This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File: iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier: oXIrlSuPJ9jecL/oo2JbJIIMoJdyheNFejZVUsOnnL4=
Subject key identifier: 10:92:A9:5E:05:96:D9:F7:98:BD:02:6A:59:8D:CD:B2:16:CD:EC:B8
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer: /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial: 024C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number: 024B
Signing time: Tue 23 Dec 2025 04:15:45 +0000
Manifest this update: Tue 23 Dec 2025 04:15:44 +0000
Manifest next update: Thu 25 Dec 2025 04:15:44 +0000
Files and hashes: 1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: /g5kQDGP4jCgLxTZzwIfD3m7zBYUfGX6QjxfR8k9c0M=)
2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 04:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Validity
Not Before: Dec 23 04:15:44 2025 GMT
Not After : Dec 25 04:15:44 2025 GMT
Subject: CN=694a1771-c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:3a:9c:4c:b9:a4:94:74:0e:b9:76:a7:52:
83:ac:94:65:0e:85:f8:1f:e7:37:3f:13:be:41:47:
8d:b0:b8:da:2a:3d:7e:90:1d:ad:cc:df:83:18:88:
b9:ed:03:b2:e2:b2:81:a0:b1:1f:0b:0d:1d:6a:e3:
4f:16:a1:a6:12:5d:b7:68:b5:b8:71:28:55:81:6e:
45:0a:78:4a:79:b6:c2:d1:2f:97:4a:c5:10:f6:60:
41:f9:d9:e6:37:bc:ab:fe:06:ed:9a:c1:5a:c7:ba:
7c:3a:c3:2e:04:e9:ed:0e:ce:62:60:de:a4:56:ee:
6a:5a:cb:49:3c:49:3c:68:da:25:e7:83:71:b8:53:
77:41:eb:d5:d9:f2:45:3b:b2:e5:de:1b:62:63:7a:
6b:41:e5:ab:1c:6d:6c:06:a2:9e:01:b5:b1:55:b8:
c1:c2:ea:d7:a8:f5:20:26:69:56:f7:49:57:bf:3f:
fb:07:7d:52:b2:b1:d7:38:73:8e:ec:c7:54:d1:61:
8a:76:99:64:e1:f9:c4:ab:75:32:c1:ec:c8:dd:19:
cf:f8:f1:dc:a2:49:ab:1a:30:b3:22:bb:0a:c9:1e:
cf:0c:0b:8f:e3:a7:ab:ca:5c:76:43:e2:36:47:7a:
a1:de:34:cd:c0:be:eb:36:ae:3e:fa:a8:c1:19:79:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:A9:5E:05:96:D9:F7:98:BD:02:6A:59:8D:CD:B2:16:CD:EC:B8
X509v3 Authority Key Identifier:
keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:d5:4f:b5:a6:18:9c:39:59:18:08:c2:0d:fc:d6:63:54:8b:
e3:74:c7:e1:d1:ef:a4:85:86:70:f1:90:8d:ab:f9:84:0c:fb:
4c:17:51:03:11:d6:f1:9f:95:8c:a3:90:32:d7:da:58:3b:3e:
07:a2:35:65:b9:51:f4:24:fc:42:6d:ef:a0:22:60:47:2b:cb:
c9:26:3b:c5:82:d7:87:04:07:02:d9:52:e7:fb:51:20:31:58:
41:b8:89:0a:07:c5:86:27:cf:0f:22:66:fb:0d:9d:9d:cb:5b:
0f:b2:5a:82:36:52:71:52:0c:89:7d:ac:ba:dd:61:db:3a:53:
2e:a3:b1:10:d1:fe:5f:c5:d6:51:2e:1c:d5:d4:25:07:d1:af:
68:48:a4:89:12:a1:e8:cb:67:b1:3c:d2:60:e2:6b:4e:74:a2:
e1:c9:ce:d8:56:22:2b:87:90:b6:b1:3e:71:78:c1:89:98:88:
7e:2e:63:03:3f:fe:bf:cc:a0:97:bf:dd:61:46:dd:10:97:78:
74:92:2c:14:6e:86:02:aa:48:76:c9:95:65:5c:2c:af:e1:f4:
8e:ca:ed:68:30:ce:b9:94:cf:79:06:90:6e:c7:61:b7:47:04:
bf:fe:71:88:dd:e8:be:cc:d7:75:de:2d:17:7e:5f:f3:24:cb:
54:6b:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:50:52 2025 by rpki-client