This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File: tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier: Em6fvvQE3+wSbKrJJj3ohfAbwnuzYtIYYgO0fPeKa/g=
Subject key identifier: 2C:81:2F:F3:7E:C6:B6:0F:FC:05:59:CF:E4:F5:53:30:E2:F7:3B:A1
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer: /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial: 0210
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number: 0210
Signing time: Mon 08 Dec 2025 04:20:27 +0000
Manifest this update: Mon 08 Dec 2025 04:20:26 +0000
Manifest next update: Wed 10 Dec 2025 04:20:26 +0000
Files and hashes: 1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: AoFUDofwb3HTF7RJ2qOwIpLUNXpaf9f0q1FxTBllroQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Validity
Not Before: Dec 8 04:20:26 2025 GMT
Not After : Dec 10 04:20:26 2025 GMT
Subject: CN=6936520b-f492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:07:7d:f9:64:5b:a3:bf:27:a5:10:b6:f4:
31:e3:fe:3a:9c:48:28:ec:f6:de:b6:d1:d1:2a:ba:
87:29:b9:64:37:22:d8:1d:d3:d4:a5:a6:5f:8a:b2:
c5:05:3f:bb:75:f8:8e:71:d9:45:fd:e7:81:75:31:
89:a0:2f:41:0d:79:df:f8:c7:98:f4:c8:ce:91:ff:
0a:7c:ec:f8:88:d8:9f:82:24:6c:7c:02:62:a2:57:
8b:07:5d:7f:28:0f:9f:12:0a:0b:cc:99:d7:74:40:
84:15:75:1a:21:6a:c9:41:70:ff:f3:2c:9a:07:66:
09:8b:7d:84:e1:13:4b:24:9e:9b:f9:ab:62:cd:9e:
42:72:e3:ae:08:d2:98:68:36:ed:55:fc:b7:78:a6:
68:fe:2f:17:ab:f6:8e:ed:de:d3:fa:f7:b7:94:4c:
63:83:83:d8:de:b4:9b:c0:06:d0:ac:c6:4e:8f:ac:
57:eb:71:09:72:8e:91:b1:25:72:97:6c:32:b0:0c:
dc:83:0a:2e:14:f1:1f:ac:d8:12:04:f8:92:a4:ae:
6f:4a:99:c9:64:16:02:8b:2b:50:aa:33:31:4f:d9:
44:e1:da:09:07:3c:de:a1:10:1c:f7:67:73:f4:bd:
49:f6:d7:3a:de:72:43:4a:17:3a:67:14:ab:d2:79:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:2F:F3:7E:C6:B6:0F:FC:05:59:CF:E4:F5:53:30:E2:F7:3B:A1
X509v3 Authority Key Identifier:
keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:95:4f:7e:99:a4:1a:f3:ac:18:14:a2:4c:9f:88:67:e1:87:
02:04:33:88:f5:60:ae:27:d5:52:d7:8e:dc:f0:70:a2:a9:41:
5a:08:d5:9b:2a:d7:83:26:2d:64:30:b6:83:ac:cf:02:18:7f:
d0:0e:10:ce:97:c0:82:2b:73:f7:b8:b7:12:6a:a1:a1:ac:d5:
89:cf:5b:36:57:fa:88:6d:e0:95:db:5d:7b:54:f5:1d:60:d2:
80:2e:fd:5d:e2:11:08:f0:d8:14:29:d6:c2:35:37:38:af:4c:
46:98:1a:c5:51:6e:6e:1f:11:30:23:1d:b4:b5:b2:50:90:87:
f8:83:6a:a7:bb:f4:28:20:29:0c:dc:8f:bb:8c:13:55:46:96:
c9:87:2e:4d:b1:3e:78:1a:12:41:b5:16:6c:49:e9:fc:03:9b:
08:b8:fe:00:b6:92:a0:35:14:4f:00:74:cb:cd:ae:3a:7e:f1:
7e:7f:d2:e4:65:4e:3b:3a:d0:fd:23:45:95:b3:ca:19:64:3e:
f9:75:63:a0:a9:ef:b9:0d:f2:82:2c:dc:f7:8e:6f:aa:64:f3:
3b:9e:a9:b3:fd:83:7f:15:a1:d6:6c:b9:bc:14:03:ea:9a:a2:
a4:b5:bf:44:99:6a:34:bd:08:39:ad:a6:e2:a5:51:24:e9:35:
90:cd:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:54 2025 by rpki-client