This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File: EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier: t0djU0U08vQf7vbRP9jUCyfb0YWhkRH6VHSwqDFeviI=
Subject key identifier: FD:12:96:50:17:2C:FC:4C:E6:CA:83:0B:3E:F3:8A:DC:5C:4E:A0:88
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer: /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial: 0715
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number: 0713
Signing time: Mon 08 Dec 2025 02:00:48 +0000
Manifest this update: Mon 08 Dec 2025 02:00:47 +0000
Manifest next update: Wed 10 Dec 2025 02:00:47 +0000
Files and hashes: 1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: 9zOUPpcLY4SI7QmuPYRISRdJsA+BRoPWpx2LPXUkC4Q=)
2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Validity
Not Before: Dec 8 02:00:47 2025 GMT
Not After : Dec 10 02:00:47 2025 GMT
Subject: CN=69363150-9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:dc:27:4a:3f:ec:65:94:1d:31:ad:33:ea:
2c:91:9c:17:44:21:47:af:61:db:66:8f:40:2d:d1:
7b:3d:20:8b:08:97:a3:c0:f9:f6:40:40:ff:b9:3d:
96:97:d2:f6:fd:d6:a0:8c:c1:83:56:bc:26:05:02:
0b:2e:a3:15:ad:72:3e:ff:ce:d9:e4:28:24:8b:7f:
d3:91:f5:d1:09:d1:8e:e1:5b:03:24:c8:3c:b7:56:
ef:31:40:7c:ab:63:43:16:0a:42:88:5a:b1:7c:10:
97:9b:da:03:be:a4:e7:8e:90:13:94:aa:6e:d6:eb:
02:f7:a7:27:ae:bc:f6:64:3b:9a:64:ee:0c:a1:e3:
40:8a:fd:d4:37:5e:05:19:3b:8d:82:44:04:0a:73:
c2:96:2c:a4:fc:c1:b9:2a:71:f8:19:7f:5a:33:d5:
3f:2e:23:13:b0:d3:e4:3a:ec:92:1d:f6:07:76:d7:
24:10:4e:93:e7:f4:39:0a:18:d0:e9:ee:64:ea:7a:
72:df:a3:4e:bf:99:55:5e:fc:7c:33:b6:ce:ca:de:
ec:11:61:1c:4d:e0:3f:42:02:b6:31:ce:60:69:9c:
55:47:2c:5d:ff:ea:8d:6e:c3:3e:07:06:a6:45:10:
cc:b0:a1:19:90:9d:b0:a9:3e:3b:e6:2e:ad:67:73:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:96:50:17:2C:FC:4C:E6:CA:83:0B:3E:F3:8A:DC:5C:4E:A0:88
X509v3 Authority Key Identifier:
keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:98:42:d6:e5:8f:df:87:b2:78:1f:c3:b4:e5:60:27:f2:64:
94:d3:03:cd:b1:4a:0e:32:ab:e5:b8:a6:dd:29:85:e6:f9:1b:
e3:53:ef:3f:9f:cf:25:a1:e7:f4:47:be:d1:20:a2:8a:24:2c:
39:41:a2:c8:fd:5c:2d:9e:63:74:89:90:46:4b:7d:82:ae:8e:
80:49:3a:86:21:4f:e9:be:12:92:42:66:0d:9a:99:7d:be:cb:
39:6c:3f:b2:a5:46:24:b8:5d:1b:70:f4:72:a3:74:23:5f:4a:
1e:a4:93:ce:39:e4:8e:b5:75:ff:f1:ca:9e:fc:a1:26:1b:ca:
93:b9:c6:fe:27:59:10:a3:70:04:3c:62:dd:7f:fe:64:a8:4d:
b8:50:4e:e6:df:fa:e6:bb:59:2f:fe:51:57:b6:e9:13:48:97:
7a:ea:21:fc:f5:2e:a5:2e:01:ac:ce:5f:4e:fc:78:65:44:73:
6d:39:23:03:ef:67:45:77:06:38:a9:b1:df:f8:3e:75:1a:19:
b1:34:88:e8:30:aa:d7:22:05:69:e7:34:c1:4d:80:ac:09:1b:
98:a1:6d:39:68:45:cd:56:85:fb:3e:12:03:ed:09:9d:db:43:
b0:75:f9:af:20:a3:59:81:46:38:87:f9:f7:2f:71:16:86:e1:
e7:dc:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:04 2025 by rpki-client