This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File: XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier: XQyDib/JOb1odNgQAaS5fe4TgZzvF2tVtStIYcMygUA=
Subject key identifier: BA:A0:2F:73:0A:C3:F9:C8:46:33:DC:84:CF:30:53:40:41:29:42:B7
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer: /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial: 0450
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number: 044D
Signing time: Sat 06 Dec 2025 03:09:45 +0000
Manifest this update: Sat 06 Dec 2025 03:09:44 +0000
Manifest next update: Mon 08 Dec 2025 03:09:44 +0000
Files and hashes: 1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: QnnIIKC675wmLAoKyA5EtL23/Z/zZpYIh2ARb0YZgzs=)
2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 03:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Validity
Not Before: Dec 6 03:09:44 2025 GMT
Not After : Dec 8 03:09:44 2025 GMT
Subject: CN=69339e79-c1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:d9:e3:56:5f:25:c5:c0:08:67:53:9b:03:
4d:bc:f5:d9:3e:96:c3:d3:12:6e:91:27:84:18:46:
06:d6:e3:71:f1:bf:e2:4f:75:cc:f2:92:e2:dc:40:
e5:85:56:8f:41:8e:30:19:6c:17:ab:01:19:64:9b:
4d:a7:f9:b8:bb:8a:42:14:49:fe:58:04:f4:62:31:
e3:22:a6:7e:92:76:35:90:81:33:0f:9d:d6:cc:ea:
73:77:1f:32:32:60:aa:39:db:1a:fb:0a:2a:cf:19:
03:f4:ec:93:63:81:31:42:8d:b8:39:63:26:e4:39:
b5:10:ce:30:57:89:40:97:a8:67:83:dc:b1:24:39:
31:b9:6f:5c:c0:0d:91:d6:b2:56:c6:7e:e5:43:8e:
6d:78:d7:96:20:01:dd:b8:be:d1:0c:94:e5:ae:de:
f6:bf:57:35:e7:d6:d6:d1:b2:21:b5:2e:d4:34:6f:
be:78:d6:cb:2f:34:4a:6b:1d:57:97:eb:49:5e:01:
6c:a8:5e:f9:bd:e0:55:75:36:a3:e8:d1:55:56:6c:
76:c7:5c:88:ac:9c:91:cb:fd:e1:61:a3:d7:d5:be:
ce:c7:9b:ee:72:57:d6:7b:89:e3:40:d7:f1:17:41:
97:7d:ad:47:36:c3:e0:3a:d3:ec:74:40:13:bc:c8:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:2F:73:0A:C3:F9:C8:46:33:DC:84:CF:30:53:40:41:29:42:B7
X509v3 Authority Key Identifier:
keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:67:f8:54:ff:74:84:6f:2e:1a:be:e5:ab:5a:3d:66:0c:8e:
4e:94:43:75:07:0f:ec:bf:ab:de:8a:2a:0b:9c:5b:b8:46:8b:
bb:a6:e5:57:79:0d:d4:68:14:87:78:b8:9c:5b:6a:b5:af:b4:
32:e2:df:07:93:bb:7b:12:f8:8b:d7:da:04:c0:e1:33:ff:c4:
fd:d1:03:98:55:ec:3a:08:31:5a:ab:77:08:da:ea:02:0d:80:
d6:9a:7d:51:83:e9:fc:74:3b:21:bb:65:83:49:31:92:68:ec:
a6:09:5e:b2:18:e2:df:e1:b8:aa:5b:5d:54:db:76:cb:72:07:
0a:13:12:12:e5:cb:4b:18:85:77:f6:63:e6:e7:0e:76:5f:a2:
33:d4:0a:fb:9c:d5:58:9a:e6:98:f4:70:91:82:4a:60:76:92:
6d:1c:2b:28:14:ef:33:f2:a5:aa:47:e8:04:23:75:b6:b9:f7:
64:2e:91:84:d9:c9:89:77:56:0d:7b:53:32:41:fb:f7:c2:9d:
d4:0d:a6:95:f5:b5:67:11:c0:ad:10:3b:36:a9:f5:69:ad:88:
5c:b7:b0:ef:2c:ac:55:5c:03:4a:31:3c:1c:46:bb:13:86:58:
da:34:e6:86:b0:38:46:75:d1:ca:28:87:51:e5:e5:f2:49:0e:
c0:5d:5c:fd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjJEQUJBRjExMC8GA1UEBRMoNUNBMzg5RkI4MDUxRDI0MTJCQTVERjgwMUQ4OUIy
Q0FDRTU3MjU5QzAeFw0yNTEyMDYwMzA5NDRaFw0yNTEyMDgwMzA5NDRaMBgxFjAU
BgNVBAMTDTY5MzM5ZTc5LWMxZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSXNnjVl8lxcAIZ1ObA0289dk+lsPTEm6RJ4QYRgbW43Hxv+JPdczykuLc
QOWFVo9BjjAZbBerARlkm02n+bi7ikIUSf5YBPRiMeMipn6SdjWQgTMPndbM6nN3
HzIyYKo52xr7CirPGQP07JNjgTFCjbg5YybkObUQzjBXiUCXqGeD3LEkOTG5b1zA
DZHWslbGfuVDjm1415YgAd24vtEMlOWu3va/VzXn1tbRsiG1LtQ0b7541ssvNEpr
HVeX60leAWyoXvm94FV1NqPo0VVWbHbHXIisnJHL/eFho9fVvs7Hm+5yV9Z7ieNA
1/EXQZd9rUc2w+A60+x0QBO8yD9jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuqAv
cwrD+chGM9yEzzBTQEEpQrcwHwYDVR0jBBgwFoAUXKOJ+4BR0kErpd+AHYmyys5X
JZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyREFCLzA0OEY4ODEwOEYzMjExRURCMEVFRjFCN0YxMjIyNDY4L1hLT0ot
NEJSMGtFcnBkLUFIWW15eXM1WEpady5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLT0otNEJSMGtFcnBkLUFIWW15eXM1WEpady5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjJEQUIvMDQ4Rjg4MTA4RjMyMTFFREIwRUVGMUI3RjEy
MjI0NjgvWEtPSi00QlIwa0VycGQtQUhZbXl5czVYSlp3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOZ/hU/3SEby4avuWrWj1mDI5OlEN1
Bw/sv6veiioLnFu4Rou7puVXeQ3UaBSHeLicW2q1r7Qy4t8Hk7t7EviL19oEwOEz
/8T90QOYVew6CDFaq3cI2uoCDYDWmn1Rg+n8dDshu2WDSTGSaOymCV6yGOLf4biq
W11U23bLcgcKExIS5ctLGIV39mPm5w52X6Iz1Ar7nNVYmuaY9HCRgkpgdpJtHCso
FO8z8qWqR+gEI3W2ufdkLpGE2cmJd1YNe1MyQfv3wp3UDaaV9bVnEcCtEDs2qfVp
rYhct7DvLKxVXANKMTwcRrsThljaNOaGsDhGddHKKIdR5eXySQ7AXVz9
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:58:01 2025 by rpki-client