This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier: 7gxInzAAG4+1E5i6Kpick8jf2fviUV2OFpKpSZFSvsE=
Subject key identifier: 85:0A:D1:AB:64:81:07:7E:5C:59:5C:A2:CD:F8:B5:60:EA:9A:7F:9C
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: F6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number: F1
Signing time: Sun 25 Jan 2026 05:00:05 +0000
Manifest this update: Sun 25 Jan 2026 05:00:04 +0000
Manifest next update: Tue 27 Jan 2026 05:00:04 +0000
Files and hashes: 1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: KzwVrKBdMLf26+nGN6meH4qk7HUmDNOjeFwu4LW6y2U=)
2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Jan 25 05:00:04 2026 GMT
Not After : Jan 27 05:00:04 2026 GMT
Subject: CN=6975a355-e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:94:6e:85:05:f4:7a:ca:c0:6c:ac:ee:c1:
f3:ad:b4:03:8e:98:55:ba:ea:d9:7e:e5:69:84:7e:
c9:7b:07:da:32:d4:94:4e:a4:b4:ab:61:aa:eb:a1:
61:23:17:e2:4e:6d:66:ca:2b:b5:03:54:f8:22:57:
ee:6f:99:32:1a:86:57:40:51:95:20:a7:f5:dc:f6:
a7:25:95:6e:31:0f:cf:2d:a3:ac:2d:fa:e7:9c:dc:
a2:bb:ae:ae:0a:87:1d:2e:5f:f5:38:0a:76:17:37:
92:aa:87:d8:77:44:1a:94:42:89:9b:bf:84:0b:1f:
e9:b5:d5:ee:ab:bc:3a:d9:51:2e:cb:e8:88:60:bc:
10:ab:55:c1:47:7c:af:51:59:a4:74:8e:0a:9f:ab:
2c:5b:a2:b7:fb:b5:96:a1:51:8c:0c:36:56:c9:98:
a4:e2:6c:1c:f2:b1:b1:44:25:47:1b:83:bc:b2:2b:
c7:dd:4b:03:4d:00:28:e2:c5:51:46:c1:82:ab:ef:
1c:b6:9e:a9:bd:f9:e3:3b:9e:2a:03:4f:b0:d1:fd:
36:eb:e7:7a:c2:55:61:f3:c5:02:06:7e:9f:cc:53:
99:6d:ed:67:d2:cd:69:91:eb:d8:02:33:98:1a:40:
43:e3:5f:85:c6:fa:d5:81:0f:a8:f3:e2:c8:a6:e5:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:D1:AB:64:81:07:7E:5C:59:5C:A2:CD:F8:B5:60:EA:9A:7F:9C
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:d5:1f:69:b4:aa:c0:89:88:ae:b6:0c:71:2f:6e:70:47:
cb:ec:cf:64:5c:27:fa:c2:6d:df:9e:90:6d:7d:23:5e:6b:e3:
43:c1:a7:72:a1:68:a1:9c:90:a9:b5:1e:cd:b2:10:44:43:47:
78:a3:90:c0:cd:08:8a:71:2d:47:a1:91:c4:7f:eb:59:a0:81:
1d:12:67:55:2f:34:c4:fe:2f:aa:47:8e:5e:f9:d7:32:02:fa:
bf:8b:ab:d2:bd:7b:12:62:56:10:4e:b4:64:7b:96:93:e2:96:
2a:42:a0:0d:8d:bc:72:25:1c:10:84:c4:0c:6e:b5:73:e7:16:
15:b7:a2:7e:87:a6:35:19:9e:29:02:0f:30:48:6d:65:e0:04:
87:35:24:59:83:fd:24:c4:7a:eb:31:f3:e6:68:02:0b:3c:81:
53:dd:aa:e9:c1:1c:8e:e9:3d:74:02:7b:09:fd:21:12:50:61:
50:cc:92:f2:e5:7a:ce:d3:7a:8e:17:3b:f0:25:21:1f:f1:d3:
5f:f6:b5:5e:ae:3f:e4:d9:6f:fc:2d:c9:ec:31:5b:f1:5b:39:
3e:8d:2c:47:74:f2:ac:e8:4e:98:da:40:e9:b1:f0:1b:ac:fb:
53:2d:3e:f9:72:40:e1:33:66:34:14:b6:b9:cb:19:ec:65:97:
87:2c:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:54 2026 by rpki-client