This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
File: MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft (raw, json)
Hash identifier: sQ+cOCgtSD3GFqXk1PX4EuiDv0LwET1O0h5G0uiDwiw=
Subject key identifier: 72:07:5F:E4:CB:99:6A:91:83:4E:F5:12:73:10:C4:B7:91:A0:9D:BE
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 01DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
Manifest number: 01DA
Signing time: Tue 09 Dec 2025 04:32:56 +0000
Manifest this update: Tue 09 Dec 2025 04:32:55 +0000
Manifest next update: Thu 11 Dec 2025 04:32:55 +0000
Files and hashes: 1: MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl (hash: zuJyTNX6oM8HuMlHUEx0kFT1qsh8bjUNxJM+z5W1+DI=)
2: 26FC764A6FAC11EF8469D197762E951A.roa (hash: 2TO/cGj7sHRkn2ixg6Y+5Mtfx/C/Oewdnp7crBfamHM=)
3: B25B5AD66FAB11EF87286395762E951A.roa (hash: vwW65Nr7lh1XhWegso15AlnrJBnrQ6EFgBiPcl1lNqQ=)
4: D16713486FAB11EFBBD4B095762E951A.roa (hash: 8SVqRCmZw8s4aV8wC2vczr/9L/GkHhk4+czM91U/KkQ=)
5: ED98BED66FAB11EF9A20B695762E951A.roa (hash: q5xaFzCvVq0NWEpLqV6QDT0xbz7mypl+IUxKYjoGCf4=)
6: 099CAAA26FAC11EF9F68F695762E951A.roa (hash: zHFgniH7TocXhiVpBcZaQImwKvniIQ9de2Qqx9HFC+c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Dec 2025 04:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF, serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Dec 9 04:32:55 2025 GMT
Not After : Dec 11 04:32:55 2025 GMT
Subject: CN=6937a678-b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:a6:59:b1:99:c3:6b:24:2a:1b:9e:e8:79:
c0:b7:b5:d1:30:48:1c:af:9b:ee:31:40:4a:68:85:
76:f8:66:bb:76:dc:3b:7b:10:1c:5c:82:7b:b6:c1:
cb:08:6d:e8:f5:71:33:67:b1:df:b3:2a:a1:0d:63:
38:2e:5b:e6:a3:d6:37:de:1c:73:ae:be:42:0b:9c:
0d:59:bb:0e:f2:3d:0b:98:8b:c6:6d:22:d0:0e:b6:
8d:f3:5e:3b:01:8f:47:2f:65:f1:bf:be:72:c2:33:
ea:44:d9:58:98:36:72:cd:cf:54:4a:42:94:b5:a6:
30:98:70:59:c3:e8:2f:16:df:a4:63:0b:42:78:6f:
b3:fa:b4:71:b3:1a:66:bd:16:11:8d:38:e2:d1:81:
bb:0a:e7:e0:72:2e:d1:fd:4d:0c:d3:db:e6:23:c4:
f9:a7:09:8d:b2:d4:76:6b:d9:8c:ec:68:63:00:c9:
75:0a:2d:a3:72:a7:04:4c:a5:be:5e:18:96:9f:8a:
a2:cb:4c:e6:6d:12:6d:e9:55:3a:c7:ae:e6:d8:bd:
95:56:62:7a:0f:72:1c:53:45:8e:d2:03:77:2c:fd:
6a:1a:25:71:8c:d2:7a:af:a2:b4:6d:de:7d:bb:09:
9a:3c:eb:b8:4a:8b:09:8b:54:ae:be:90:e8:af:01:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:5F:E4:CB:99:6A:91:83:4E:F5:12:73:10:C4:B7:91:A0:9D:BE
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:7a:71:f9:59:d1:32:20:da:29:5e:ca:79:d4:00:e5:26:
8c:a0:e3:19:c7:7c:f6:dc:1e:49:3c:6d:37:51:a7:41:4e:21:
41:50:af:81:ca:51:c2:79:1b:bf:97:d2:8e:34:45:61:77:dc:
59:6e:64:b5:eb:c6:77:e0:d7:d8:ed:d8:e3:75:29:35:36:e9:
99:b8:13:53:33:d1:af:7c:94:c8:39:0c:19:02:09:06:0c:ce:
cd:7a:e8:b5:19:3a:ba:07:a8:38:d9:e1:c7:30:8e:a3:ef:e1:
9b:2e:4d:41:14:7a:d9:b9:c1:97:1f:01:d5:39:b2:3c:d8:c1:
29:16:26:d7:5b:98:0e:af:d2:87:48:e9:08:04:ba:48:59:67:
4f:76:5d:05:8c:e0:f9:99:5a:9f:46:d5:63:8d:6b:22:10:6d:
80:68:27:ff:f8:58:94:a9:ba:e8:d5:df:57:e5:50:12:3c:56:
6c:e8:3d:9c:37:63:e5:33:32:cc:fb:95:15:9f:37:10:62:10:
33:c8:2a:17:fb:72:b4:ac:82:ec:7d:bd:32:ec:5d:17:52:d4:
a1:27:ae:98:e8:80:b1:9f:0a:4a:27:aa:08:e4:07:e5:b5:37:
e0:c5:a6:15:1b:3b:a7:21:d4:37:60:ab:c5:58:38:54:e4:88:
43:16:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:26:21 2025 by rpki-client