:12:5e:64:b1:a5:00:83:28:70:59:b6:95:a9:44:
99:b5:5d:7e:b6:66:50:ce:24:84:67:fd:63:95:f8:7d:6b:68:
7b:85:b9:8a:25:e0:7e:f3:02:ab:1b:a8:1a:4d:0a:fd:42:16:
91:80:8f:9b:6c:d7:8d:a2:8e:e5:c9:0a:b1:80:d7:3b:54:f9:
37:54:51:05:f6:5e:36:c5:a1:ed:61:9b:1c:00:fc:2f:19:b3:
18:94:f1:65:ae:6e:ee:72:a3:2c:35:69:93:a3:d1:62:f1:89:
93:dc:d9:ab:1b:e8:4c:6f:9c:0c:90:6e:14:2c:d4:13:7e:02:
5c:d7:01:4f:4e:68:66:68:f2:f8:b0:6c:dc:a4:e4:ac:1d:ca:
45:2c:12:66:39:b7:5d:59:88:49:16:73:9f:7b:c1:23:e9:4c:
bc:c5:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:13 2025 by rpki-client