This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File: DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier: tPbspE9vhVyU5V/axqIWe101AJ3CC9prDOy36OaIZkk=
Subject key identifier: 21:A8:6A:B3:B2:36:CA:86:90:A7:9A:B8:DC:04:88:A7:96:11:CC:5F
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: 01D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number: 01D1
Signing time: Sun 25 Jan 2026 04:40:43 +0000
Manifest this update: Sun 25 Jan 2026 04:40:42 +0000
Manifest next update: Tue 27 Jan 2026 04:40:42 +0000
Files and hashes: 1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: 9GboE8S8yObjp6JIq6ZBX573f6YjA49V7hWy9z/AtRw=)
2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Validity
Not Before: Jan 25 04:40:42 2026 GMT
Not After : Jan 27 04:40:42 2026 GMT
Subject: CN=69759ecb-07e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:49:5a:cf:21:e2:f1:d8:7c:b5:e9:56:69:
44:ea:0e:b3:51:98:70:dc:23:3a:9c:45:91:07:fe:
1c:61:e6:63:80:c6:ff:36:e6:41:fe:f7:64:99:88:
57:ff:1f:78:d7:cd:5c:a9:ff:09:79:f5:64:42:69:
c5:4f:13:b9:c2:4d:d8:07:bb:1f:9f:af:ce:1a:26:
87:ae:cf:a0:6b:79:c6:69:55:3e:6a:8f:5a:ed:f0:
6c:1e:b7:b6:6f:4f:d2:63:73:d6:0a:ab:2f:4d:bb:
ec:91:22:85:f6:62:a3:04:13:f7:a2:4e:56:db:7f:
62:68:de:a1:b2:c5:ee:57:9d:fb:a0:ef:83:ee:f5:
81:e0:da:42:81:1b:61:13:a1:b4:ad:9c:20:43:ab:
74:70:bb:1d:12:03:0e:e0:a1:1b:63:33:1f:04:fe:
2e:07:1a:7d:00:da:79:77:b1:51:b6:2e:db:58:4d:
2a:75:42:a7:e6:73:08:60:35:fe:b4:f5:c4:81:03:
83:ba:4f:a0:ca:4b:2d:d0:9c:58:b8:61:50:11:b0:
2e:92:11:5e:c2:78:c3:d3:e9:ca:36:6c:ff:95:92:
65:65:09:fd:56:fb:6c:81:e8:bd:0b:2c:f7:c9:6d:
ee:3e:82:84:ff:bc:c2:04:d1:97:e4:93:4f:98:4e:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:6A:B3:B2:36:CA:86:90:A7:9A:B8:DC:04:88:A7:96:11:CC:5F
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:2b:8c:09:8c:89:2b:88:53:fd:a6:0e:b4:aa:cb:ae:6a:
4d:8a:9a:6b:6e:62:f5:75:36:50:7a:f8:4f:3a:3e:71:f1:d6:
08:bb:57:30:69:8c:6a:7c:6e:a9:da:a2:25:8c:58:52:d4:3f:
44:f8:69:b5:5e:1a:0d:0e:ca:54:a0:e0:42:fe:b1:d0:1c:a8:
2b:c3:24:44:63:6e:40:fd:e0:63:41:2f:36:1b:35:3f:48:dd:
1a:e3:c6:50:dc:19:1f:a3:b2:8d:da:c2:33:19:6b:71:b3:4b:
33:2e:56:bd:be:9c:4c:df:1e:3e:02:90:55:03:9d:4b:c5:53:
1a:82:bd:b2:fe:49:85:de:8d:32:21:da:60:f7:d5:4f:16:8a:
84:4f:86:f7:1c:9e:eb:34:ab:a0:3c:aa:1f:2f:99:04:9e:64:
46:b3:f9:3d:28:57:cb:f6:11:e8:f4:28:72:75:f5:da:29:95:
0c:59:af:1d:2e:40:22:4f:a1:29:4f:95:81:e1:c7:e7:4d:9b:
93:36:2e:89:d0:ec:5d:4c:ab:2f:8e:b4:63:b7:1d:86:da:8d:
d1:44:b6:ad:b1:04:57:79:14:f1:ee:de:8c:a7:6b:df:27:cf:
c3:15:be:4f:cf:6e:99:0c:27:8e:23:68:4a:5c:8a:ab:9f:b0:
1a:a8:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:33:42 2026 by rpki-client