This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File: hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier: a5TKbSHCS+qSFHI4Ri8Y8ymF79aJwD0Bz5l0O5ovyaE=
Subject key identifier: 0D:B4:66:A4:DB:8B:64:DD:C1:A9:6F:59:E1:83:D1:D1:12:B5:06:83
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer: /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial: 0865
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number: 0861
Signing time: Fri 09 Jan 2026 01:48:07 +0000
Manifest this update: Fri 09 Jan 2026 01:48:07 +0000
Manifest next update: Sun 11 Jan 2026 01:48:07 +0000
Files and hashes: 1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: /6zC0k27x/c0bQ5oKcUoTo1AKB+3akNcZH7cKwsbUIM=)
2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 Jan 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Validity
Not Before: Jan 9 01:48:07 2026 GMT
Not After : Jan 11 01:48:07 2026 GMT
Subject: CN=69605e57-bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:5f:fa:53:1a:b3:fc:4f:11:45:3f:f6:92:
94:ac:1f:fa:cf:0d:b9:e5:4f:81:d9:63:d8:d0:69:
06:96:6d:0b:e8:6f:fa:f2:d2:25:78:cd:49:97:9c:
53:28:ef:a8:91:30:d1:81:48:19:0e:22:d8:af:d4:
d5:e0:fe:98:b7:bb:1d:5e:99:61:f9:74:91:3b:03:
56:3c:33:80:05:89:b5:5d:72:24:5d:bb:a2:85:23:
15:44:9e:31:0f:31:70:c2:ca:e4:2f:b1:11:5c:70:
df:a5:dd:45:63:83:36:08:2a:6b:e9:5f:5f:78:54:
94:af:d2:e2:d6:33:1b:bd:77:ab:ca:74:86:03:41:
72:3a:8c:96:71:9d:d1:4e:3a:d2:f7:da:6b:f0:3a:
cb:d2:88:9d:7c:ae:c6:4b:ff:97:b0:d4:3b:dc:33:
59:e9:c5:7f:86:dd:cb:d7:f5:cf:79:7e:8c:92:22:
35:fc:0c:ad:9b:4f:fe:d6:c0:6e:11:7a:1f:bf:25:
13:93:57:97:be:d7:db:38:6b:33:0c:34:a9:be:be:
f7:33:4a:53:b8:ce:67:89:47:9c:db:8c:a0:1b:f8:
be:ee:90:e2:6d:8a:16:66:dd:e7:47:54:2b:8d:8e:
8b:6f:57:d5:2a:83:4f:b1:e7:54:22:73:0b:e7:a1:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:66:A4:DB:8B:64:DD:C1:A9:6F:59:E1:83:D1:D1:12:B5:06:83
X509v3 Authority Key Identifier:
keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:70:d5:97:51:4e:41:48:ba:e1:b9:e1:b0:e7:15:f0:4f:64:
af:16:9c:1e:ea:b2:3a:50:2b:90:b4:36:6d:1a:44:29:02:20:
eb:b6:64:17:ea:e8:42:28:85:03:97:51:03:5e:b1:ce:c1:2c:
7b:02:3d:7d:25:81:71:57:a5:e1:e6:f6:97:3d:ec:7c:9b:19:
98:a9:47:a6:af:f0:7f:2a:79:77:0a:01:1b:64:7d:a8:2a:1b:
5d:7b:aa:79:af:f6:a4:5c:6c:5c:c8:43:29:cd:4b:af:69:37:
0e:16:c5:bc:9b:57:63:b3:48:ec:b5:da:4e:16:95:2c:11:24:
41:82:ee:d8:02:20:ed:da:fd:76:a6:5e:5b:80:62:59:13:c1:
8f:fc:88:aa:54:02:b5:f8:27:9e:9c:72:9a:32:93:c1:8b:54:
34:df:66:7b:56:11:dc:ca:28:7c:19:36:aa:b3:94:0b:04:29:
82:80:ad:b2:3d:7c:b4:7a:1e:0b:bb:b6:cf:bf:42:1d:a7:16:
12:89:f5:d7:2b:61:09:9c:ba:0d:54:68:b2:24:7a:e1:b3:5d:
89:36:64:12:7d:aa:81:c2:2e:f5:44:3c:20:7b:87:cc:f3:ca:
33:86:b7:3e:0a:ff:44:da:f5:64:da:84:84:ce:38:fd:8e:80:
06:f9:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:58:57 2026 by rpki-client