This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File: aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier: qynrCppujw48NuhudfMO7q6QZUnNtxhgrk06vWTfZyM=
Subject key identifier: C1:32:FA:E8:31:CB:60:7A:8C:CF:B9:85:9E:B4:AC:C2:61:D1:41:94
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer: /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial: A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number: A1
Signing time: Mon 08 Dec 2025 05:02:31 +0000
Manifest this update: Mon 08 Dec 2025 05:02:30 +0000
Manifest next update: Wed 10 Dec 2025 05:02:30 +0000
Files and hashes: 1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: nyb24DapfcYB1CzAabKOSAZQTosKFuSdmo/xaMn8k+U=)
2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Validity
Not Before: Dec 8 05:02:30 2025 GMT
Not After : Dec 10 05:02:30 2025 GMT
Subject: CN=69365be7-3c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:30:1e:3e:79:39:bb:73:ee:5f:34:1a:cc:
ed:f9:8f:24:f0:0e:8a:40:af:39:c9:4f:e7:c7:f3:
e9:df:ba:c8:32:e5:91:72:a4:37:75:1a:f0:9c:e2:
50:e2:95:58:09:ab:1b:a8:08:fd:f6:b8:2b:17:a2:
26:2b:2b:4f:bc:b5:f3:4b:02:77:ec:17:8b:32:32:
71:55:8c:24:1f:6b:ba:cc:99:a7:7f:e4:4d:5a:88:
41:e1:f9:d4:7a:46:e7:61:83:e2:3a:c5:66:02:af:
41:40:0f:b0:0c:85:ea:05:52:fa:d0:4c:71:97:69:
15:f5:e0:af:fa:b8:d0:52:e5:89:df:f0:5a:c3:a4:
d9:0f:89:33:00:aa:f9:6e:44:a9:19:61:d4:ac:9d:
96:f7:29:65:47:b7:bd:cb:54:d6:0d:4e:7d:35:b8:
8a:dd:f1:10:9c:34:de:e5:bf:12:c9:2e:47:ae:bb:
e2:7a:c3:81:d3:15:02:f9:6d:9b:2e:b9:8b:41:8c:
93:ba:cf:1e:f3:15:c4:b7:42:52:0b:a1:f7:ee:05:
cc:af:1b:77:b1:18:b5:fb:bc:7a:d1:c2:e7:01:79:
4e:47:11:a3:bb:4c:4b:aa:46:16:50:8d:e1:d9:29:
6d:8c:28:c4:7a:7d:c5:dc:97:87:2a:46:51:2a:71:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:FA:E8:31:CB:60:7A:8C:CF:B9:85:9E:B4:AC:C2:61:D1:41:94
X509v3 Authority Key Identifier:
keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c9:f4:7e:8e:e6:83:cb:b4:e9:26:48:4a:5f:78:6a:45:6a:
75:33:8c:fd:b2:5d:1c:2d:58:5b:75:a4:ae:8d:9c:6c:32:12:
af:ec:d8:4a:ff:bf:d7:dc:d1:f6:9b:45:5a:66:bc:bd:62:b3:
1f:f2:7e:5e:3d:ed:96:1e:3b:7a:4c:0f:3d:2e:ee:65:37:3f:
05:9b:51:e7:71:79:f9:0f:ed:9c:66:4c:5e:50:de:83:d7:d5:
18:ba:91:f0:ad:ec:57:d1:e9:a7:29:1b:8c:c3:c9:83:a2:6a:
1b:12:78:86:90:23:42:91:eb:ca:e9:02:a1:55:f9:04:20:75:
2d:f8:d8:60:61:9f:19:b3:5a:c8:b7:2d:67:76:cb:24:82:76:
1e:c5:95:09:30:b3:c6:7d:92:dc:8d:5a:f5:bb:a9:1b:2c:98:
dd:08:71:ca:83:56:7a:9f:17:6e:12:7e:fe:2e:b9:ca:e5:b8:
0b:d4:ea:b7:e7:40:b3:80:fa:14:47:23:9a:52:ae:f6:17:b8:
56:17:df:68:40:53:ef:98:18:49:43:96:ac:ec:6e:82:08:53:
9c:65:72:9e:fb:07:5f:c2:45:bd:4d:38:a8:c2:7f:6c:11:13:
52:4a:ba:4d:c9:0a:d4:0e:84:82:1b:04:ae:be:2d:f5:d8:51:
97:77:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:22:57 2025 by rpki-client