This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File: 0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier: +UNqQ8U1IY8kFhTn8JN01bB5t/Q+5oRwj5izO/EzEVc=
Subject key identifier: 98:0E:5A:0A:E6:2F:12:AA:5D:7F:5D:5C:5F:17:2B:E0:D7:21:2C:5E
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer: /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial: 0631
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number: 062C
Signing time: Mon 08 Dec 2025 02:26:18 +0000
Manifest this update: Mon 08 Dec 2025 02:26:17 +0000
Manifest next update: Wed 10 Dec 2025 02:26:17 +0000
Files and hashes: 1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: kryUbfOG1FWL/b1zLhQs3gnVFgqhTziQQIrJeo5+4HI=)
2: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (hash: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=)
3: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
4: FE6EB5FE1A4311ED966281A5F1222468.roa (hash: lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=)
5: 7F3D996AEE3411ED84E7435C4AD9E6FC.roa (hash: HFYeFndb2JxxOdKSqCujEOpY8n28a0y4vmxd4LvSXs4=)
6: 35E0C666207711ECA71BBD26D8A014CE.roa (hash: +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Validity
Not Before: Dec 8 02:26:17 2025 GMT
Not After : Dec 10 02:26:17 2025 GMT
Subject: CN=6936374a-fc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:be:ff:28:b9:2b:ea:bf:55:4a:e9:54:a9:
48:8d:83:43:1c:8a:68:38:b1:1d:7d:dc:5e:b6:22:
c1:ec:52:68:3a:58:78:3d:4f:e9:ca:da:35:42:35:
fb:c2:f5:78:3a:e7:bc:cc:ce:29:ab:d2:cf:d3:2f:
6a:07:91:d1:55:4d:06:71:f7:ae:d2:30:7e:4b:bc:
8c:a8:89:1c:3d:1b:2a:c2:c3:39:d0:90:4b:c0:45:
e6:14:31:3c:2c:17:2f:1a:bc:84:3e:98:c2:dc:19:
2e:97:3e:8a:a2:21:b6:c1:5c:a5:78:6f:00:6c:d6:
b0:68:91:83:83:97:72:03:0a:81:ce:f0:2e:24:07:
8a:f6:26:d5:22:e7:9a:ff:14:78:ca:af:a3:9a:74:
31:e8:95:5c:73:fd:e7:51:13:2b:70:f8:94:6c:69:
00:e7:3a:4a:bc:44:fe:5f:83:e0:83:d8:94:b3:0a:
c9:41:0b:fd:df:bf:bb:dc:d8:43:37:fe:e8:32:02:
1e:98:2f:81:ce:82:3a:6d:15:e5:61:3d:03:81:c4:
46:59:9f:77:43:de:1e:37:a0:1e:f0:b5:f5:12:e0:
71:fd:57:8c:41:88:13:55:85:65:b1:87:0a:9a:42:
70:7e:f9:12:d3:04:0b:ea:b3:83:60:84:e5:45:08:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:5A:0A:E6:2F:12:AA:5D:7F:5D:5C:5F:17:2B:E0:D7:21:2C:5E
X509v3 Authority Key Identifier:
keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b9:28:a2:33:5a:5a:50:2a:25:06:e2:32:58:99:9a:66:4f:
35:dc:fb:27:36:51:1b:2a:48:96:66:0a:81:18:9c:0a:17:e1:
84:48:f2:2a:3f:95:eb:ed:75:cd:69:8e:cc:df:9b:80:9f:35:
43:c0:38:9f:c7:e1:ea:c5:ef:8b:70:06:29:fd:08:a9:89:b6:
85:68:9d:f5:df:8b:1d:dd:64:80:82:86:1c:21:a0:35:57:a6:
9a:89:d3:ad:99:96:be:68:b5:7e:7f:89:48:0d:9c:c0:98:91:
68:64:2f:c6:3a:c3:05:8f:c7:ab:16:19:22:54:b9:fa:44:17:
16:91:2f:3d:82:bf:40:f2:53:09:cb:9e:b9:f9:a2:6e:3c:6e:
ca:5e:a5:40:a0:d8:6c:f0:3a:c4:e0:53:bf:73:37:c1:70:b5:
d5:81:3d:de:27:c0:c4:1f:de:22:77:4d:2a:a7:db:f5:56:d7:
9a:e3:40:2d:d0:2f:1c:a9:8f:ff:6c:b2:c6:b1:b8:9f:d5:93:
a0:33:30:76:2d:3a:33:81:6e:ce:04:60:d1:21:6c:e4:46:27:
b6:a7:03:cf:fe:fe:cc:84:9d:96:fd:ab:84:96:aa:c8:73:3a:
72:d0:48:87:a4:2f:6e:b2:7d:ff:f2:09:3a:62:d7:9e:e5:1f:
42:35:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:26:47 2025 by rpki-client