This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File: iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier: kYc1AEuqWhSCun0r1NMumBq3jeO+nYbm65NROaCzbLw=
Subject key identifier: CD:7D:5E:9E:E9:FA:82:FC:A1:B1:D1:42:9D:CF:BC:0E:F1:A5:CB:60
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer: /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial: 04C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number: 04BE
Signing time: Mon 08 Dec 2025 03:01:20 +0000
Manifest this update: Mon 08 Dec 2025 03:01:19 +0000
Manifest next update: Wed 10 Dec 2025 03:01:19 +0000
Files and hashes: 1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: zfX6Jc0Ld8422WWLw8GLusIZRDvTLiaBOzZfYTBCOSs=)
2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3E3DAF, serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Validity
Not Before: Dec 8 03:01:19 2025 GMT
Not After : Dec 10 03:01:19 2025 GMT
Subject: CN=69363f7f-e52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:27:95:3d:56:ef:2b:13:9a:5d:ca:28:8e:
df:6f:41:27:ef:35:92:7a:fe:2b:0d:1f:e3:cd:50:
5b:8e:c3:c3:14:fb:02:86:5b:1e:36:53:f8:40:d4:
d9:5c:5c:47:ad:48:28:aa:55:fc:7b:38:f2:36:3d:
f4:9b:23:ea:ee:29:ee:cf:bb:5c:0f:a5:f5:aa:c0:
be:86:49:62:62:e1:73:2f:4e:83:35:3f:ad:0b:50:
1f:01:2f:8a:38:89:28:a9:b2:99:04:66:a8:e7:d7:
0f:2f:86:c6:95:33:59:7a:a9:45:f9:af:3e:c5:75:
a4:b8:3d:96:7b:7c:e7:0a:46:f0:7b:60:da:7b:93:
53:44:41:50:93:8a:73:94:2c:97:61:8c:41:a1:fb:
6c:3c:e4:c0:5c:8c:f0:4b:55:a5:ef:5b:33:db:36:
4a:e9:10:a7:83:d7:7b:92:e3:19:85:7c:aa:56:4f:
ed:06:fb:71:42:b0:f7:6d:3e:a0:5b:e6:70:8e:5f:
b6:e0:36:27:8c:6c:00:6f:44:88:cb:7d:dc:03:72:
05:05:a3:e9:3f:b4:b2:57:6b:f0:6b:cc:fa:42:cd:
bd:6e:80:02:aa:7f:aa:f1:36:19:57:fa:ac:7e:35:
fa:8e:65:1a:be:f0:26:f7:b8:bb:85:34:c5:2e:86:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:5E:9E:E9:FA:82:FC:A1:B1:D1:42:9D:CF:BC:0E:F1:A5:CB:60
X509v3 Authority Key Identifier:
keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:da:1a:11:cc:32:fb:9b:cd:0d:da:d2:d8:ab:ae:4d:9e:
2b:bf:9e:ba:1e:a4:a6:a7:ca:30:a7:45:00:e2:23:31:a0:ab:
2e:02:4e:9e:14:91:fd:61:12:49:2d:26:82:1b:e3:2d:ec:fb:
10:b8:9b:8a:1b:08:e6:9f:7b:e5:03:9c:7f:08:2e:47:b7:33:
16:2f:92:76:e9:02:48:98:39:78:17:6a:0e:8c:cc:a5:d4:c9:
fc:bf:ee:f2:a7:ab:ce:f7:c2:04:47:6b:0a:30:b5:40:7f:dc:
6a:01:77:1f:48:44:ff:17:c7:3c:9b:b9:a5:71:ed:62:9c:d0:
95:69:08:4f:cd:fa:6c:98:37:40:6a:b8:ec:06:78:2f:34:6a:
14:f7:1e:ac:4c:19:bb:2e:63:49:13:f6:c5:70:6f:86:8d:04:
44:59:c1:e7:14:7a:4d:5d:b3:47:b9:13:c8:82:78:df:a7:1f:
53:18:21:4b:f5:70:8e:d2:01:14:a3:f3:de:24:9f:d4:dd:50:
91:5f:52:05:64:9a:e8:72:25:8b:32:4c:a2:ee:27:f5:ee:e0:
53:48:3b:d6:4a:31:34:9c:c9:f8:ce:2d:1f:3e:48:f3:a1:c9:
8a:f7:ff:e2:15:cb:33:07:89:52:e5:a4:c9:f6:b2:0f:04:84:
0e:70:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:45 2025 by rpki-client