This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
File: BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft (raw, json)
Hash identifier: Ny/msAEqfpoKHfAVOTiDSNctQAUGIy1Bj1uSG8/U3DY=
Subject key identifier: 73:A3:5C:0E:CD:A7:5B:E6:AF:6A:12:35:5D:8D:12:4D:73:3D:80:E2
Authority key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
Certificate issuer: /CN=F364DD25AF/serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Certificate serial: AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
Manifest number: AA
Signing time: Mon 08 Dec 2025 05:00:03 +0000
Manifest this update: Mon 08 Dec 2025 05:00:02 +0000
Manifest next update: Wed 10 Dec 2025 05:00:02 +0000
Files and hashes: 1: BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl (hash: 65ngg0Ub0cIXMTtWeKe3MpCD0XinjMzFbVxiwVy+o3U=)
2: D0193846529E11F0BBC03EB2DAE4EC9C.roa (hash: RPEdKIAKBSzqVLXcECrRATliI7vLtXP88nKKeklWY7A=)
3: 09F47684529F11F0AC9FA6B2DAE4EC9C.roa (hash: MdGJ3CUnVttvPq+a7aB4/HqidShiV81Q3YLvvUB2hgE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Validity
Not Before: Dec 8 05:00:02 2025 GMT
Not After : Dec 10 05:00:02 2025 GMT
Subject: CN=69365b53-5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:0f:48:3c:01:94:a5:3c:54:48:08:37:fb:
48:e3:d1:52:73:1f:53:e5:46:0b:d9:ae:c2:d0:38:
6b:5f:3f:52:5b:24:72:2f:17:b2:27:e9:59:1f:67:
10:1d:91:57:b5:ed:e1:ff:d5:92:4a:d0:d0:90:f5:
dc:a3:59:75:94:c3:c5:68:7f:c7:80:5f:90:3f:40:
22:86:77:c6:f1:b3:37:b4:a8:a5:04:42:09:a7:8c:
6c:ad:3c:b0:c2:24:b8:f7:e8:80:d9:05:1b:fb:9a:
37:3a:57:2b:b1:eb:d0:99:88:64:b8:cd:e0:48:af:
5a:a8:fc:04:e2:0c:7c:a7:58:9a:2e:25:40:8f:3c:
6e:13:f9:bb:be:8e:67:6e:43:44:b5:b2:18:52:a0:
7d:df:51:1c:7b:dd:41:c4:5b:0f:e4:e1:cf:36:67:
75:11:7e:43:2c:dc:62:5f:1e:79:82:c3:37:51:b3:
a0:90:48:6b:c1:b5:70:64:4e:31:70:63:db:00:78:
20:3b:e7:be:30:ec:77:80:0a:c2:83:9f:a7:1e:2b:
51:ae:e9:51:4b:8e:7e:b4:79:69:ce:83:65:21:79:
59:7a:53:c0:ee:3f:60:8b:ca:95:15:a2:f8:a5:f7:
11:9e:2a:2b:55:82:91:c8:58:da:c1:31:94:62:0f:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:5C:0E:CD:A7:5B:E6:AF:6A:12:35:5D:8D:12:4D:73:3D:80:E2
X509v3 Authority Key Identifier:
keyid:04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:62:b5:b5:c7:4e:50:0e:f4:d5:0b:cd:8f:2f:80:a3:24:
d8:55:4b:95:60:51:2d:b0:9c:1c:bd:51:74:ee:45:1b:23:91:
94:33:c9:cd:af:30:3b:f5:80:da:49:eb:e3:cc:05:4e:01:3b:
93:25:ce:e4:6b:eb:1a:48:e9:5c:e8:ca:59:fc:a1:9b:0f:6e:
23:b4:d7:c4:d0:0a:8c:9c:44:89:de:23:93:36:82:18:33:ff:
0f:a4:ab:44:71:f7:3d:02:7c:20:06:70:82:5a:06:7b:f2:00:
22:f2:4e:8e:f5:23:dd:44:50:31:7d:d3:78:c8:ae:f8:8b:9c:
bf:6b:6f:1c:e5:6e:92:f5:6e:03:e4:21:88:01:ef:b2:ff:fa:
68:2a:bf:bb:8e:bd:79:3e:42:09:0e:89:4f:5d:7a:ad:d2:d6:
cb:dc:84:39:28:b6:56:bb:85:ef:45:9a:1a:03:58:dc:fb:4d:
b7:90:53:a1:7c:d6:4a:24:59:93:6a:59:8d:63:21:c4:11:3c:
dc:e4:3a:58:a1:ca:2f:2b:d7:84:a1:10:33:8b:a5:69:ba:9f:
66:e2:cd:3f:9b:9d:70:47:1a:90:9b:20:f3:08:d6:5f:0a:62:
ec:e9:ad:95:b2:87:99:2c:27:7e:6b:62:a8:f1:24:54:99:da:
df:58:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:07:53 2025 by rpki-client