This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File: ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier: t2OBXbZZfLv8Pur72xgel+i1krvG2ObnpeNxXFGaXUc=
Subject key identifier: 77:FD:CA:F9:A2:38:B6:83:F6:25:09:D6:9E:B1:F0:93:C5:7D:AC:FD
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer: /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial: 028D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number: 028B
Signing time: Mon 08 Dec 2025 04:07:52 +0000
Manifest this update: Mon 08 Dec 2025 04:07:51 +0000
Manifest next update: Wed 10 Dec 2025 04:07:51 +0000
Files and hashes: 1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: ydKLRXR5UjGc1pBCNuWo6+R3lE/9e8kBQY2bAKvJkYk=)
2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Validity
Not Before: Dec 8 04:07:51 2025 GMT
Not After : Dec 10 04:07:51 2025 GMT
Subject: CN=69364f18-4ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9e:d7:d0:75:8c:5c:80:12:87:74:d3:22:40:
5d:9f:66:83:86:a7:89:de:43:73:d7:37:05:76:4b:
78:e8:a1:c5:d9:5a:f7:95:52:e3:e8:87:02:fc:a5:
71:f6:97:c0:da:f1:d5:ca:ec:a0:bd:50:d8:ab:80:
25:31:eb:03:c0:8c:90:dc:bb:0a:8b:b8:76:82:1c:
fc:ff:d6:5c:b3:dd:6f:d1:62:d7:41:ae:a5:64:ce:
71:8e:bb:22:57:f7:e1:7c:e9:4e:4b:29:46:d7:6b:
76:71:ff:82:22:f0:7e:b3:9e:f2:2b:8c:10:bd:e5:
c6:07:7d:81:fd:db:5c:a0:fd:0f:38:dc:6a:80:e5:
d8:d8:07:b3:47:db:dd:c5:9c:fd:d7:ba:7a:79:e9:
53:f9:90:aa:93:7c:bb:71:dd:a3:07:4d:57:99:59:
bc:88:2c:16:ab:97:ab:58:94:24:dc:8c:53:1e:34:
47:f1:d4:b2:df:cf:4c:c1:b6:63:95:a3:4a:2b:fc:
c7:14:f4:73:1a:24:5f:5f:b3:95:d2:25:66:63:13:
cd:d6:f6:7f:83:ac:f7:be:cd:14:8f:b1:7d:ef:8f:
65:1b:50:4b:54:7c:c1:0b:cd:a3:99:a5:ef:20:51:
e2:89:ed:a3:5c:46:20:e7:58:9d:e2:b8:2c:49:db:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:CA:F9:A2:38:B6:83:F6:25:09:D6:9E:B1:F0:93:C5:7D:AC:FD
X509v3 Authority Key Identifier:
keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:6a:59:9a:e7:34:e5:ee:8a:2c:7a:a2:d1:24:6a:3a:d1:46:
9a:9d:09:87:7f:50:0d:08:b5:d9:2b:6e:1c:02:77:31:28:dc:
7c:c6:68:d8:88:36:5c:4e:48:2f:e1:dc:63:72:91:a3:ec:ee:
d8:84:f1:21:5c:d9:ee:5a:59:bb:02:94:fe:39:54:43:db:c0:
94:aa:35:e6:6f:8f:20:b7:7c:64:60:00:53:8e:d7:9f:90:3e:
0a:4a:f5:8e:60:77:d6:0f:71:9b:67:c8:20:62:89:5c:4e:51:
26:a8:15:fc:7f:f8:8f:8d:0d:cd:bd:46:2f:d5:8f:39:5d:6b:
dd:6c:f4:f7:28:e6:66:aa:64:a7:5b:3f:e1:31:5c:2a:fa:a7:
52:f8:cc:04:eb:35:15:d7:9c:a0:e4:6a:0f:1f:52:49:fe:8b:
60:5e:99:9a:f1:b3:c4:df:f6:ce:9a:fc:65:09:0a:7b:d0:11:
8a:12:32:d5:a5:2f:46:91:e5:b8:b4:64:4f:84:e1:b2:2f:15:
9b:5d:1a:3c:4c:0d:dd:64:97:a5:e0:38:b9:27:58:28:24:17:
ad:dc:dc:51:b1:b2:66:39:cf:68:9a:d1:37:bc:52:3d:06:b2:
90:bc:95:46:ef:57:92:e3:4d:2c:55:6a:c1:59:39:c7:4e:0c:
09:40:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:24:45 2025 by rpki-client