This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File: XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier: HIgOtuEpKZ1+M6go9HvPBbg5wX2G+9OgSo7wJ1iZeXc=
Subject key identifier: D7:5F:8B:B0:88:66:90:00:26:5E:21:87:3C:4A:FB:26:50:92:A8:21
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer: /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial: 0482
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number: 047F
Signing time: Sat 24 Jan 2026 03:09:28 +0000
Manifest this update: Sat 24 Jan 2026 03:09:27 +0000
Manifest next update: Mon 26 Jan 2026 03:09:27 +0000
Files and hashes: 1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: yeczpYfs6NMhOvudTBVzkh7C+qwQ4AH7d/Ng2QLTUn8=)
2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Jan 2026 03:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Validity
Not Before: Jan 24 03:09:27 2026 GMT
Not After : Jan 26 03:09:27 2026 GMT
Subject: CN=697437e7-91c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:4a:8d:f8:e5:83:e5:76:48:76:6c:0f:5f:
7e:1e:1b:88:69:88:98:b5:f9:c0:87:db:34:3a:f6:
55:8f:44:73:ae:6a:d8:e9:25:a0:ae:fc:b6:84:17:
2c:29:07:67:9e:94:6a:88:7c:35:01:a1:d1:9a:67:
53:d8:c8:3f:5a:59:d0:89:8d:27:cc:ab:19:c9:a2:
ba:5c:f7:f9:75:8a:94:96:34:6b:89:7a:70:c9:00:
aa:c8:d2:4e:02:99:7f:fa:d7:c8:d8:b1:a2:f0:96:
b3:8b:ff:6f:2f:78:31:46:86:2e:6f:e7:9d:74:7a:
70:01:d0:07:96:2e:fb:d6:35:09:4e:ad:ff:58:a1:
c6:2b:23:85:51:1f:e7:ab:10:e1:f0:05:29:ec:c2:
1a:41:f2:35:b8:f4:62:14:7e:7c:8c:98:b4:35:fc:
71:75:a7:32:29:f2:a5:4f:50:29:42:0d:52:03:26:
66:d1:ea:13:b3:cb:b1:4a:84:63:ea:7b:53:f9:36:
fc:0f:1e:3b:e0:25:79:a5:27:85:c8:04:4f:c4:da:
1e:c7:57:e4:99:f8:42:8c:2a:29:32:a8:71:04:12:
ab:4f:28:83:fa:ea:03:a0:c7:93:f9:7e:31:20:46:
9d:a5:ed:96:de:a0:12:77:e4:0d:9b:7b:2d:94:60:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:8B:B0:88:66:90:00:26:5E:21:87:3C:4A:FB:26:50:92:A8:21
X509v3 Authority Key Identifier:
keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:35:8b:64:c9:08:74:79:55:60:47:68:4b:f2:f6:6a:00:03:
36:4a:93:d9:40:d7:0c:66:85:3a:89:2e:fd:af:ec:80:ff:88:
37:09:4a:19:40:0f:67:d1:e4:93:6a:f7:3a:b5:c9:cd:70:75:
36:5e:37:6a:c1:35:90:9d:0f:ca:41:5e:36:2a:d2:e8:f2:51:
94:c5:c8:02:8f:fe:ad:84:6e:7b:ae:21:62:9a:d9:29:f7:4d:
a7:bf:dc:b2:6b:94:2f:77:70:b6:12:1e:9e:15:57:96:46:38:
36:1f:8c:31:f9:6f:2b:d5:5d:2b:a3:35:41:f9:3d:ec:84:01:
39:27:af:59:88:6f:73:cb:52:0b:96:98:9a:09:d3:00:38:f8:
e2:c5:c4:a2:c6:e9:32:ac:2a:dd:81:cb:ee:a6:ce:5d:7f:c5:
c3:d7:c5:7f:b1:7b:23:e6:3a:f7:38:9f:00:e0:4f:25:00:8a:
b1:fe:da:30:87:61:fe:86:fb:45:6f:e8:14:d7:f4:be:47:e8:
cf:d8:1f:99:2c:23:44:6e:5d:37:8a:2f:1b:f2:35:ac:57:bd:
6b:7c:53:da:93:45:54:a9:7b:36:28:85:f6:1f:62:a5:40:42:
89:4b:ca:1b:89:59:a9:e2:50:88:3c:89:15:27:e9:6e:2d:8e:
a7:c1:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:12 2026 by rpki-client