This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File: aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier: 5B2lgS8jf3+qSiaB3F7yrj43hTgPXyI9nLFiZ3nbGls=
Subject key identifier: 6C:C9:BD:D9:06:30:4B:FD:95:16:87:BE:24:17:EF:F2:97:20:B6:09
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer: /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial: D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number: D2
Signing time: Sun 25 Jan 2026 05:03:22 +0000
Manifest this update: Sun 25 Jan 2026 05:03:22 +0000
Manifest next update: Tue 27 Jan 2026 05:03:22 +0000
Files and hashes: 1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: cYWcqLkwFZn3zcKWUPBQrsH4sVxG17T7L0yjRWsd1g0=)
2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Validity
Not Before: Jan 25 05:03:22 2026 GMT
Not After : Jan 27 05:03:22 2026 GMT
Subject: CN=6975a41a-dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:03:a9:0a:54:86:f2:d8:df:a8:dc:4f:04:
5b:f6:bf:f8:b0:71:ba:3e:63:ff:9b:b7:bb:c7:bf:
0a:c7:df:c3:18:7a:6b:aa:06:b7:69:e3:60:ea:65:
14:cf:e7:51:54:92:00:7b:a7:a1:d3:6c:c5:2b:ac:
ae:c5:b3:95:9a:f1:f6:7c:7b:57:5a:bb:96:9f:fb:
15:57:49:77:01:5c:df:ad:07:24:c3:a3:3c:94:73:
67:3c:8f:81:ac:9d:4a:17:41:56:b4:17:ca:14:dc:
31:cf:7d:d6:fb:fd:ef:09:49:26:3a:1f:39:1d:bc:
4f:7a:d6:25:ad:62:0f:fc:57:36:46:33:e2:71:21:
31:fe:ee:91:0d:df:a7:fa:07:3c:d6:88:c4:96:12:
6b:6d:80:7b:9f:85:05:de:53:ab:91:9b:97:fd:a2:
6d:85:c9:6c:c5:20:a4:13:ab:81:ad:a4:a8:a5:c7:
56:52:8c:e0:4e:ff:bc:29:0a:7e:6d:6e:d1:12:e7:
67:26:61:e5:e9:9a:77:cd:f8:36:99:80:01:3c:aa:
6e:73:46:f7:75:29:27:b8:56:1d:42:11:1c:df:d9:
a2:74:a6:e5:57:0c:ef:38:cb:9a:ca:c5:5f:ca:cb:
5c:bb:4d:d8:bd:8d:2e:b6:9a:1a:38:dc:e0:d3:09:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:BD:D9:06:30:4B:FD:95:16:87:BE:24:17:EF:F2:97:20:B6:09
X509v3 Authority Key Identifier:
keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:79:a7:50:bd:76:e5:38:e0:c8:0b:29:33:7a:e0:36:e5:a5:
f4:bc:f1:4c:f3:50:c0:7f:f9:3f:d0:3e:67:40:cd:ec:ba:d6:
15:ad:84:ec:81:cd:69:b6:90:40:12:3b:92:5c:43:fe:5d:58:
e6:3a:19:dd:e0:fa:75:ea:e5:dc:7b:24:be:c3:b4:f5:d2:23:
72:1f:f2:f9:1e:92:8c:26:b7:17:cf:74:02:c0:89:77:3b:c2:
8f:dd:9b:7a:1c:8d:ef:76:33:0b:c6:3c:47:6a:05:69:40:70:
69:c5:66:b7:eb:15:2f:f8:62:a4:69:3e:88:ae:dc:4f:ba:98:
d0:cb:a7:32:0e:52:b5:59:46:9b:07:c4:49:17:2f:46:1a:73:
f6:a3:52:65:76:d6:68:09:03:99:eb:f0:40:30:3f:03:19:9b:
7c:5b:c0:4b:dc:2a:0a:65:59:a8:49:c4:ce:f8:d3:f5:4b:90:
a2:8f:06:64:c6:7e:5f:87:20:02:36:74:43:13:78:6a:1f:57:
97:f2:91:98:db:5c:cf:c6:a8:23:ee:f8:54:76:0b:9b:a4:13:
78:23:38:04:fe:90:17:5e:00:43:bb:6b:d8:d5:8a:61:d6:a9:
0e:a2:70:66:04:a8:aa:c0:32:1d:6c:99:d8:26:2a:5b:72:72:
c0:59:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:47 2026 by rpki-client