This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File: QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier: BHvmAjyI4V1JGo8f6H/xz7jveVuCGBOQfcBnPgKfYks=
Subject key identifier: 4F:3A:84:F1:94:6A:87:04:C6:42:CA:65:75:CF:CB:16:0A:F1:E3:05
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer: /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial: 18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number: 18
Signing time: Tue 09 Dec 2025 05:21:19 +0000
Manifest this update: Tue 09 Dec 2025 05:21:18 +0000
Manifest next update: Thu 11 Dec 2025 05:21:18 +0000
Files and hashes: 1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: FSoa6/4oCDj6PaYgLVPfMZryMGb+ezz67jO9k8fTJnk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 05:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
Validity
Not Before: Dec 9 05:21:18 2025 GMT
Not After : Dec 11 05:21:18 2025 GMT
Subject: CN=6937b1cf-8a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:e4:9e:d6:1c:18:25:83:5a:62:28:77:3e:
a7:d6:6c:21:24:0e:ce:f0:89:e2:66:cf:df:51:88:
6d:5a:6a:c1:33:fd:0a:90:a7:76:c6:ce:a1:71:41:
19:e5:a2:b9:1d:8e:c9:32:c1:77:13:5a:14:0c:29:
b7:48:0e:0c:06:a8:e0:3f:e1:fb:5b:73:30:0c:ac:
53:07:c7:15:d6:ea:ed:a8:f8:18:37:4f:7a:5d:54:
90:d1:58:55:38:91:5a:c6:fb:c9:99:9c:d8:56:1e:
ea:27:13:c4:82:36:17:24:c2:42:1a:b7:2a:c5:93:
50:db:a0:6d:b3:d6:e0:8c:06:fd:12:60:31:0e:4c:
2e:aa:b4:5d:5b:9b:d4:1b:75:3a:dc:36:91:06:be:
3c:c0:7d:b9:54:53:c3:d7:0c:9d:fa:b8:1a:2f:d5:
e0:f1:6a:3a:b3:3d:83:29:b3:4b:1a:2a:d7:03:57:
99:c1:99:77:5b:75:d2:58:2a:f8:bf:06:4d:07:04:
c1:e5:67:e5:95:74:10:cf:9a:55:24:5d:6d:57:82:
b9:b0:1d:1d:a1:9d:1a:76:bf:19:9c:17:d7:37:af:
cb:a9:95:fc:3a:61:0f:81:dd:bd:cd:09:40:8c:cb:
ad:61:e9:ca:e6:bb:b5:fd:5e:d2:a3:d4:07:bf:32:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:84:F1:94:6A:87:04:C6:42:CA:65:75:CF:CB:16:0A:F1:E3:05
X509v3 Authority Key Identifier:
keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:69:8b:ec:28:6d:e6:ab:15:b2:6f:6f:1b:17:9f:ce:6f:82:
0e:1c:7f:e5:ea:9b:11:8b:db:1b:8a:03:8a:86:48:0e:94:10:
dc:ef:31:3d:96:f3:8c:43:69:f4:7c:30:07:3f:41:2d:a3:66:
3d:da:26:5e:c5:92:6e:f6:96:68:74:8c:a8:45:25:80:48:f7:
f1:17:be:e9:3c:34:0b:1c:ef:be:c3:04:77:aa:1f:50:69:5b:
39:25:1a:24:14:83:66:fe:4c:08:71:7d:8a:8c:44:04:a7:ef:
2f:af:d5:85:13:ec:ab:a1:98:50:df:15:82:6c:5c:a8:94:8a:
6d:19:24:71:f7:c3:71:43:ad:23:a4:c1:df:31:ea:a4:8a:0e:
57:5d:3c:6a:cb:78:f3:20:51:ca:b9:30:be:e1:d5:5f:12:88:
2b:16:63:c9:37:ba:c8:02:af:e2:f3:27:7f:4e:f0:d5:a6:e7:
73:33:d1:31:9e:57:8b:23:b7:5b:a1:43:4a:f5:ad:ac:65:6e:
3a:94:13:4c:b9:42:f8:ab:08:e6:88:6c:97:eb:b9:ce:31:c0:
91:59:f9:ed:38:59:be:31:fb:9e:97:ca:c3:d2:56:91:75:72:
63:e1:10:ba:4a:92:f1:50:4e:0e:e4:95:30:72:2f:8d:20:85:
b9:f7:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:15 2025 by rpki-client