This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: Ldzc/1Q6SBzzkTWhdzclCwV32L9z1DLa+cFwdC3N7oE=
Subject key identifier: 5F:2A:D6:66:AE:E3:0E:23:14:C5:C4:69:1B:40:FC:CE:17:FC:20:F6
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 053C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 053B
Signing time: Wed 24 Dec 2025 02:52:23 +0000
Manifest this update: Wed 24 Dec 2025 02:52:23 +0000
Manifest next update: Fri 26 Dec 2025 02:52:23 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: S6RjjQln0wlDwgDTcJvaS++yXWHlrCoFP/pH9rBzgcY=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Dec 2025 02:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Dec 24 02:52:23 2025 GMT
Not After : Dec 26 02:52:23 2025 GMT
Subject: CN=694b5567-c903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:b2:ed:94:f4:d9:65:5d:ac:a6:63:59:7c:
21:6d:c4:6d:83:b3:79:ad:d7:e5:3d:21:57:7a:a4:
44:f1:0e:49:58:36:91:cb:34:cb:3c:45:f9:c6:9c:
dd:95:a5:65:5f:c1:ca:ca:bb:53:f7:00:f5:97:85:
48:5b:cd:11:64:79:ff:30:04:24:ec:36:5f:1a:8d:
12:4f:36:71:3f:c6:c1:6b:d0:d1:ef:88:fe:41:2e:
78:41:ba:9d:9d:d1:54:b2:b0:63:93:3d:6d:00:ff:
69:16:6f:26:c9:7e:b4:5b:9c:e0:9a:63:a9:69:2a:
b6:c7:5d:44:6b:06:7a:40:c4:d0:1e:8b:ae:7e:76:
54:6e:22:96:3e:b3:28:24:d9:6c:68:7c:a0:3a:6d:
ed:2a:aa:a8:01:85:ea:17:7a:e7:40:6f:89:a4:98:
9a:a8:c8:7c:6f:8a:82:a9:07:8e:f9:0d:1f:c8:7d:
b1:69:8e:52:ba:a1:11:74:8e:38:10:39:69:ba:86:
32:84:53:86:b0:da:9f:42:73:dc:5d:14:6f:a7:fb:
a1:38:6f:07:ff:ec:23:20:19:be:06:e6:f4:1a:20:
e5:77:93:23:8b:30:80:4a:29:3b:d7:23:fd:03:87:
90:b8:97:79:b2:51:7d:33:63:13:16:27:4f:e0:6e:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:D6:66:AE:E3:0E:23:14:C5:C4:69:1B:40:FC:CE:17:FC:20:F6
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bd:0c:29:23:68:d6:12:af:f3:4a:98:ec:0c:ac:59:e3:5d:
d1:0c:f6:70:e7:98:53:65:03:ca:fc:b9:d7:33:69:6b:5d:35:
22:13:8c:71:43:29:5a:29:75:cc:02:30:b4:ab:ca:e7:81:49:
74:86:0f:6b:9d:ad:a3:eb:2c:63:d3:0e:c3:85:7a:ba:b9:ef:
82:b0:75:7b:fe:1a:e5:7b:02:32:75:4e:ad:10:42:fa:da:0d:
cd:3a:4a:e8:e6:d8:5f:ef:be:ac:88:5b:70:7f:9b:e2:27:ad:
db:d4:3c:f2:54:8e:14:b3:c5:e9:0b:f1:b8:d6:cc:a7:47:6d:
a5:aa:53:fc:c6:c8:a4:73:b5:49:56:d3:49:d0:99:50:3b:e2:
95:ca:eb:04:70:69:2e:f1:57:07:28:a2:d0:3e:ec:8e:7a:2a:
65:19:ea:b2:54:3f:d9:dc:c5:38:1b:81:3d:31:44:d5:1c:4a:
f2:1d:dd:c2:6e:80:49:44:a9:14:40:ce:d3:55:05:23:3b:dd:
ff:63:de:58:31:6d:85:58:9a:60:83:42:61:13:6c:5b:7c:26:
45:79:1a:09:31:55:4a:c0:0c:0b:be:e3:c5:d0:15:ac:62:dd:
e6:88:6c:44:f6:68:c5:32:e4:8e:02:2c:91:1d:8d:16:22:00:
b2:00:65:be
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjlCN0JBRjExMC8GA1UEBRMoNDFGMDkyNEM2MEQ2OEUxRkJDMDBEMjk5RjIxODk0
Q0U0Q0ExQjVDOTAeFw0yNTEyMjQwMjUyMjNaFw0yNTEyMjYwMjUyMjNaMBgxFjAU
BgNVBAMTDTY5NGI1NTY3LWM5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9kLLtlPTZZV2spmNZfCFtxG2Ds3mt1+U9IVd6pETxDklYNpHLNMs8RfnG
nN2VpWVfwcrKu1P3APWXhUhbzRFkef8wBCTsNl8ajRJPNnE/xsFr0NHviP5BLnhB
up2d0VSysGOTPW0A/2kWbybJfrRbnOCaY6lpKrbHXURrBnpAxNAei65+dlRuIpY+
sygk2WxofKA6be0qqqgBheoXeudAb4mkmJqoyHxvioKpB475DR/IfbFpjlK6oRF0
jjgQOWm6hjKEU4aw2p9Cc9xdFG+n+6E4bwf/7CMgGb4G5vQaIOV3kyOLMIBKKTvX
I/0Dh5C4l3myUX0zYxMWJ0/gboUhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXyrW
Zq7jDiMUxcRpG0D8zhf8IPYwHwYDVR0jBBgwFoAUQfCSTGDWjh+8ANKZ8hiUzkyh
tckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI5QjdCL0QxRkQ3MDIwRTM1NTExRUNCMEEwRjA5MEYxMjIyNDY4L1FmQ1NU
R0RXamgtOEFOS1o4aGlVemt5aHRjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FmQ1NUR0RXamgtOEFOS1o4aGlVemt5aHRjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjlCN0IvRDFGRDcwMjBFMzU1MTFFQ0IwQTBGMDkwRjEy
MjI0NjgvUWZDU1RHRFdqaC04QU5LWjhoaVV6a3lodGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3vQwpI2jWEq/zSpjsDKxZ413RDPZw
55hTZQPK/LnXM2lrXTUiE4xxQylaKXXMAjC0q8rngUl0hg9rna2j6yxj0w7DhXq6
ue+CsHV7/hrlewIydU6tEEL62g3NOkro5thf776siFtwf5viJ63b1DzyVI4Us8Xp
C/G41synR22lqlP8xsikc7VJVtNJ0JlQO+KVyusEcGku8VcHKKLQPuyOeiplGeqy
VD/Z3MU4G4E9MUTVHEryHd3CboBJRKkUQM7TVQUjO93/Y95YMW2FWJpgg0JhE2xb
fCZFeRoJMVVKwAwLvuPF0BWsYt3miGxE9mjFMuSOAiyRHY0WIgCyAGW+
-----END CERTIFICATE-----
Generated at Wed Dec 24 18:10:04 2025 by rpki-client