This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: fRssFEfIlD1+QNYjEPkWZw9thxxCMjgDPTdccXVU7Dc=
Subject key identifier: 1F:A1:F1:C6:99:CA:F3:D1:D8:C0:3E:E8:31:D8:04:53:D4:46:F0:FA
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0F70
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0F5D
Signing time: Fri 19 Dec 2025 00:15:15 +0000
Manifest this update: Fri 19 Dec 2025 00:15:12 +0000
Manifest next update: Sun 21 Dec 2025 00:15:12 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: hFhKMDg+/KuKaV79T85GNEcgX7klLCwB+SkLtuqWs5M=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Dec 19 00:15:12 2025 GMT
Not After : Dec 21 00:15:12 2025 GMT
Subject: CN=69449911-940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:24:74:ab:50:e3:91:ac:79:fe:ca:ae:bd:
82:8a:28:71:db:71:24:68:40:4e:22:ec:54:b1:df:
94:e9:b7:45:88:1c:d9:0a:e1:16:4d:62:b6:ab:34:
3a:e0:ab:4a:fc:53:d9:de:42:c2:c1:69:5c:85:ea:
cc:3d:cd:28:ab:48:f0:61:04:44:c7:2a:bc:c5:a6:
e6:6b:73:9d:61:c6:d2:ca:dc:d7:d4:bf:91:43:74:
11:83:25:ce:cd:13:bd:e4:24:a3:9f:d3:57:9a:0b:
d6:ee:ae:e4:52:4c:8c:16:26:45:ba:a0:17:5d:a8:
43:b6:30:87:9a:78:9f:60:8f:0b:c4:2b:fc:07:b0:
be:b3:e2:8c:f2:40:00:d8:c4:2d:dd:a7:38:69:79:
5a:62:22:5d:14:84:0b:d4:cd:03:92:3f:6e:e1:c4:
ca:e5:62:d4:91:40:7b:3a:c7:8c:9d:0b:69:a9:7d:
cc:eb:23:0c:8f:52:36:4b:1d:53:10:2b:bf:45:8e:
53:ff:bf:64:03:c9:92:d5:10:f2:16:5c:6b:3d:a7:
78:b0:aa:cb:cd:93:ef:57:3c:f7:6a:0a:c8:03:01:
13:5e:61:28:77:d8:7a:b5:dd:3f:07:11:78:21:f3:
2e:28:1c:a4:75:4b:86:83:92:ee:cd:a1:bc:81:e6:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:F1:C6:99:CA:F3:D1:D8:C0:3E:E8:31:D8:04:53:D4:46:F0:FA
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:53:99:56:c4:06:c7:c6:47:97:e3:3f:11:4f:2f:a6:9a:88:
66:48:22:66:cd:4e:f7:50:54:11:74:3e:a6:5d:12:3a:03:96:
73:e1:c7:42:50:f1:8d:bf:52:c9:3b:45:80:ca:51:cb:fc:10:
fc:c1:ce:d3:15:aa:e4:1c:af:51:aa:dd:ca:d9:7a:f1:66:4a:
7a:a2:87:d5:bb:10:c9:0b:66:2c:6f:99:5a:a0:8c:87:d6:af:
7b:b9:7c:ae:45:17:60:e7:4a:e1:35:b2:96:32:93:91:eb:e4:
7a:5a:9d:26:90:b5:4e:dc:91:ed:15:60:39:6c:8f:7d:57:11:
89:01:d7:95:ab:47:3f:94:9a:2c:26:39:c7:29:f7:ba:d4:2c:
6f:ec:73:4a:e7:4f:f6:c1:8f:20:9b:42:6f:39:73:3f:8e:79:
52:97:5b:fd:be:5c:74:6d:95:ee:a9:ab:3e:da:15:98:4a:99:
97:56:b2:e5:fe:2a:f1:c8:11:53:e6:56:28:ef:b5:e9:90:4f:
55:ba:f6:d2:65:49:95:f4:d3:5b:1d:df:ef:7e:a6:b9:c8:d2:
6c:27:78:58:3b:69:00:14:c8:8d:1b:6a:00:68:ff:31:d3:be:
f6:db:09:0b:a5:37:a8:d0:37:f5:a1:da:45:58:6a:60:3f:d2:
1f:16:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:40 2025 by rpki-client