This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
File: 3EJIwHspjM1rOedr4TDL0ntsigU.mft (raw, json)
Hash identifier: aAd7XwV3qZrOUrCENDq//H56kQm5WMDZ1PCZteWF/68=
Subject key identifier: 4D:13:BB:DB:34:9E:B3:D1:EC:0C:BA:F1:87:58:50:16:C3:32:85:23
Authority key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Certificate issuer: /CN=F3629595AF/serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Certificate serial: 0366
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
Manifest number: 0364
Signing time: Mon 08 Dec 2025 03:41:27 +0000
Manifest this update: Mon 08 Dec 2025 03:41:26 +0000
Manifest next update: Wed 10 Dec 2025 03:41:26 +0000
Files and hashes: 1: 3EJIwHspjM1rOedr4TDL0ntsigU.crl (hash: TG427R56eledn4tsKL98iT0SryCsx0MHBBkKCBC08oA=)
2: 054094BC3FF811EE81E5E73E4AD9E6FC.roa (hash: CjcOFUpPISl7bBWR1ojvxALzjkJgMeu4M9y6B2QpvRg=)
3: BE084E483D0C11EEA697D1784AD9E6FC.roa (hash: d3pcG470SIIHRtD4u5KMhKjkrzBNkxu/J9n0pkCnKfA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629595AF, serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Validity
Not Before: Dec 8 03:41:26 2025 GMT
Not After : Dec 10 03:41:26 2025 GMT
Subject: CN=693648e6-3458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:d7:8f:0e:80:53:45:f0:69:d5:08:29:82:
66:be:2b:c8:f2:11:ef:9a:b9:5a:18:c8:6e:c1:40:
c9:c7:a6:e2:03:1f:81:4c:c3:35:31:df:7d:84:eb:
96:69:15:6a:75:99:3f:b5:3f:de:7a:98:95:fb:32:
1b:09:a7:3a:53:55:8e:83:ac:2a:0f:98:5c:8d:12:
0f:12:f8:57:3a:8f:ac:08:3f:c8:f6:2d:35:56:4b:
be:5c:61:21:e0:c6:ee:f4:99:a2:e7:30:ec:df:11:
d0:f6:4b:6c:f6:6e:ca:1f:94:50:d9:40:fd:80:51:
c4:d9:9c:39:33:e2:97:73:e8:c8:1b:e7:66:34:36:
6b:3e:23:35:e5:bb:5b:18:e2:51:fd:ff:a2:57:23:
82:69:1f:1e:b5:26:90:c2:86:5d:13:7c:7d:26:75:
d5:fd:93:57:2f:09:c2:67:14:50:fc:46:e9:b9:93:
f7:b1:34:76:e9:9a:90:ac:06:9a:32:d7:b4:75:03:
17:33:e8:3f:90:f6:83:ab:db:68:82:31:8b:ef:59:
d9:f8:30:5c:a9:3e:c0:bd:89:f8:c0:94:83:82:e7:
1b:ec:d6:ba:bb:4f:e7:e7:82:de:ea:7f:36:21:a4:
52:12:3b:0f:17:dc:dd:d3:e3:26:ed:ee:ab:de:7e:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:BB:DB:34:9E:B3:D1:EC:0C:BA:F1:87:58:50:16:C3:32:85:23
X509v3 Authority Key Identifier:
keyid:DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:64:19:a9:f9:09:ba:c2:34:99:c7:ca:f2:2c:21:36:07:ad:
ec:8d:a6:13:d3:c9:0a:0f:e5:c4:13:7a:f3:91:ca:dc:13:1c:
b2:fe:3b:70:13:3b:98:cd:45:4b:ae:c0:55:a3:37:06:f3:8c:
47:89:67:cf:59:a9:67:bf:8d:84:52:d9:f1:46:e4:f7:7e:97:
ab:36:c8:fe:40:68:fd:a2:49:94:10:c4:e0:1d:a5:16:d8:3e:
b5:3d:55:98:d7:92:1b:32:3a:83:77:b0:b1:b5:9e:e5:17:05:
8d:57:fe:6d:16:05:54:48:84:df:49:b3:8c:85:59:12:69:76:
af:09:d1:2f:9f:6b:4f:92:be:a0:7c:be:d5:9d:ec:a2:2e:79:
41:15:dd:d0:a3:4b:eb:2b:20:9a:32:b4:e5:62:0b:87:21:3d:
b2:e5:59:ae:c4:98:a2:54:77:c3:60:24:b1:60:0b:3b:2d:3f:
9d:ae:29:24:8b:1f:ae:a7:3e:86:fc:69:cb:70:2e:96:b0:72:
ca:a8:20:72:da:60:57:89:9e:45:29:94:f8:e7:ed:0d:86:c2:
0c:3b:3c:91:42:51:74:a6:fb:00:03:c2:b9:ab:05:3f:49:10:
ac:52:ab:d8:08:6d:fb:94:7f:29:d8:ee:57:46:6f:cb:c1:40:
20:68:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:50 2025 by rpki-client