This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: lazUwiQoKzCxelSyhHHQhe6dHDqsh2CDeo4DkmjUfBs=
Subject key identifier: C6:A3:97:F6:94:4E:F7:E4:91:35:7B:FA:18:E9:AA:47:8E:3E:A2:F4
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 02B7
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 02B4
Signing time: Sat 06 Dec 2025 04:04:52 +0000
Manifest this update: Sat 06 Dec 2025 04:04:52 +0000
Manifest next update: Mon 08 Dec 2025 04:04:51 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: s2NcBFy4tFYpcj7Kd+QWF8luj7SeSTijMOKAHMKuG2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Dec 6 04:04:52 2025 GMT
Not After : Dec 8 04:04:51 2025 GMT
Subject: CN=6933ab64-33ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:2e:69:ff:b9:70:2c:1e:13:26:34:cc:81:
b0:4d:99:ab:e4:7b:70:bf:ca:1f:fe:aa:6e:8a:6a:
5b:f3:c3:7c:64:36:6e:1c:ea:c9:64:85:30:47:85:
ff:8f:12:46:af:aa:fd:49:bc:7c:7d:22:8e:51:fd:
8c:6b:ad:9c:0e:b4:6d:b8:75:18:34:ea:1d:21:33:
77:72:4d:c6:d9:76:4b:6a:2b:09:ac:8e:27:cf:5a:
0b:59:ff:d1:8d:71:a1:92:d8:2f:9c:a6:7f:1c:01:
25:f9:92:64:c3:c2:72:2c:48:c3:a0:f5:17:2f:60:
3a:7e:87:09:c4:06:25:5d:78:e4:00:64:69:dd:4e:
2a:16:7d:c1:36:23:87:a7:75:a2:60:36:a8:de:73:
a1:6f:69:7a:1b:d5:a6:3d:c6:6c:e9:5f:cd:0b:ed:
05:31:e2:0c:3d:d8:a2:a7:66:0a:d4:3b:40:dc:7f:
86:7f:33:09:d9:b7:ff:44:1c:32:11:e4:00:cf:10:
64:7d:73:c2:81:9d:fc:01:83:8a:f5:ad:1f:6f:ae:
c8:6a:b7:a3:6b:db:d3:a1:4c:84:ff:33:90:ec:cc:
d5:84:a6:fa:41:e3:c2:3f:55:d9:b4:26:2f:85:b2:
98:02:bf:8e:72:74:27:19:a7:00:21:2a:eb:e8:c6:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A3:97:F6:94:4E:F7:E4:91:35:7B:FA:18:E9:AA:47:8E:3E:A2:F4
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:2a:0d:91:3e:7e:4a:85:ff:5d:58:e7:5b:6b:4b:5f:f6:b6:
2c:23:5d:15:6c:b9:fb:4a:79:f7:fe:4b:7d:14:ac:84:da:4d:
2c:b6:ad:bd:94:be:ab:69:1f:8e:c2:ed:cf:8e:28:d7:82:83:
ab:23:6e:cc:e1:a5:72:12:71:42:c7:9a:a9:6b:2d:f7:bb:5b:
1a:b8:c3:49:fd:28:8d:2a:ae:14:fb:b4:bf:2b:e8:91:70:9e:
c5:f1:ac:ea:34:8a:94:e7:a4:4c:bd:7e:77:3f:8f:4a:91:59:
e8:6b:22:a8:08:f2:04:4d:70:51:0a:87:89:07:6d:3d:7e:93:
97:24:4b:2b:3d:a2:67:27:e3:17:4e:58:9d:3f:99:97:6f:d8:
a2:55:15:32:35:fd:26:5d:7e:a6:d7:34:db:0d:0a:df:0f:86:
0b:35:f4:59:05:14:90:50:20:7e:ae:39:04:80:b2:05:d5:cc:
da:f6:b5:22:fa:74:bb:7d:ca:21:16:1d:b1:d0:27:7a:7e:f3:
f0:60:6a:ba:e8:c9:db:a2:4d:e5:c1:03:82:5e:81:e1:5a:65:
98:ee:36:aa:3c:b1:ee:da:d5:6a:c8:f3:4f:de:ba:0e:f5:a8:
bc:69:67:05:9a:02:99:fd:de:ce:da:40:78:2b:17:dd:6b:9e:
85:29:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:11:26 2025 by rpki-client