This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
File: 5IF89uPaBQJQGf_Vqru3g4R18ps.mft (raw, json)
Hash identifier: vKV4caDF752TLauBUjgTClkzhhnxiO8j3WfupRt7AF0=
Subject key identifier: 77:38:B2:CF:75:F2:3C:EE:16:4C:63:21:75:B2:40:7E:53:C5:6C:83
Authority key identifier: E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
Certificate issuer: /CN=F3695C0AAF/serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Certificate serial: 042A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
Manifest number: 0428
Signing time: Mon 08 Dec 2025 03:15:40 +0000
Manifest this update: Mon 08 Dec 2025 03:15:39 +0000
Manifest next update: Wed 10 Dec 2025 03:15:39 +0000
Files and hashes: 1: 5IF89uPaBQJQGf_Vqru3g4R18ps.crl (hash: coUUyJRufpviGc6iL5kjvC3qG63eTywiMPIHpEwh5Mk=)
2: 2B3E0AF8C61211F09859F792DAE4EC9C.roa (hash: ItJz50mFSsI63au50L/pGX2otMpXZBP3EvtpW8W/vGg=)
3: CBC1D6C0BD9211EDB6D226DDF1222468.roa (hash: qTwXULSySx53cW1Nc4h52dh7OSZyRV1CiS+RYF1a1tQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695C0AAF, serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Validity
Not Before: Dec 8 03:15:39 2025 GMT
Not After : Dec 10 03:15:39 2025 GMT
Subject: CN=693642dc-f446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5b:95:ae:24:6a:39:08:61:b8:6e:6c:fd:0c:
c0:40:00:71:18:47:80:72:2d:67:bb:73:f0:9a:17:
c6:ef:c6:b5:ee:4c:21:b8:94:7e:34:82:c8:0a:62:
1f:ae:da:a2:a5:1b:44:55:6b:20:69:e8:81:ec:8e:
64:b4:fc:3a:c2:47:2c:3e:30:a2:2f:ee:26:e0:70:
67:d3:b1:e5:63:23:80:2f:af:2d:78:f6:f9:b1:9f:
34:35:07:ff:1c:82:54:35:b3:aa:0c:79:90:0b:f3:
96:9a:25:5b:ac:33:4a:63:a6:bd:58:c4:83:72:02:
05:a7:45:27:7d:24:ef:65:2a:18:22:b4:89:48:5d:
1e:b7:55:bf:e9:bd:36:bd:34:f7:8d:11:f8:34:75:
3e:50:87:77:9a:66:ca:c0:06:e6:4b:1d:7b:f3:cf:
a1:5d:0c:82:a5:9e:2d:c3:4c:0a:3a:8f:80:af:51:
9a:f6:5a:06:da:0f:22:52:2a:1e:34:b1:88:61:74:
c3:96:e3:13:f2:fe:e1:a7:91:bf:36:2a:b2:89:57:
18:e8:2d:64:37:b1:21:58:3d:5b:94:2f:53:39:f7:
95:4c:40:3f:d2:52:44:97:7b:39:be:f1:67:eb:b3:
c7:3a:2a:61:9e:a1:8e:85:1b:5c:f9:cd:fd:06:c2:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:B2:CF:75:F2:3C:EE:16:4C:63:21:75:B2:40:7E:53:C5:6C:83
X509v3 Authority Key Identifier:
keyid:E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3e:89:79:6c:97:49:2b:f9:a4:e8:ef:11:95:63:ff:99:22:
a4:84:1e:2b:3c:74:e5:7b:0d:43:82:bb:73:27:99:bb:79:28:
e3:ed:3d:60:06:09:e1:74:f6:b4:bb:5c:9d:a5:12:eb:f7:c2:
bf:ee:49:32:4b:b9:ad:9a:a8:65:4a:ea:11:08:49:95:e0:ef:
28:4b:d0:d8:19:55:08:f3:df:37:75:b6:5d:2e:7c:2d:91:be:
6d:49:e5:28:81:81:e4:71:13:df:10:38:3e:8a:74:4c:33:35:
70:06:70:fa:6f:ef:c7:0e:b8:6a:de:ee:3d:bc:40:24:4b:92:
9f:d6:d8:53:a9:1e:3b:19:cb:e6:05:ee:a2:f7:6d:31:a5:6a:
73:6e:cc:e5:ed:18:dc:a2:ef:de:63:4d:7a:e4:a1:8c:15:ee:
8c:14:83:5d:a1:28:e0:c2:9a:c2:36:cd:5e:6f:02:68:8a:df:
95:be:4d:f1:a2:7f:7d:57:a8:f6:52:9d:2d:8b:3e:7b:9f:ab:
f6:41:c7:1e:fb:5a:11:2c:c3:d2:32:f3:ed:6b:5f:a8:83:76:
bb:a0:af:dc:83:c1:64:f0:d8:68:4b:80:b8:83:27:cc:5e:62:
5d:77:d1:88:20:48:3e:58:c9:01:58:c6:ac:c1:62:20:48:46:
a3:14:f8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:46 2025 by rpki-client