This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: oCFu9Tzv10u5B0ck2gUm/FA3dA7K6Lcy2/shBYQBPSg=
Subject key identifier: D2:2C:9E:59:5F:2D:DE:C0:F3:81:B8:77:EB:E2:11:2D:9E:8E:44:73
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0F19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0F18
Signing time: Mon 08 Dec 2025 00:52:48 +0000
Manifest this update: Mon 08 Dec 2025 00:52:48 +0000
Manifest next update: Wed 10 Dec 2025 00:52:48 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: F6g9C7sWTqEKe92DhbwK0fLPYHp9Lf44ib0z5ZTIGB4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3865 (0xf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Dec 8 00:52:48 2025 GMT
Not After : Dec 10 00:52:48 2025 GMT
Subject: CN=69362160-289f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:08:64:22:a0:bd:84:74:c5:20:01:b2:c3:
95:59:e2:3b:3b:82:74:e5:7f:b5:9f:0c:6b:82:a4:
e1:d2:ba:39:9e:3c:35:08:c4:1d:7a:1f:58:9d:ac:
31:0a:02:96:5d:ca:4f:d3:e6:f2:e8:9b:9c:39:e8:
df:a8:02:5a:b2:3e:73:d5:c0:97:65:8d:68:b6:57:
11:38:0a:94:e9:8b:fc:cd:df:ae:6f:6b:e2:66:fb:
92:c2:5a:2d:ea:6b:30:db:a2:5c:88:68:a4:fc:fe:
56:d4:16:c3:f5:b9:3b:cc:62:ab:ae:d7:7f:c6:5b:
f4:55:86:1c:03:fa:02:6a:70:84:9b:d9:17:f8:42:
22:3e:33:9f:ed:15:35:6c:37:de:a7:7d:81:71:30:
b9:6c:e5:d2:82:4b:e0:35:94:17:06:2d:d8:01:2b:
81:f0:7e:d8:7d:7c:ca:f2:c9:be:84:a6:bd:57:5d:
61:03:4f:b5:1f:5f:a1:39:d1:71:01:93:84:7d:42:
4c:91:4a:ff:a9:95:2e:be:c8:71:50:a0:44:3f:26:
57:89:03:7c:0f:c7:b8:08:cc:31:d5:f3:aa:ed:09:
39:cf:ac:7d:a1:c0:99:09:64:0d:59:3f:ab:3a:16:
8e:c8:07:84:55:d3:69:09:77:1a:21:d4:73:07:94:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:9E:59:5F:2D:DE:C0:F3:81:B8:77:EB:E2:11:2D:9E:8E:44:73
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:a3:88:7c:db:91:61:e8:8b:04:0f:15:22:14:98:59:c2:d5:
34:ea:71:53:fa:bf:e6:d3:18:1f:70:12:8f:3a:ef:5d:27:5c:
b0:86:de:80:07:e9:41:6a:5f:45:e5:29:f9:e8:71:4a:8f:88:
90:b9:04:d7:93:8f:39:07:ee:6d:38:e6:66:a9:a7:b7:68:72:
2b:8e:82:b5:cc:c9:4e:c0:d6:e0:42:b3:db:ce:15:04:50:fb:
45:49:b7:a1:08:88:25:b0:58:ea:92:9b:1c:de:13:cf:f7:85:
3a:18:c9:8d:c3:6d:68:4b:89:1a:aa:f7:64:81:84:81:d9:72:
30:57:80:05:34:ae:af:dc:f1:bf:ad:71:f7:e8:cb:fd:f0:46:
ed:19:de:c1:bf:b0:47:09:96:27:11:2f:42:e6:11:a4:7d:5e:
df:d4:4a:54:ba:90:9c:9b:03:ea:37:49:f9:3f:e6:7c:cb:7a:
3a:e7:12:fc:f2:42:e9:47:7e:c0:88:a0:bb:0a:2f:df:5e:b7:
46:8d:5b:00:8f:eb:fc:01:d5:b2:61:c1:78:36:d7:77:61:d7:
8e:2c:de:32:7e:80:6b:cb:f3:1c:76:21:12:88:f5:30:80:d5:
50:fb:4d:e5:63:2d:86:e4:7a:3d:a8:56:60:9c:32:a7:3a:5d:
25:53:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:06:31 2025 by rpki-client