This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: YWv2S0KlLheat4JQL/ilbveFYwzme07b2B0lPJcmRk8=
Subject key identifier: F0:E4:8E:98:81:46:EE:54:64:08:34:89:6D:68:68:F9:36:09:F3:CB
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 0377
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 0371
Signing time: Mon 08 Dec 2025 03:40:25 +0000
Manifest this update: Mon 08 Dec 2025 03:40:24 +0000
Manifest next update: Wed 10 Dec 2025 03:40:24 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: B490iOZJkhRrG89W0GsKXUughdbijepTnF1dg60AydE=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Dec 8 03:40:24 2025 GMT
Not After : Dec 10 03:40:24 2025 GMT
Subject: CN=693648a9-f0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:df:1c:22:cb:0a:67:2d:25:a7:95:04:59:
16:d2:f7:b9:c5:73:c4:b1:ab:ca:b3:06:c5:3d:a0:
78:2b:ad:80:62:c2:18:2f:e5:06:4e:6e:c2:cc:36:
b0:6c:2b:60:94:22:66:1e:5b:e4:ae:35:32:de:a8:
72:6d:d0:13:ee:4f:34:87:2c:2e:b1:d6:98:67:d2:
69:ae:51:d7:12:6b:7b:be:40:e7:fa:b8:00:a4:51:
41:0e:1b:59:3b:c7:6c:49:82:52:b0:06:57:be:fb:
6c:35:ec:34:9f:22:8b:f4:7e:8e:2a:d8:24:99:fc:
e3:22:53:69:63:85:fa:34:23:d9:ed:f7:86:be:a7:
cc:e3:5a:06:cc:a8:88:be:6d:07:4f:e2:3c:fc:a4:
68:e4:0d:01:8a:a3:c3:0f:3d:f2:79:90:cf:13:10:
7b:31:b4:00:75:8b:5d:a8:2b:54:48:4f:14:92:57:
61:40:95:6c:f4:05:db:e2:13:25:37:e7:0c:21:fa:
fa:c7:16:4e:60:de:93:bf:29:ec:fd:66:4a:aa:a2:
6c:70:01:b7:4f:46:e2:f5:21:2f:75:47:05:72:4a:
33:20:b2:f6:e9:5f:ab:6a:22:9a:6a:b5:19:08:08:
7d:1a:e7:cc:b3:65:74:59:a5:bb:8c:e9:5c:b8:84:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:8E:98:81:46:EE:54:64:08:34:89:6D:68:68:F9:36:09:F3:CB
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:53:de:1c:52:82:a3:09:30:d5:40:ac:e2:0e:19:b6:09:18:
3f:e4:3f:66:f8:25:78:f7:48:ec:91:ee:dc:a9:fa:76:7d:e2:
63:ab:ea:a1:b9:a6:16:d5:82:41:f1:62:cd:86:5b:e4:f0:43:
b8:41:9d:8b:5a:c0:b2:ea:cd:44:5a:05:b7:99:73:24:f5:e2:
bc:e4:6e:47:56:0b:e4:ea:86:f5:32:e1:cb:43:ad:29:d9:c6:
25:d6:b5:b1:2d:ea:93:0a:1c:85:6f:89:08:99:72:b5:20:60:
7c:57:24:ad:d1:f9:22:02:89:dc:91:42:0c:79:a4:1a:ca:da:
ac:63:8c:97:1a:75:f0:95:42:8f:04:50:a1:d4:e4:5c:d1:a0:
72:26:e2:5c:cf:e4:b7:61:d4:0a:5c:0f:15:da:59:e0:24:e3:
f3:c4:f1:20:1b:fb:fc:38:9d:fd:f7:83:73:23:c0:e5:73:18:
36:10:84:7f:82:b8:11:29:3f:7d:0a:6c:0f:03:54:ab:82:63:
80:64:0a:a0:b9:0f:06:19:9d:8e:70:98:e0:51:dd:93:06:bb:
25:b1:82:4c:4a:31:63:40:e3:b1:1c:6a:41:b7:11:b9:57:05:
d3:b5:c9:3b:44:b4:e2:06:14:b3:d3:45:cd:a6:ed:67:54:b4:
ff:1e:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:04 2025 by rpki-client