This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: TVu1SAnOr8Vhm65yWplaBVNt08nX7fspn7NvM6WcoYI=
Subject key identifier: 2A:D1:5A:DD:09:55:40:68:F6:35:EE:F8:AF:AB:CB:8A:29:58:2B:38
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 021D
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 021D
Signing time: Sat 06 Dec 2025 04:19:58 +0000
Manifest this update: Sat 06 Dec 2025 04:19:57 +0000
Manifest next update: Mon 08 Dec 2025 04:19:57 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: 63UjJ4Pazj5zCuwEfdPn4ENgkroo438tbRmdKlkZqSM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Dec 6 04:19:57 2025 GMT
Not After : Dec 8 04:19:57 2025 GMT
Subject: CN=6933aeee-bec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:0a:a0:d0:af:e6:5a:0a:d2:db:a9:24:9a:
eb:de:21:3f:7d:8e:fc:a9:56:67:79:4c:01:dd:34:
b2:24:42:36:69:13:6b:a4:91:e0:a2:5d:9f:fb:5e:
ab:db:39:1c:ba:af:da:ce:72:7e:f1:1e:01:45:3a:
c9:44:b4:e9:26:ed:88:99:af:68:94:ad:fb:f3:75:
bd:a0:39:4a:9f:5f:03:fb:5a:b3:7b:0e:be:34:b9:
d2:7d:c9:a6:3f:63:3f:d6:69:de:c2:81:c0:da:90:
7d:6d:43:01:b2:6b:8f:2f:98:a0:66:17:08:8f:79:
d2:9e:aa:e6:aa:81:ee:c6:cc:23:bb:ab:92:84:4e:
dc:e5:10:66:b3:67:82:9c:9a:68:82:96:a1:9d:bd:
05:f5:35:b7:48:b2:8b:9b:f3:1f:f9:32:d1:81:07:
c5:ed:71:8b:a4:4a:c2:fe:46:8f:54:f4:16:ea:ac:
7c:05:43:41:cd:af:93:3b:28:aa:7f:06:f9:d6:91:
82:bf:9b:79:50:71:57:e0:34:72:19:78:83:1f:3c:
bb:2f:35:c5:13:48:ff:af:41:8d:92:f2:09:f9:ad:
eb:5c:b7:0d:53:53:0f:0d:40:29:d5:6e:e7:f7:a5:
64:6e:f6:15:23:d7:2a:4c:06:b1:91:df:c7:8a:0e:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:5A:DD:09:55:40:68:F6:35:EE:F8:AF:AB:CB:8A:29:58:2B:38
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2a:8d:1f:9f:03:64:8d:81:be:38:10:9d:74:b4:87:de:e7:
27:e5:f0:bf:6c:81:f3:f1:ce:31:04:ff:14:ff:7d:92:51:29:
41:2b:e3:a1:48:76:25:a8:1f:1c:8c:c8:5f:7c:9c:1d:5a:82:
cf:63:e1:e2:ed:16:22:50:c9:6b:bd:a0:64:a4:75:b4:aa:7d:
13:69:74:12:c2:a7:b6:14:f7:46:7b:f6:59:69:ec:53:c1:c4:
1e:8d:74:f3:b9:04:bb:9e:97:4b:c4:dd:86:a8:d1:05:65:35:
a7:3e:69:d5:6d:56:ed:02:24:16:1f:7a:7f:cd:dd:0e:f0:1d:
a9:47:70:97:0e:aa:69:ee:0d:68:79:b8:30:b2:ee:bc:82:87:
44:51:13:9e:9f:42:7b:aa:bf:18:e8:ff:6e:08:3a:b1:2a:4f:
df:7a:fd:21:15:63:3c:5e:71:fa:c8:8c:03:bb:19:65:34:1a:
05:dc:a6:ed:8d:2a:06:eb:a6:6b:fe:0c:9b:a3:45:fe:23:b6:
fa:dd:26:06:c3:fd:b9:25:fc:0a:77:58:34:50:9c:d3:5e:64:
28:36:71:de:65:e5:a3:a8:f7:60:22:1b:95:66:ad:d4:7f:82:
54:28:01:17:cb:86:ce:91:bb:1a:de:70:1b:31:81:09:5b:57:
18:8d:69:08
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDQjFBUjExMC8GA1UEBRMoQTZBMzQzQjI3RjlGNzYyQUU0MUNGN0M1QkM2QjUx
MTRDMjg4NUE3NzAeFw0yNTEyMDYwNDE5NTdaFw0yNTEyMDgwNDE5NTdaMBgxFjAU
BgNVBAMTDTY5MzNhZWVlLWJlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqKgqg0K/mWgrS26kkmuveIT99jvypVmd5TAHdNLIkQjZpE2ukkeCiXZ/7
XqvbORy6r9rOcn7xHgFFOslEtOkm7YiZr2iUrfvzdb2gOUqfXwP7WrN7Dr40udJ9
yaY/Yz/Wad7CgcDakH1tQwGya48vmKBmFwiPedKequaqge7GzCO7q5KETtzlEGaz
Z4KcmmiClqGdvQX1NbdIsoub8x/5MtGBB8XtcYukSsL+Ro9U9BbqrHwFQ0HNr5M7
KKp/BvnWkYK/m3lQcVfgNHIZeIMfPLsvNcUTSP+vQY2S8gn5retctw1TUw8NQCnV
buf3pWRu9hUj1ypMBrGR38eKDgLTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUKtFa
3QlVQGj2Ne74r6vLiilYKzgwHwYDVR0jBBgwFoAUpqNDsn+fdirkHPfFvGtRFMKI
WncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQ0IxLzQyODBDRTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBL3BxTkRz
bi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3BxTkRzbi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDJDQjEvNDI4MENFNjAzNDg5MTFFRkFBMTg2NkEyNzYyRTk1
MUEvcHFORHNuLWZkaXJrSFBmRnZHdFJGTUtJV25jLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQKo0fnwNkjYG+OBCddLSH3ucn5fC/bIHz
8c4xBP8U/32SUSlBK+OhSHYlqB8cjMhffJwdWoLPY+Hi7RYiUMlrvaBkpHW0qn0T
aXQSwqe2FPdGe/ZZaexTwcQejXTzuQS7npdLxN2GqNEFZTWnPmnVbVbtAiQWH3p/
zd0O8B2pR3CXDqpp7g1oebgwsu68godEUROen0J7qr8Y6P9uCDqxKk/fev0hFWM8
XnH6yIwDuxllNBoF3KbtjSoG66Zr/gybo0X+I7b63SYGw/25JfwKd1g0UJzTXmQo
NnHeZeWjqPdgIhuVZq3Uf4JUKAEXy4bOkbsa3nAbMYEJW1cYjWkI
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:30 2025 by rpki-client