This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
File: GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft (raw, json)
Hash identifier: 5wvdOGsaj5q3zijbYYmKcNnyUbbkw9frZzqphu4p1NY=
Subject key identifier: EB:47:48:75:BF:39:5B:24:65:16:97:B3:D9:F0:61:69:23:DC:9E:5F
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Certificate issuer: /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial: 031D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
Manifest number: 0316
Signing time: Fri 19 Dec 2025 03:55:42 +0000
Manifest this update: Fri 19 Dec 2025 03:55:41 +0000
Manifest next update: Sun 21 Dec 2025 03:55:41 +0000
Files and hashes: 1: GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl (hash: /DK0FmxYn3o1/+IZrenWO5zaPakjEGdMg2UumsoFCVc=)
2: 03A4AAAE8A9311EE88C966154AD9E6FC.roa (hash: UhEZBD7+ZxP9l8n+vkehEuSNBmWkzQmQERKAHbI7sAk=)
3: 3B55469ADD5111EF99B2679F762E951A.roa (hash: 4buSDwLbI/rqa8c0nC/9yYisirrzvtwPW6bajd5/Dps=)
4: 399EC6ACDD5E11EF94E31475762E951A.roa (hash: gAeSPAZ0k2oD4rBDBXtSvp2FI22GocUMJrD0WxJ/to4=)
5: EF37A816D8EF11F0B7873D83DAE4EC9C.roa (hash: bWMppRJbwYhIJPdXrXCt5XruoowhYb5EoWsWNOjjVOU=)
6: 5191F380D50411F0BC245BECDAE4EC9C.roa (hash: afv1bndW7vihEyhjF6fKICZH7yzP+jyfZdeg4IjFUCI=)
7: 0FF374D2987311EEA3CBC46ED25BE465.roa (hash: BHH7zUUW9dkSFd6Vm0HYgvG7mdDbrxJsOem3Aruk+8Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEBD2AF, serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Validity
Not Before: Dec 19 03:55:41 2025 GMT
Not After : Dec 21 03:55:41 2025 GMT
Subject: CN=6944ccbe-fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:67:14:aa:e8:90:36:63:8e:a4:c1:ff:81:
a5:47:7a:d9:8c:93:6f:30:33:9b:6f:b3:4e:01:ce:
71:8a:ea:e1:f0:de:14:25:9a:08:ab:5c:61:d7:72:
6b:71:6f:d0:95:fb:a3:3f:b0:f3:6a:49:a2:7d:12:
51:ca:25:d0:07:c5:3d:23:65:61:00:f4:14:d8:6b:
bd:e7:20:47:4d:52:fb:d6:2d:b5:6c:87:ba:39:3f:
76:8d:1e:f1:ea:c7:b3:39:a4:45:0e:32:bc:7e:02:
d0:34:e3:94:ef:0e:4b:c6:01:8c:9a:73:b5:d5:e0:
8c:2f:02:21:6e:b5:ea:df:38:23:aa:1b:b7:3e:3a:
f3:d1:1a:5e:fc:a8:c4:6c:35:55:fc:8a:10:49:db:
d3:fd:86:0d:8f:7a:32:3b:55:57:9b:71:3a:8e:1e:
5a:2c:a2:cf:ec:58:7c:c5:55:60:6e:3e:72:c8:3a:
f2:75:51:dc:71:6f:1e:7a:5c:a6:95:8d:2d:22:f3:
9f:1a:dd:9d:94:d2:18:fd:98:fc:43:03:33:9b:14:
38:5e:93:b4:86:2f:90:7c:7f:b0:08:b4:f0:fe:05:
92:66:7e:65:b9:3f:7c:a8:58:10:ce:9f:8e:8f:15:
3c:0e:ca:ff:b3:c5:3d:ac:0d:53:ee:37:00:73:ab:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:48:75:BF:39:5B:24:65:16:97:B3:D9:F0:61:69:23:DC:9E:5F
X509v3 Authority Key Identifier:
keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:17:1a:0b:50:cf:e0:93:35:95:df:eb:0c:48:29:92:75:4d:
bf:8d:35:6d:e0:04:23:5d:11:74:ba:7a:78:36:18:ba:a9:73:
c8:65:55:50:c0:23:3b:c7:d2:06:78:4b:b9:34:b9:3b:08:8e:
92:0f:bb:65:ce:e3:a6:95:3d:f1:a8:86:ff:47:cf:0b:c0:83:
eb:df:81:58:8c:f2:00:1e:6d:f4:8a:06:3a:eb:f9:16:b4:2e:
ff:df:19:a8:1d:05:f3:37:f7:d9:f1:07:e4:81:52:50:31:c4:
27:74:62:d2:74:40:bd:d1:85:34:9f:89:b8:b4:ae:86:e3:84:
8e:9e:b5:38:fc:81:39:c3:88:f7:cb:f4:2f:cc:e3:67:70:1a:
08:4d:8d:56:26:d8:3e:6f:76:08:9b:dc:03:22:28:d4:8b:59:
64:f0:19:81:f6:a4:0f:53:c0:fa:7f:c9:0c:32:32:4c:34:74:
b1:1a:a7:ec:8d:2c:78:96:7d:cb:29:f7:3e:cd:f7:72:04:56:
67:b9:8a:62:70:f6:8e:60:a3:d3:37:10:71:49:46:6a:8d:0d:
2a:3e:fb:d3:4b:8d:a8:65:5a:d8:5f:0f:79:38:21:3c:3e:ed:
9f:ad:5d:71:8f:99:ea:71:0c:e1:32:37:5e:59:31:27:41:c3:
05:de:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:05:47 2025 by rpki-client