This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
File: eJra0zjCDXJE3Hvm0PRKklP8jxM.mft (raw, json)
Hash identifier: ZvHKJCbKvvxxNx81IH0hDadGSAaXn05/C817no/OY18=
Subject key identifier: B7:C3:EC:43:EE:CB:A4:FE:FF:43:B4:9F:53:B1:E2:07:7C:D5:F4:20
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Certificate issuer: /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial: 011E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
Manifest number: 011C
Signing time: Mon 08 Dec 2025 04:51:56 +0000
Manifest this update: Mon 08 Dec 2025 04:51:55 +0000
Manifest next update: Wed 10 Dec 2025 04:51:55 +0000
Files and hashes: 1: eJra0zjCDXJE3Hvm0PRKklP8jxM.crl (hash: FZrr7fQkGpr6BvLqaDJwvsYpGlmAb76lS6rAu+9zusU=)
2: 3F9659F6FA5711EFA9433954762E951A.roa (hash: qKiDyS4k3Pb0vrru4mPYqluJ2Rx/UxF8Iobn+ms5BiI=)
3: DC0411CAFA5711EFA0C15158762E951A.roa (hash: 3eW9DvSOVij5SdKc0NclAvUK7jyKsaBWMt4dydb1suk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE687AF, serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Validity
Not Before: Dec 8 04:51:55 2025 GMT
Not After : Dec 10 04:51:55 2025 GMT
Subject: CN=6936596c-8fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:57:1e:c0:ea:1d:df:ee:ca:1c:05:9c:33:
34:8a:5d:f2:07:fd:c0:5a:aa:a4:cc:e7:de:23:68:
b5:3e:0f:d6:e5:58:b6:5a:bb:98:20:8d:46:43:9d:
a3:99:ca:10:b6:b4:92:3c:29:fe:31:a6:a7:d4:0c:
8a:00:5c:16:a8:d7:09:ef:ac:2f:f8:17:d5:f6:30:
83:5f:72:ca:8b:da:ce:ec:da:58:18:35:0d:8f:3f:
62:1e:f9:2f:e8:70:bb:d3:92:5c:08:d6:f4:99:42:
cf:05:96:8f:93:2d:54:c4:44:1a:0e:a0:26:fe:60:
70:8b:d0:8c:b0:ed:79:d2:30:3a:f0:59:47:bb:24:
24:f1:e9:df:0c:a9:1f:12:3d:b8:a9:8e:e4:3f:51:
ad:aa:39:88:36:c2:aa:98:28:6f:77:be:15:f1:b6:
9a:f7:79:98:90:af:7f:11:83:7c:da:c5:cc:63:4e:
0f:8c:b3:ed:45:c6:11:23:b2:db:bc:dd:6e:34:0e:
7b:ad:0f:89:f3:b4:f2:fb:07:a9:d1:a2:ca:9a:f8:
6c:5f:c3:27:8d:09:86:f2:9d:26:54:05:59:cc:36:
df:4a:cd:27:ba:a1:dc:48:a7:dd:18:d9:d2:be:71:
b4:4a:4a:a4:19:bc:ae:d6:f5:4c:80:95:d0:93:4f:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C3:EC:43:EE:CB:A4:FE:FF:43:B4:9F:53:B1:E2:07:7C:D5:F4:20
X509v3 Authority Key Identifier:
keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:c9:b1:64:4e:db:a3:0b:44:6e:58:da:26:3e:00:1f:10:
12:88:b8:0e:f1:1a:3b:4d:da:98:ae:03:14:d9:b3:ec:57:dd:
