This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File: KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier: rNcS0blSRtzEilO63h+6X722n2aDWVgiCrm3Zhe0PYw=
Subject key identifier: 53:78:3F:FF:56:68:D2:CC:57:8D:E5:43:EA:FB:E3:8A:E5:84:1C:19
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer: /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial: 05D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number: 05D7
Signing time: Mon 08 Dec 2025 02:34:03 +0000
Manifest this update: Mon 08 Dec 2025 02:34:03 +0000
Manifest next update: Wed 10 Dec 2025 02:34:03 +0000
Files and hashes: 1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: bae7KyZjkMjxRmx1+f+RuwN9m5mafPTTOYZEl8gFYuA=)
2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Validity
Not Before: Dec 8 02:34:03 2025 GMT
Not After : Dec 10 02:34:03 2025 GMT
Subject: CN=6936391b-a0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:bb:30:a1:a2:70:c2:c8:2e:22:7c:16:50:
6b:57:1b:68:fd:64:8c:16:b7:24:1c:5c:80:5c:79:
b5:ff:00:e5:fc:0f:0e:df:66:06:b0:ce:14:e8:46:
8d:67:c2:9f:67:79:37:16:55:66:45:2f:b6:17:f7:
50:bb:4a:45:a1:ea:c7:9d:bd:3d:10:0a:87:40:2f:
e2:c8:97:6d:b7:dd:6f:50:11:e8:ad:7e:bf:8a:23:
e3:cb:4f:a9:5e:a2:c8:2a:90:e0:1b:0b:ba:ab:cd:
dd:09:0d:b9:7c:10:f7:ea:ba:23:9b:55:51:9d:01:
04:4c:3f:fe:74:35:3f:ab:23:b3:67:82:f3:98:b0:
3d:2d:95:11:e7:26:34:85:73:ff:9d:dc:57:40:21:
9e:89:a0:a7:ca:a0:01:eb:d8:ca:02:30:d4:cd:f9:
e5:d4:e1:2e:54:52:64:1e:83:b3:90:fb:4d:6c:b9:
2c:c6:0d:c3:a6:b8:fa:3d:59:f4:09:32:05:7f:98:
e6:36:57:46:6f:38:9d:2f:7f:61:e8:22:60:cb:b4:
3b:1e:ad:3c:6c:a2:0c:c7:25:d6:7b:5f:2a:00:89:
84:2e:50:0d:b0:fe:4d:da:d1:73:c4:fb:87:88:dd:
2d:e8:84:39:2d:98:c6:8f:51:ba:d2:b8:cb:58:2a:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:3F:FF:56:68:D2:CC:57:8D:E5:43:EA:FB:E3:8A:E5:84:1C:19
X509v3 Authority Key Identifier:
keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:34:9c:70:d5:3d:9b:fe:d9:f0:1d:6c:a2:fa:0f:04:a3:df:
7b:7b:e4:14:fa:9d:fd:7e:01:c9:f6:57:be:1a:72:68:f3:b0:
07:31:37:15:9d:55:c9:65:78:47:8d:54:08:63:07:ef:23:1b:
fd:f6:6e:73:d5:b2:e3:35:2c:44:32:d2:14:a4:43:5d:40:f0:
d3:01:b7:a7:f2:82:e1:49:2c:f7:cf:20:57:de:94:86:46:b2:
a1:3a:fc:2e:e5:6b:44:e3:95:01:09:da:e9:cd:0d:6b:7a:71:
3c:07:1f:b5:d3:b3:0e:d2:56:8b:f5:40:34:a5:f4:0d:9a:0a:
3d:3e:f2:10:82:d3:a4:86:af:f2:04:15:a2:e3:08:d5:f0:a1:
7c:ac:d8:5e:a8:1e:99:7f:19:ea:0c:2c:4b:72:45:61:8f:1f:
60:ed:98:fb:39:26:b9:34:5d:c3:20:e4:b6:7f:e6:f0:21:53:
cd:39:25:d9:9b:91:7f:b0:a0:91:78:01:ae:f9:47:aa:0b:f5:
6f:c0:86:8c:cb:61:3c:7c:dc:6b:85:a4:db:bc:9c:1e:7a:8b:
76:85:f3:ef:a4:d7:cc:23:76:00:a2:0b:41:13:0d:36:17:e9:
0c:60:2e:4a:7e:46:a7:f4:46:f6:5b:12:37:65:1e:b8:25:e8:
92:38:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:27 2025 by rpki-client