This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
File: DOoR1fD2WesQDyt_sejINrwlz5g.mft (raw, json)
Hash identifier: ECmBa6N5yFOxZhHdfRVmZT/aEOk6mYO1bw4F7Lt0830=
Subject key identifier: 9E:00:73:AC:C2:D2:82:60:1E:18:FA:57:E7:7F:49:9A:24:F8:6F:B0
Authority key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
Certificate issuer: /CN=F36C33BBAF/serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Certificate serial: 02B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
Manifest number: 02B1
Signing time: Mon 08 Dec 2025 04:03:05 +0000
Manifest this update: Mon 08 Dec 2025 04:03:04 +0000
Manifest next update: Wed 10 Dec 2025 04:03:04 +0000
Files and hashes: 1: DOoR1fD2WesQDyt_sejINrwlz5g.crl (hash: loBhu1GJXUDcNR6Uzw/JMjSxwxQ7D+zIhJOQO3tOfJE=)
2: 48BD0A7A14D811F09D2DBA0A6EB8BCC6.roa (hash: K8z2vSGpFFut3n7D7lisZcx7JDx1aJSflHUP/bhx0pg=)
3: 059E0E4AC59E11EEA53C71B7775412E6.roa (hash: ZFKITH+OchlrxbiwzeW9jzaBB9KK8U2j/qLB4RDTGvs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Validity
Not Before: Dec 8 04:03:04 2025 GMT
Not After : Dec 10 04:03:04 2025 GMT
Subject: CN=69364df8-7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:46:56:b6:92:1b:f5:91:c4:21:73:a8:09:
e7:63:06:c7:a3:41:34:0b:6f:6f:7c:1e:57:ae:fc:
ca:db:97:3f:5b:ab:f3:3d:ac:02:15:e6:01:7a:aa:
e4:22:3e:76:05:94:76:4d:ce:42:82:c7:64:63:0f:
78:bc:df:b4:6e:20:60:21:93:f4:dd:95:ef:90:f6:
08:1f:3a:3e:41:97:f4:49:f3:44:1a:e0:2a:60:70:
11:ff:6d:76:4b:f6:60:25:29:d8:19:f3:de:16:59:
74:3d:16:7d:1d:41:2a:a8:f8:c8:40:35:82:c3:40:
68:4c:35:d3:70:ae:56:04:68:92:92:9b:37:58:c0:
4f:a2:de:1f:53:d3:1e:37:b8:eb:7f:63:9b:80:b8:
09:c4:88:90:6c:3e:48:38:9c:05:93:08:80:c3:35:
36:6d:6d:c9:09:d3:9c:da:0a:21:33:ef:c1:1c:65:
9d:65:04:8c:15:4d:7c:cc:9d:90:62:f2:9b:71:41:
46:56:11:50:3e:3f:f2:ae:75:c8:f3:94:bd:b7:c2:
99:20:85:45:7a:e4:c7:9e:e1:e0:7e:8b:1c:01:ff:
3e:5c:a1:2f:11:b2:4d:1c:3a:c0:24:ec:d4:e5:0b:
49:b2:c5:e7:69:41:32:4b:b3:41:c9:96:4e:70:61:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:00:73:AC:C2:D2:82:60:1E:18:FA:57:E7:7F:49:9A:24:F8:6F:B0
X509v3 Authority Key Identifier:
keyid:0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ec:94:0e:a3:6e:ee:61:6d:e2:17:c2:69:ac:6d:60:ec:56:
3a:bd:52:0c:0a:6c:55:6c:4a:ef:b9:b0:1e:e8:94:af:72:2a:
e7:f6:f0:20:6a:07:fb:66:93:bf:a8:d5:0d:a0:0f:bf:e5:a9:
0e:0b:21:b5:94:db:fb:cf:d6:a4:f8:cf:d9:3c:18:e2:2c:97:
1d:93:dd:3f:52:27:e2:cb:84:03:6e:36:9c:9b:33:b4:90:32:
84:ed:89:40:7a:4d:2b:39:f7:b0:3e:57:5d:10:ff:01:89:9e:
c2:60:5a:4e:1a:8d:32:3a:c2:9a:b5:f9:39:5e:38:17:a4:77:
ec:7e:bc:11:78:eb:90:91:f5:24:20:f9:f9:87:30:b0:e0:05:
38:a1:20:22:80:8d:e1:23:96:4f:b4:9e:32:ab:78:4a:78:72:
f8:aa:12:d9:8f:4e:38:10:f6:b6:2f:1f:9e:7f:25:fd:24:ab:
a1:40:a0:09:17:9e:14:38:6f:c8:b7:68:04:b2:2f:34:e1:b7:
27:47:f7:37:bf:16:fa:74:ac:0a:de:58:2f:94:1f:d0:b5:02:
71:49:a7:11:92:32:64:e1:b4:36:01:85:c4:87:92:54:54:65:
a5:7c:98:82:57:fd:a3:1b:54:9d:ca:e0:2f:6d:0d:de:08:c3:
65:75:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:06 2025 by rpki-client