This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File: JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier: F0CAihn2RqY2cfEqpKMbT3bUI/PMcmnaSYHNWC2mfn0=
Subject key identifier: C2:F4:AE:FF:9C:DD:7B:A7:3C:CC:36:DC:B1:FC:7A:09:C8:12:4E:1D
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer: /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial: 0378
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number: 0376
Signing time: Sun 25 Jan 2026 03:46:33 +0000
Manifest this update: Sun 25 Jan 2026 03:46:32 +0000
Manifest next update: Tue 27 Jan 2026 03:46:32 +0000
Files and hashes: 1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: Sjd3QMhUX1aPFQuWIHxUWJX4VczuE38zkc9Du20NsLc=)
2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=)
3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Validity
Not Before: Jan 25 03:46:32 2026 GMT
Not After : Jan 27 03:46:32 2026 GMT
Subject: CN=69759219-c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:79:db:8f:e3:88:2b:47:5a:88:80:36:28:
d1:93:45:24:e6:90:6d:e6:d0:24:57:2e:bb:75:f6:
38:db:8f:d8:dc:f9:3f:83:3e:1e:52:46:e4:1b:26:
d3:d9:01:f7:2d:78:28:a4:b7:86:5a:17:fa:9b:e3:
66:2f:74:9c:37:3d:67:de:8a:ff:dc:e8:6c:13:c5:
4e:83:cc:67:e0:3b:d7:88:1e:c5:80:1c:02:61:72:
d3:64:d2:48:7c:c3:fa:c3:d4:20:29:e7:42:3d:2f:
47:79:0e:1d:ef:67:d9:1d:fc:49:64:18:b1:7b:a4:
43:df:b8:a7:a4:da:86:58:20:63:f5:b6:50:22:77:
ce:60:6f:98:d4:ff:4b:77:45:51:f4:f4:f9:a3:c5:
e3:42:e5:f9:89:0d:ab:73:fd:20:d5:8e:cb:76:13:
1d:3e:9c:58:92:23:1d:9a:63:1d:51:c3:c0:e3:74:
43:f0:95:9b:e7:a9:42:a3:7e:a5:e7:81:43:3f:65:
98:3b:7c:63:e4:59:ee:cb:79:0f:a9:78:e2:61:29:
95:77:e5:ba:eb:7b:d4:db:0c:34:5c:64:cc:93:ba:
9a:7b:3f:aa:2e:a9:fa:41:bf:a4:84:b2:8a:1d:f7:
6a:54:09:de:45:46:68:a0:f1:a8:7e:62:12:16:37:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:AE:FF:9C:DD:7B:A7:3C:CC:36:DC:B1:FC:7A:09:C8:12:4E:1D
X509v3 Authority Key Identifier:
keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:60:fb:69:99:0a:4f:c8:ac:e6:0f:17:79:8a:d9:ed:c2:98:
46:15:ef:ec:d7:34:07:1e:e2:ef:4e:a6:3b:c3:dc:f1:1f:1b:
cc:dd:9f:15:6e:b1:ae:b7:d6:0f:2d:b9:72:35:d6:e7:12:0e:
57:eb:c3:bd:8a:32:80:32:13:8d:60:b3:a8:57:c2:d2:82:96:
4f:9a:fb:12:fb:9b:2d:98:00:d4:38:d8:7c:36:97:f6:b0:30:
6f:f2:90:ac:cd:dc:35:8e:0f:af:6d:57:78:d4:ad:32:fe:eb:
1d:58:a7:3b:c2:57:61:d4:ae:4f:f3:ac:04:56:c8:dd:00:93:
8a:5f:ec:c8:e5:82:69:ac:43:f7:2c:4f:de:60:7f:9b:2c:e1:
f2:0f:11:fd:24:93:54:7a:33:76:a0:7a:20:32:b9:4b:bd:11:
68:a3:a5:ef:ae:ef:03:aa:4f:85:b5:f2:bb:3b:21:6f:7a:29:
73:46:e8:b5:3d:ac:fb:48:68:4b:41:2b:90:24:ce:ad:98:65:
08:ae:4d:cc:78:e4:8e:44:4e:30:c5:43:c1:5d:7c:39:99:93:
ef:3e:ed:b9:56:56:d5:08:ca:66:a9:e6:42:02:41:4c:d4:7c:
4c:f2:fd:3d:46:1b:30:08:e8:c6:bb:3b:36:b3:5a:e6:e0:10:
98:7b:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:36 2026 by rpki-client