5c:24:2d:b1:34:fa:fa:87:ed:75:ec:92:f8:89:51:3b:3e:ab:
b2:7b:4a:2a:d1:69:90:62:12:d8:a5:a5:25:ea:45:d0:db:97:
7d:de:65:58:4e:6f:26:8d:52:2f:33:23:3e:cc:e9:e3:f4:ee:
bf:f5:93:6b:3f:fe:60:6e:f9:97:eb:1e:1f:d0:3d:e8:7e:98:
83:21:96:bb:e6:ad:16:a5:17:c6:96:35:30:d5:f8:84:91:45:
6b:64:77:cf:1a:d0:d7:42:1d:34:4c:cf:17:1f:a8:a5:e1:eb:
90:a7:b9:68:f9:4b:03:ff:4a:4c:83:b0:57:d0:71:e2:ff:d0:
60:ad:48:cd:88:83:4c:6e:6a:9e:f9:70:43:b9:08:c2:f0:39:
df:5f:3d:bd:ef:8b:44:d7:27:76:ff:00:eb:90:40:69:f0:c9:
13:0e:8b:2f:d5:fd:a3:cb:82:a7:6a:7d:61:ef:c9:24:99:5a:
46:f0:0d:f3:39:5b:e1:82:99:27:e6:9f:7d:b8:1c:9b:29:9b:
4e:a9:3d:b3:a7:db:68:56:3d:e0:d2:2d:81:2f:67:e7:d8:e8:
57:ce:c0:80
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUU2ODdBRjExMC8GA1UEBRMoNzg5QURBRDMzOEMyMEQ3MjQ0REM3QkU2RDBGNDRB
OTI1M0ZDOEYxMzAeFw0yNTEyMDgwNDUxNTVaFw0yNTEyMTAwNDUxNTVaMBgxFjAU
BgNVBAMTDTY5MzY1OTZjLThmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSg1cewOod3+7KHAWcMzSKXfIH/cBaqqTM594jaLU+D9blWLZau5ggjUZD
naOZyhC2tJI8Kf4xpqfUDIoAXBao1wnvrC/4F9X2MINfcsqL2s7s2lgYNQ2PP2Ie
+S/ocLvTklwI1vSZQs8Flo+TLVTERBoOoCb+YHCL0Iyw7XnSMDrwWUe7JCTx6d8M
qR8SPbipjuQ/Ua2qOYg2wqqYKG93vhXxtpr3eZiQr38Rg3zaxcxjTg+Ms+1FxhEj
stu83W40DnutD4nztPL7B6nRosqa+GxfwyeNCYbynSZUBVnMNt9KzSe6odxIp90Y
2dK+cbRKSqQZvK7W9UyAldCTT3MbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUt8Ps
Q+7LpP7/Q7SfU7HiB3zV9CAwHwYDVR0jBBgwFoAUeJra0zjCDXJE3Hvm0PRKklP8
jxMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVFNjg3LzE2RkI2RDlBRkE1NDExRUZBNUM2NUNCRTc2MkU5NTFBL2VKcmEw
empDRFhKRTNIdm0wUFJLa2xQOGp4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VKcmEwempDRFhKRTNIdm0wUFJLa2xQOGp4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUU2ODcvMTZGQjZEOUFGQTU0MTFFRkE1QzY1Q0JFNzYy
RTk1MUEvZUpyYTB6akNEWEpFM0h2bTBQUktrbFA4anhNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8IsmxZE7bowtEbljaJj4AHxASiLgO
8Ro7TdqYrgMU2bPsV91cJC2xNPr6h+117JL4iVE7Pquye0oq0WmQYhLYpaUl6kXQ
25d93mVYTm8mjVIvMyM+zOnj9O6/9ZNrP/5gbvmX6x4f0D3ofpiDIZa75q0WpRfG
ljUw1fiEkUVrZHfPGtDXQh00TM8XH6il4euQp7lo+UsD/0pMg7BX0HHi/9BgrUjN
iINMbmqe+XBDuQjC8DnfXz2974tE1yd2/wDrkEBp8MkTDosv1f2jy4Knan1h78kk
mVpG8A3zOVvhgpkn5p99uBybKZtOqT2zp9toVj3g0i2BL2fn2OhXzsCA
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:04 2025 by rpki-client