This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
File: 5GfUsiPAgVQKkfIRfW5UihuCiew.mft (raw, json)
Hash identifier: EkOiBIUgDEG4Al1JVwVmQTBKcyYCeGuRv+eUXmqBSHE=
Subject key identifier: 6B:2D:8B:48:70:9A:82:D9:C5:05:24:7F:32:C7:B0:ED:C4:91:9D:8D
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Certificate issuer: /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial: 0538
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
Manifest number: 0534
Signing time: Tue 09 Dec 2025 02:46:20 +0000
Manifest this update: Tue 09 Dec 2025 02:46:19 +0000
Manifest next update: Thu 11 Dec 2025 02:46:19 +0000
Files and hashes: 1: 5GfUsiPAgVQKkfIRfW5UihuCiew.crl (hash: iQToBlSdj1EU5+vsRFzVNbagPbjVj6n/617AV2noACA=)
2: 04EDE310BFC711F0A31BB5E6DAE4EC9C.roa (hash: 0QychqzlMIzWQM6dar4QBq1yYOt0ya+7aLt7+P0MnUM=)
3: 52526144E26C11EC955D66B3F1222468.roa (hash: wsdzu4KpztjrJvczumWwqzotF/Rua7W27u+H+9K+kyE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 02:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Validity
Not Before: Dec 9 02:46:19 2025 GMT
Not After : Dec 11 02:46:19 2025 GMT
Subject: CN=69378d7c-7f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:b8:19:86:03:65:26:ac:66:80:c0:2e:3f:
08:11:e5:81:15:20:a6:1a:0f:57:88:0c:10:d0:60:
2a:0a:7a:68:1b:dc:42:af:49:90:82:4b:c4:c1:20:
93:4b:3a:a1:d7:5a:af:d2:71:ef:f3:14:3d:9e:42:
79:cc:20:34:61:0f:68:d5:0b:f1:58:18:03:27:8c:
1e:98:7c:22:df:19:40:bf:a9:3b:22:08:43:e9:e1:
be:99:b1:03:68:37:9b:05:b6:d0:d5:de:2b:b0:5f:
d0:ce:ba:6f:b9:90:a1:33:5c:c5:ab:1c:02:90:e8:
4b:ac:ef:91:33:a6:a4:5e:54:bf:8b:a0:42:02:d7:
a7:dd:b9:c1:ce:56:b3:09:94:86:a1:ab:a8:88:c7:
8b:88:03:63:2a:a8:7f:8a:f7:66:d1:30:79:12:84:
ed:b1:e3:50:02:13:d5:d8:2b:99:ab:d9:3f:2a:a1:
b6:34:a9:51:94:28:c6:b0:1a:e4:39:70:be:82:5d:
88:f1:17:a2:61:52:33:d7:e9:de:e3:e0:70:bf:64:
82:c2:6c:88:1d:48:b1:dd:95:49:a3:0c:f9:15:bc:
d4:1b:d9:cd:4a:4f:45:fc:25:94:45:7f:95:fd:8c:
ba:30:fc:27:d1:57:f3:98:30:a4:e3:74:3d:c4:2c:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:8B:48:70:9A:82:D9:C5:05:24:7F:32:C7:B0:ED:C4:91:9D:8D
X509v3 Authority Key Identifier:
keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:5b:47:2d:ae:ab:e6:fb:c0:8d:ba:fb:e7:f4:90:e6:48:
8a:11:ce:da:e9:b3:87:74:79:b1:b1:56:67:34:64:82:fe:f6:
17:e7:f6:d9:2b:f4:e3:9c:cb:74:cb:e8:7b:57:f0:64:a6:10:
02:67:9d:7c:32:41:ee:af:4c:78:8e:cc:a0:c6:b4:1f:28:68:
62:31:6d:f5:d5:43:b5:bc:1a:96:80:61:a4:91:4a:d9:d3:f5:
d4:42:98:bf:3d:61:72:9a:c7:70:78:4f:e6:aa:d4:1c:9b:0c:
d9:c8:8c:88:61:c1:ba:72:a2:3f:be:4e:0e:7f:18:f6:21:0d:
09:31:f1:55:14:85:2a:6d:2d:9c:d9:2f:5d:fb:0d:18:bb:1b:
8b:b6:60:a3:86:6e:e6:9a:a5:15:84:85:1d:f8:6f:97:1b:4c:
04:d6:fe:19:1e:74:b8:d0:29:0d:de:08:71:f4:33:f6:0f:dd:
63:e0:60:67:c1:f8:f8:93:10:a9:8a:d2:c6:c9:ac:79:cb:55:
6c:39:92:53:0a:88:af:b0:d7:45:f7:c4:f9:43:03:a1:a2:d5:
2f:cc:1b:13:d8:c4:60:e6:31:da:d8:b1:c2:83:e9:13:70:b3:
97:be:3f:91:7c:8c:ef:1a:be:84:6a:ac:e9:39:ea:89:3b:7b:
fd:c1:ed:42
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJBNjdBRjExMC8GA1UEBRMoRTQ2N0Q0QjIyM0MwODE1NDBBOTFGMjExN0Q2RTU0
OEExQjgyODlFQzAeFw0yNTEyMDkwMjQ2MTlaFw0yNTEyMTEwMjQ2MTlaMBgxFjAU
BgNVBAMTDTY5Mzc4ZDdjLTdmMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaELgZhgNlJqxmgMAuPwgR5YEVIKYaD1eIDBDQYCoKemgb3EKvSZCCS8TB
IJNLOqHXWq/Sce/zFD2eQnnMIDRhD2jVC/FYGAMnjB6YfCLfGUC/qTsiCEPp4b6Z
sQNoN5sFttDV3iuwX9DOum+5kKEzXMWrHAKQ6Eus75EzpqReVL+LoEIC16fducHO
VrMJlIahq6iIx4uIA2MqqH+K92bRMHkShO2x41ACE9XYK5mr2T8qobY0qVGUKMaw
GuQ5cL6CXYjxF6JhUjPX6d7j4HC/ZILCbIgdSLHdlUmjDPkVvNQb2c1KT0X8JZRF
f5X9jLow/CfRV/OYMKTjdD3ELCAvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUay2L
SHCagtnFBSR/Msew7cSRnY0wHwYDVR0jBBgwFoAU5GfUsiPAgVQKkfIRfW5UihuC
iewwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQTY3L0IyMDA5MUNFRTI2NzExRUNCQzgxM0ZBNUYxMjIyNDY4LzVHZlVz
aVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVHZlVzaVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJBNjcvQjIwMDkxQ0VFMjY3MTFFQ0JDODEzRkE1RjEy
MjI0NjgvNUdmVXNpUEFnVlFLa2ZJUmZXNVVpaHVDaWV3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA671tHLa6r5vvAjbr75/SQ5kiKEc7a
6bOHdHmxsVZnNGSC/vYX5/bZK/TjnMt0y+h7V/BkphACZ518MkHur0x4jsygxrQf
KGhiMW311UO1vBqWgGGkkUrZ0/XUQpi/PWFymsdweE/mqtQcmwzZyIyIYcG6cqI/
vk4Ofxj2IQ0JMfFVFIUqbS2c2S9d+w0YuxuLtmCjhm7mmqUVhIUd+G+XG0wE1v4Z
HnS40CkN3ghx9DP2D91j4GBnwfj4kxCpitLGyax5y1VsOZJTCoivsNdF98T5QwOh
otUvzBsT2MRg5jHa2LHCg+kTcLOXvj+RfIzvGr6EaqzpOeqJO3v9we1C
-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:16 2025 by rpki-client