This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File: CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier: zAWSA0yrWYYkNuwBgKDln26JiPcuaxsezaR9+lUEOII=
Subject key identifier: 80:27:39:72:55:9C:C1:53:08:11:84:84:72:67:9C:24:3B:3D:B1:57
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer: /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial: 0230
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number: 022D
Signing time: Mon 12 Jan 2026 04:27:12 +0000
Manifest this update: Mon 12 Jan 2026 04:27:11 +0000
Manifest next update: Wed 14 Jan 2026 04:27:11 +0000
Files and hashes: 1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: Q15uCcreG1gNUhqEF9uWRQXduJVjxjSqqb+3IIFvzfw=)
2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Jan 2026 04:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Validity
Not Before: Jan 12 04:27:11 2026 GMT
Not After : Jan 14 04:27:11 2026 GMT
Subject: CN=69647820-9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:c5:38:23:1b:da:d2:a2:d4:d2:37:c2:05:
9d:9a:bc:ea:d1:2a:37:7b:df:f1:92:30:0a:6f:74:
a2:a6:4a:bb:24:95:33:db:ac:5b:72:48:42:82:8d:
d0:0d:b3:16:d6:12:bf:66:59:c5:6e:cb:c8:3e:8e:
70:db:83:08:71:c7:e3:1b:a2:a9:e0:4d:8b:31:c0:
6c:66:c5:10:85:f1:09:73:19:31:55:0d:11:15:fb:
e0:9f:da:8e:ae:1b:c3:82:1a:fc:33:63:75:df:3e:
a6:ef:07:a8:8c:26:38:6f:94:68:e8:64:0d:53:c3:
75:59:75:dc:d1:7e:4f:6a:65:9c:63:8c:76:41:f4:
ba:96:e6:13:96:80:d7:fe:a4:4c:73:4f:b6:d7:f1:
9d:79:52:e4:4c:f1:75:78:bd:31:ae:e0:96:14:97:
84:67:89:06:f5:f5:64:77:ed:c4:96:3b:87:ac:d0:
40:ee:52:fd:a3:d4:39:1a:3f:96:10:d6:06:4b:e4:
f4:cf:10:ab:86:b5:f1:94:ac:c5:cd:36:10:83:11:
45:d7:10:26:8f:61:f5:7e:20:19:48:e3:d9:4a:f4:
25:84:9e:30:c4:30:8a:95:3b:10:3d:8f:e2:b5:44:
b6:e6:b9:fa:ca:e9:96:77:d8:ab:75:aa:e8:cd:d1:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:39:72:55:9C:C1:53:08:11:84:84:72:67:9C:24:3B:3D:B1:57
X509v3 Authority Key Identifier:
keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a6:be:b3:ae:c9:7d:89:cf:a1:12:b6:0a:1d:7b:05:6d:e6:
fe:ae:2f:56:43:5a:02:3c:be:2c:7e:3f:bb:d2:e1:02:5b:b9:
67:2e:13:92:52:ea:89:34:5e:c1:9f:69:ce:cd:9e:b9:26:d2:
8f:ef:83:b2:3b:4d:b8:13:a4:2d:9f:6b:91:b0:94:8a:7b:4f:
89:08:f7:8d:1d:44:72:34:39:98:6c:58:3f:8b:61:d7:08:c6:
1d:f4:15:21:05:cf:14:ab:7c:27:aa:d3:85:e8:27:6d:17:f8:
30:3b:6d:36:74:c6:34:f3:15:48:e2:90:06:58:a1:f8:20:5e:
cf:f0:99:83:91:52:2d:61:d4:05:ff:b3:b2:0d:15:cd:6e:2b:
37:95:01:2f:79:04:f6:5d:d3:f6:af:15:e2:5a:fe:be:4f:a3:
7b:ad:5b:cb:d8:b0:d3:51:b4:c1:68:9e:ec:db:2a:06:10:e1:
87:da:14:c6:7d:0a:88:b6:93:5d:3b:d8:7a:08:bf:81:be:a8:
20:f1:03:0a:6f:a9:e8:a6:aa:a8:4c:5f:0a:d3:f4:d3:0d:24:
a8:52:58:31:70:a7:31:17:02:cf:67:97:af:c4:3c:a8:c6:76:
b8:dd:ba:6b:12:f9:7e:d0:24:70:43:de:46:45:ae:aa:89:47:
a0:c7:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:55 2026 by rpki-client