This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier: EkJFYWy9QU6qu2i1N4ZAwjkMVM6tyNsiByxRwhA3Tk0=
Subject key identifier: 78:51:A0:88:E9:FD:0C:9E:E1:3C:05:92:B3:4B:8F:E4:7D:B2:2B:55
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer: /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial: 0379
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number: 0376
Signing time: Sun 07 Dec 2025 03:38:17 +0000
Manifest this update: Sun 07 Dec 2025 03:38:16 +0000
Manifest next update: Tue 09 Dec 2025 03:38:16 +0000
Files and hashes: 1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: VvYnhAwFr3SSOSgl9wXc5xq14pE+Xw3wO7TI4n3erFY=)
2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Dec 2025 03:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Validity
Not Before: Dec 7 03:38:16 2025 GMT
Not After : Dec 9 03:38:16 2025 GMT
Subject: CN=6934f6a9-da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:7b:95:79:25:03:ef:79:4a:82:5d:29:99:
30:21:da:d9:7f:29:e5:61:fa:56:77:5e:5f:81:34:
8a:64:f5:56:57:ed:df:7d:fa:56:0c:1a:ec:ab:df:
57:77:36:b1:08:e9:ba:5c:8d:86:3f:36:c1:e7:62:
d9:d2:22:14:58:1f:43:78:e9:19:a5:f0:47:ac:6d:
8b:eb:db:de:46:63:53:92:6c:26:5e:de:47:37:72:
52:91:29:de:8e:4a:69:9f:00:fd:b5:5d:e0:a2:94:
98:b8:e9:9f:ae:64:2f:79:47:9d:0a:e4:a9:35:9c:
82:0b:24:80:84:f2:14:c7:82:49:53:85:eb:42:18:
b1:6a:83:1a:7a:da:ba:97:30:f2:80:4d:08:fa:dc:
79:d9:91:c9:8e:e3:63:6e:da:e8:87:e4:81:6c:be:
62:ad:2e:f4:6b:d0:ec:7a:2b:75:2c:dd:10:d0:09:
a1:01:21:aa:55:a8:f0:7a:cf:91:f4:ac:3f:b5:c4:
bb:f9:f4:9a:10:ac:eb:69:98:19:92:08:fb:07:16:
ec:39:76:ec:95:7a:22:c9:47:94:eb:d1:b3:e3:ed:
ba:2e:a5:e5:32:26:b3:4a:f2:14:37:e7:26:40:5c:
87:6c:77:0c:7e:5c:4d:29:eb:c9:e7:6e:bd:66:12:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:A0:88:E9:FD:0C:9E:E1:3C:05:92:B3:4B:8F:E4:7D:B2:2B:55
X509v3 Authority Key Identifier:
keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:3a:32:59:50:76:bc:d4:ba:f6:33:71:58:65:1a:59:db:
8a:76:fb:d7:14:c2:8f:8b:c1:29:de:c5:66:b3:c6:e7:1d:bf:
94:ac:00:20:f0:bc:75:59:02:79:b8:f3:e9:fe:d6:f1:d3:e2:
18:a4:f9:90:25:42:e5:e9:f6:a8:72:15:dd:45:85:dd:db:2d:
9b:38:9c:c2:a0:42:49:a6:29:bd:e0:c1:de:3c:20:3a:ef:95:
c0:f2:04:bb:53:c4:da:35:c2:45:f0:17:31:eb:4e:1b:ba:bc:
8e:bc:b3:0b:e0:3f:f3:f5:93:2e:c7:d8:fc:52:2c:f4:57:84:
e3:2c:61:28:e0:51:3d:3e:c0:40:9b:ba:8b:36:79:0a:07:bb:
59:ef:e3:7f:50:fd:3d:1e:cd:b6:22:6c:2e:02:73:f9:f0:ef:
5e:4d:9e:58:5f:11:75:d0:00:3a:b3:4c:d6:a9:ee:47:c5:8f:
9a:67:81:ea:b9:4c:92:b7:06:04:53:62:e0:45:59:27:cc:d1:
e1:43:f2:f7:1d:9b:a8:04:81:b6:b2:ab:57:30:c8:0a:e6:55:
c6:f3:81:e8:6f:dc:30:d5:0a:d8:91:75:d1:a1:04:3d:0b:2c:
17:fb:24:9b:42:ab:4b:18:b7:de:d1:bc:22:9d:ed:0e:39:13:
95:ed:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 04:01:17 2025 by rpki-client