This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json) Hash identifier: n/RswitxUKE0mqLfnh9WlzIUGpt05bkEbQ8SMGkKO4A= Subject key identifier: 3F:F3:3E:BF:39:B5:C5:66:ED:39:CC:FE:2F:6E:AB:44:3B:FC:DB:BA Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A Certificate serial: 0549 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft Manifest number: 0541 Signing time: Mon 08 Dec 2025 02:45:04 +0000 Manifest this update: Mon 08 Dec 2025 02:45:04 +0000 Manifest next update: Wed 10 Dec 2025 02:45:04 +0000 Files and hashes: 1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: S/QM2OMNNbZrySZEdvcyK68vp4RCm46EIrQqAolf/us=) 2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=) 3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=) 4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=) 5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=) 6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A Validity Not Before: Dec 8 02:45:04 2025 GMT Not After : Dec 10 02:45:04 2025 GMT Subject: CN=69363bb0-0f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:71:b9:a7:ee:d2:47:0f:b7:94:2b:4d:f1: 4b:6a:1b:00:2b:b7:d4:ca:e5:2d:cb:00:ac:43:d0: 6e:90:67:ac:ba:4f:23:48:ce:f3:0a:38:e1:ba:0e: f0:6b:78:5e:ec:8c:ad:81:21:cc:b1:7b:fa:51:de: 5d:81:14:ca:d1:01:59:20:0d:36:56:26:aa:df:e8: 33:7e:be:45:24:0e:d4:11:31:3a:60:ff:5f:06:67: 77:bb:8e:cc:5c:81:0e:8c:94:57:ab:a4:ad:4f:e2: 90:8e:7e:c0:cc:80:7f:d5:f0:43:04:41:31:31:13: 71:cc:45:4c:09:35:44:eb:77:18:c9:3e:a0:9f:0b: dd:6f:dc:c6:4b:5f:fb:70:fc:3e:3d:af:cf:8f:d1: 8c:e7:7a:e0:7b:a7:96:16:e9:2a:4d:23:96:33:e1: ab:05:97:95:3a:c7:fc:0e:c4:4c:94:70:0b:10:23: 63:62:4f:41:c5:64:9e:e3:bd:fe:52:b9:48:05:0c: 30:51:81:87:12:15:90:76:f3:c1:13:ad:17:86:0d: 02:77:44:c6:5b:6f:29:96:d2:b9:f1:82:7d:cf:da: 4f:a3:e6:4a:1b:1e:88:c9:77:85:3b:13:0d:87:de: f0:36:23:89:71:3c:5b:43:59:f2:83:36:31:f1:75: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F3:3E:BF:39:B5:C5:66:ED:39:CC:FE:2F:6E:AB:44:3B:FC:DB:BA X509v3 Authority Key Identifier: keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d2:ad:34:7f:e0:8d:21:b3:9a:35:91:0f:55:09:c9:18:f0: 9b:a4:1e:1e:03:ea:5e:23:d5:5e:43:e5:67:3d:83:7a:fd:d5: 34:70:62:d1:c0:82:68:78:3b:d8:0f:5f:ee:49:50:fb:c9:f2: 38:03:71:da:3b:93:1e:1b:bc:50:ba:64:42:e6:6a:32:52:3b: cc:78:42:34:f7:1d:b5:2c:62:76:7c:9b:69:41:18:15:41:22: bf:08:e0:50:3f:98:fe:4c:56:cf:3c:28:5f:79:8a:aa:ce:f3: 24:2c:79:09:3b:15:36:a9:72:aa:70:3c:62:fc:3f:c4:e3:b8: 88:73:a1:74:79:c5:9c:34:46:1f:f4:cc:85:3e:7a:02:3e:23: cd:2c:ed:3a:ae:fa:01:8e:ad:11:d8:02:8b:68:a3:71:e5:18: 74:99:2a:f1:06:8f:31:87:09:16:11:1a:1a:77:8c:8b:89:8c: e6:d4:f0:fb:30:67:1a:e1:08:b3:85:3b:30:0f:12:10:43:88: bf:05:df:87:af:e3:af:e5:88:f3:7e:8a:67:14:11:25:1f:ad: e5:d9:3c:bc:2f:81:61:f7:63:c9:65:9f:bd:d6:00:1c:02:e7: 21:31:d5:e9:d7:26:f0:e6:fa:86:69:17:82:bb:58:c2:e3:eb: 7f:d2:08:07 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTI5RURBRjExMC8GA1UEBRMoMkEzQ0M5RTU1MTlBNUE1QkIxM0QwODMxMENBOTM0 ODI0ODk2RkE1QTAeFw0yNTEyMDgwMjQ1MDRaFw0yNTEyMTAwMjQ1MDRaMBgxFjAU BgNVBAMTDTY5MzYzYmIwLTBmNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDLWnG5p+7SRw+3lCtN8UtqGwArt9TK5S3LAKxD0G6QZ6y6TyNIzvMKOOG6 DvBreF7sjK2BIcyxe/pR3l2BFMrRAVkgDTZWJqrf6DN+vkUkDtQRMTpg/18GZ3e7 jsxcgQ6MlFerpK1P4pCOfsDMgH/V8EMEQTExE3HMRUwJNUTrdxjJPqCfC91v3MZL X/tw/D49r8+P0YzneuB7p5YW6SpNI5Yz4asFl5U6x/wOxEyUcAsQI2NiT0HFZJ7j vf5SuUgFDDBRgYcSFZB288ETrReGDQJ3RMZbbymW0rnxgn3P2k+j5kobHojJd4U7 Ew2H3vA2I4lxPFtDWfKDNjHxdf19AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUP/M+ vzm1xWbtOcz+L26rRDv827owHwYDVR0jBBgwFoAUKjzJ5VGaWluxPQgxDKk0gkiW +lowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkUyOUVELzFDNUI1RDAyREMwOTExRUM5Q0VCREU5QkYxMjIyNDY4L0tqeko1 VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0tqeko1VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEy MjI0NjgvS2p6SjVWR2FXbHV4UFFneERLazBna2lXLWxvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAN0q00f+CNIbOaNZEPVQnJGPCbpB4e A+peI9VeQ+VnPYN6/dU0cGLRwIJoeDvYD1/uSVD7yfI4A3HaO5MeG7xQumRC5moy UjvMeEI09x21LGJ2fJtpQRgVQSK/COBQP5j+TFbPPChfeYqqzvMkLHkJOxU2qXKq cDxi/D/E47iIc6F0ecWcNEYf9MyFPnoCPiPNLO06rvoBjq0R2AKLaKNx5Rh0mSrx Bo8xhwkWERoad4yLiYzm1PD7MGca4QizhTswDxIQQ4i/Bd+Hr+Ov5YjzfopnFBEl H63l2Ty8L4Fh92PJZZ+91gAcAuchMdXp1ybw5vqGaReCu1jC4+t/0ggH -----END CERTIFICATE-----Generated at Mon Dec 8 17:18:49 2025 by rpki-client