This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier: Sm13WpN30iw25Z5M5ERypAmVYz/4Hzx5AVkzKCPc/D0=
Subject key identifier: 3A:4A:48:4E:10:1B:FD:8A:CE:56:56:2E:06:4C:97:CE:E6:50:5B:AC
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer: /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial: 95
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number: 92
Signing time: Mon 08 Dec 2025 05:05:00 +0000
Manifest this update: Mon 08 Dec 2025 05:04:59 +0000
Manifest next update: Wed 10 Dec 2025 05:04:59 +0000
Files and hashes: 1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: pIqtiFWcsLt2tOCC/9qYp2ioZeYi/70nkgSuYP26PxE=)
2: 61967A0C923911F0857614F5DAE4EC9C.roa (hash: h6/xO+quTrTm7TNgBK9CG+HuCWB11SsyjPcjW6WV3ek=)
3: 0CC81814923911F083357CF4DAE4EC9C.roa (hash: LITlLq2aIhVUihUn1BaRczfpAUpOW0iot4DV3wIc2Aw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Validity
Not Before: Dec 8 05:04:59 2025 GMT
Not After : Dec 10 05:04:59 2025 GMT
Subject: CN=69365c7c-2fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:c8:cc:94:55:fa:b5:c9:9c:e4:38:bb:2c:
5c:ee:77:48:b4:79:f7:74:92:4a:27:7b:8d:b7:1f:
59:96:b1:45:42:d1:0f:e9:6e:03:5b:73:91:9f:72:
ae:87:cc:b6:fe:ee:18:21:83:03:c4:aa:e6:b2:04:
1b:da:25:83:21:e1:8d:3b:15:d2:1c:92:f4:eb:81:
97:1e:15:42:ff:45:77:38:ed:51:0e:c7:c4:c1:9e:
68:c8:0b:7d:be:e7:ee:f4:ac:45:bb:b4:8e:ca:53:
bd:e9:b6:ed:98:ac:5c:e4:1d:0a:58:f2:55:16:4d:
f0:dd:51:68:2a:dc:d5:12:9a:37:aa:fb:51:a9:5a:
56:9c:6d:b8:67:4c:ab:b8:7a:f1:5e:c9:7e:b4:b5:
b5:75:fa:57:1c:ce:8c:3d:0e:6f:76:48:87:f5:99:
93:42:55:bd:ec:e0:0b:4e:3a:4c:db:de:73:0f:c7:
d1:f4:67:66:30:ee:2d:4e:33:f0:31:33:c2:0e:3b:
8f:de:b4:a5:e5:50:6c:be:fd:db:b5:25:40:05:08:
c8:37:24:01:5c:b1:9f:a3:7b:9b:0b:d4:7a:fb:d3:
84:dc:2e:d0:12:f7:56:51:89:ac:5d:0c:2e:83:c5:
21:c9:94:9e:77:a7:eb:4e:9a:e0:35:be:6b:e6:0c:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:48:4E:10:1B:FD:8A:CE:56:56:2E:06:4C:97:CE:E6:50:5B:AC
X509v3 Authority Key Identifier:
keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:eb:a2:3c:7e:18:f6:0c:f4:d4:09:ba:e0:45:32:65:38:
61:de:27:38:c6:53:2e:18:22:ed:41:fb:d7:c0:26:3c:a9:99:
d7:67:1c:a8:88:cb:5b:6a:c2:d9:3c:35:4a:39:47:e9:aa:b2:
bf:39:86:04:3b:a0:f8:04:d0:32:06:d3:d2:13:00:3c:9c:39:
18:42:da:2c:6d:b8:2c:97:3e:c0:44:d7:dc:29:36:e2:0b:cf:
9a:25:b6:f1:1b:78:6a:bf:e4:cb:69:a2:27:ef:e0:c9:38:e0:
79:51:9d:fe:3d:ae:7a:ec:4e:b4:bb:f4:01:48:9c:64:7a:51:
8b:8e:8d:d5:cf:4b:95:81:82:30:b1:ae:fb:b2:42:77:be:c2:
94:4d:4b:13:50:7b:a4:65:01:5c:3e:c4:25:73:2c:a2:b8:08:
04:1c:3b:f5:b8:91:26:21:1a:8d:e8:7b:90:d6:04:ca:18:f9:
54:57:91:cb:30:72:c2:5c:47:dc:35:a7:14:e9:ac:fe:f2:0f:
19:b4:d0:93:c7:af:9a:88:53:22:b2:53:a4:cc:dc:5f:c4:56:
65:e8:0c:c9:92:63:f2:e6:01:5e:a5:e6:2f:cd:1a:7a:c2:9d:
66:b5:f4:11:dd:b4:aa:70:05:47:a1:47:63:81:55:f0:bf:65:
92:2e:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:31 2025 by rpki-client