This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier: YChSpd0EnRm+XN+LGNNEYKAWK9sA8MwkozoIZNR+XdU=
Subject key identifier: 32:A0:67:FF:8E:68:DD:DC:93:F2:63:8B:50:FC:BD:00:06:01:DA:8F
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 0383
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number: 0380
Signing time: Mon 08 Dec 2025 03:37:09 +0000
Manifest this update: Mon 08 Dec 2025 03:37:08 +0000
Manifest next update: Wed 10 Dec 2025 03:37:08 +0000
Files and hashes: 1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: lYXsxgbXJayCRtZt3UMO+ujGGYQdrc5YsNCTNs9UGy4=)
2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Dec 8 03:37:08 2025 GMT
Not After : Dec 10 03:37:08 2025 GMT
Subject: CN=693647e5-90b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:ff:a1:e6:db:fe:97:0b:0b:90:45:7d:5d:
99:64:70:ab:e2:64:1b:00:55:bb:1d:2a:e5:9e:0e:
d1:c0:19:0c:08:89:1c:9d:e0:99:d9:18:db:a7:53:
cb:8e:72:86:7f:f4:87:c0:50:8e:fb:b6:ad:55:21:
21:1a:e2:a6:8d:54:16:b8:be:d1:ba:72:51:78:3c:
8e:7c:da:74:6f:85:25:f0:ba:cd:fd:f6:58:80:68:
c9:f1:14:e7:27:24:fd:c2:e5:0c:33:fa:4c:fa:b2:
a5:7c:30:2f:b3:bd:96:08:d9:4f:a1:50:81:6d:40:
fc:f8:28:e1:42:6d:e5:92:a8:fb:76:6c:f0:b6:af:
8f:6b:9b:e9:8d:6b:ad:ad:f1:f8:2f:d3:c4:c7:8e:
90:55:1c:e5:65:c1:f3:69:5f:01:ea:c7:0c:0c:f5:
a3:3e:26:70:77:b8:ac:7c:7a:15:1d:30:c8:bd:ee:
b1:06:d1:e8:b4:9f:47:e9:a9:65:d3:62:27:93:38:
0a:aa:9d:34:2f:07:07:d3:0d:bf:f8:9f:7d:78:25:
0e:8d:b5:c3:40:79:da:c1:d7:82:e5:c1:bf:ef:85:
8c:ec:76:7e:35:38:2a:59:af:66:d7:ca:9f:e0:69:
4d:64:ad:e5:64:70:7a:47:ae:fc:5f:7e:c3:c7:dd:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:67:FF:8E:68:DD:DC:93:F2:63:8B:50:FC:BD:00:06:01:DA:8F
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ac:77:8f:c0:67:f2:4b:11:f4:f0:3a:ed:c7:9d:ec:95:2b:
f3:f0:54:4d:e0:74:bd:b3:0b:d7:27:68:10:01:1c:40:c5:34:
48:02:e6:80:a8:08:5f:04:a0:f5:bc:63:75:1a:bb:96:f2:42:
af:39:10:68:10:0d:55:f0:31:a2:1a:a6:a8:d3:9f:74:6e:0e:
8f:f9:0e:22:72:ed:fb:d8:eb:bf:20:85:6a:20:c5:40:51:18:
f1:8f:d2:46:08:37:d2:cb:02:9f:23:d1:a7:15:e8:1a:9b:4a:
e8:b6:97:35:5c:ab:b5:c7:7f:e9:19:49:3d:ad:7a:2c:7f:b7:
26:43:a0:69:d2:0d:0a:ba:0c:44:e3:7e:2d:6d:56:bb:9c:15:
38:2b:04:88:9f:b7:39:63:96:79:3f:41:13:34:45:8c:00:cc:
87:94:6d:f9:50:1d:df:c9:19:d8:ed:0e:6b:a0:29:9b:cd:77:
7f:74:66:df:6c:fa:a6:f6:62:ab:91:16:9e:10:7e:d8:94:c1:
ea:c7:98:0a:bf:05:78:bc:99:d2:49:10:15:ce:bf:88:88:b2:
63:13:80:9f:c8:ae:2c:fc:74:7a:4f:5b:d4:1f:e5:12:ea:87:
b7:bc:0f:80:9c:8a:ef:ed:50:29:6f:f9:50:cd:25:96:32:a8:
2e:d0:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:19 2025 by rpki-client