This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: V7eUwZ62qOlehcddX0vLaEm/bXzXJZaWw+D4ovxa0ec=
Subject key identifier: 40:B0:4D:AE:42:30:95:6D:35:88:00:BE:D3:88:9B:D3:54:F7:F9:A7
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 036C
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 036A
Signing time: Sat 06 Dec 2025 03:41:31 +0000
Manifest this update: Sat 06 Dec 2025 03:41:30 +0000
Manifest next update: Mon 08 Dec 2025 03:41:30 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: O3fCkqobtoZpZCob/Eg2JmZgB8AR5gZwyqTUFUvvmfE=)
2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Dec 6 03:41:30 2025 GMT
Not After : Dec 8 03:41:30 2025 GMT
Subject: CN=6933a5eb-c512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:a0:2f:0b:eb:3e:2e:e3:56:9b:4f:c6:0e:
05:9f:53:74:77:1c:d1:5f:0b:27:dc:46:81:70:b5:
ba:13:3a:ee:b3:9f:a1:26:e9:d3:ba:6c:2e:5a:97:
ef:48:8d:cc:bf:76:20:a6:eb:50:e9:38:7a:d3:22:
59:fb:7d:ee:5a:4c:46:be:e1:74:36:9e:62:3f:99:
53:25:e0:2e:33:cd:84:22:65:3e:c4:f0:94:16:4c:
02:4a:61:92:08:20:ee:56:fb:08:53:c8:4b:24:1a:
9c:81:9c:14:39:c0:a7:66:2c:a2:25:0d:44:2f:b5:
a3:e9:8d:8c:9e:04:1a:a2:50:37:c8:08:ad:99:47:
4e:cc:06:87:d9:3e:75:67:b5:64:79:9a:b1:2e:ef:
da:d6:37:bd:bc:cc:c9:94:1c:0e:10:24:2a:1a:b8:
8b:9f:c4:da:87:07:3f:c1:58:83:46:ca:b6:7f:99:
52:a6:b5:05:1a:70:98:3e:fc:5e:86:2f:22:e4:bc:
f9:12:ef:c7:e9:93:b7:50:77:73:b5:f9:64:c4:42:
3d:b8:8c:e1:02:dd:2f:fe:7a:f2:63:a3:e1:f4:d2:
98:7a:91:59:0b:b4:cd:4c:17:2d:83:e0:df:bd:e3:
71:46:b0:1a:78:79:a4:42:98:04:27:5a:57:64:e1:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:4D:AE:42:30:95:6D:35:88:00:BE:D3:88:9B:D3:54:F7:F9:A7
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:33:97:9c:a6:77:e0:8d:f8:9e:1b:da:1a:33:35:92:2d:a8:
a9:69:cb:b5:23:2b:89:c8:34:aa:7d:2b:03:f1:eb:f2:0c:7f:
13:3c:ed:38:24:b1:9e:11:9f:d2:8e:92:06:a6:4a:5d:08:22:
bc:b0:9d:ab:84:f2:05:15:d3:57:1c:96:90:02:ad:b8:01:a3:
d2:b8:32:77:76:79:2c:31:0c:52:37:83:57:a5:6a:b1:59:ff:
56:99:f7:d9:a5:96:9b:5a:55:85:c0:b0:5a:bb:bb:9e:1b:66:
45:82:63:a4:eb:7a:93:d8:b7:5a:0d:bb:e1:48:86:c4:1b:4e:
f7:a9:86:2e:df:4e:db:0a:5e:e1:07:23:96:d1:17:4c:1f:4c:
3b:4d:d1:c7:70:c6:85:0b:12:0e:39:5c:b0:a7:36:c7:be:8a:
af:fa:59:b1:32:6a:e0:f5:cf:87:d9:34:27:cf:72:28:f2:4d:
87:4a:d5:ff:2a:b3:0e:09:79:44:08:49:58:14:d7:7e:5f:ae:
78:e8:60:8a:60:f9:cf:04:93:ef:19:4c:02:40:61:2a:c9:b1:
10:66:44:11:b7:7f:b9:10:66:4b:f8:5f:a9:9d:79:e1:1c:5b:
17:12:04:98:90:fb:8f:b9:10:5d:e6:d4:13:00:8d:d0:ac:0b:
7b:aa:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:04 2025 by rpki-client