This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File: af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier: W5R8LTwDNfp3zgLTxaXX+uIvp1l/exPfaBjumpko62w=
Subject key identifier: C6:46:68:3A:3C:3C:63:3A:21:6B:38:DE:91:5A:FC:09:C2:B9:EE:44
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer: /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial: 0849
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number: 0847
Signing time: Mon 22 Dec 2025 01:48:22 +0000
Manifest this update: Mon 22 Dec 2025 01:48:22 +0000
Manifest next update: Wed 24 Dec 2025 01:48:22 +0000
Files and hashes: 1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: JAHvgBfsV19zkAQxQtFuhhrbBC86PVK1610eoLxuUhA=)
2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 24 Dec 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Validity
Not Before: Dec 22 01:48:22 2025 GMT
Not After : Dec 24 01:48:22 2025 GMT
Subject: CN=6948a366-0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:f0:59:a4:5e:ff:87:00:bb:b1:bf:fd:56:
58:9d:8d:e3:bd:73:8f:d2:be:71:ba:1a:4a:58:ce:
41:6c:88:d1:91:15:e6:c3:3a:e3:b1:26:8a:1a:28:
74:3f:1b:0b:d1:35:10:31:0c:7c:1c:da:71:a9:78:
56:f0:dc:66:74:9b:dd:69:1c:de:b5:ef:7d:5d:4c:
21:6c:34:62:e8:c2:4c:b8:78:a6:90:b7:22:b1:26:
64:6b:e2:37:12:59:42:bb:7e:83:5e:40:f8:ba:96:
27:8e:26:af:44:cc:a3:08:18:83:19:85:9a:87:61:
89:36:44:92:67:c3:01:0b:62:9f:b6:3c:e9:12:1d:
d2:c5:1a:88:94:41:ff:8a:f1:a5:fd:2a:d1:35:96:
f5:b4:77:83:3f:ee:d1:f0:af:13:f8:55:bd:92:cc:
7a:71:df:84:67:86:64:96:b3:ec:e3:7d:11:ca:d9:
0d:0f:6b:31:c5:79:28:58:4c:43:4c:19:1b:15:20:
e1:1a:ca:78:a6:7b:ad:27:8f:08:4c:a8:2b:b6:66:
b6:f7:de:7e:2a:a3:2f:04:b6:11:b5:96:89:46:da:
28:32:3b:77:47:a3:03:9a:26:92:30:ea:42:b9:28:
bd:61:b2:a7:b9:cd:3a:d7:f3:f4:1f:8f:8a:44:95:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:68:3A:3C:3C:63:3A:21:6B:38:DE:91:5A:FC:09:C2:B9:EE:44
X509v3 Authority Key Identifier:
keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:dd:15:41:b8:5e:dd:ad:ab:a5:cb:5a:36:07:3c:3d:8b:06:
9a:e6:b8:f6:d5:f6:c2:8e:ea:cc:eb:f4:f6:ab:84:d3:28:06:
11:b8:da:4b:d2:1a:a5:42:4e:48:70:e6:20:f5:60:ad:92:f6:
7a:e5:ae:3e:6d:b2:ad:70:ef:78:e9:18:a3:3e:8b:e7:3c:08:
73:75:7d:4c:ae:9a:63:ad:0e:cd:8d:29:04:b2:9a:84:e6:5a:
ac:08:63:db:c2:d5:2a:a4:ca:f0:4d:09:f7:46:8a:9e:9f:4b:
11:91:ad:62:ee:bb:e3:71:a2:19:f9:3d:37:ae:e1:a2:51:f8:
8e:ee:e2:95:3c:02:ab:85:00:b4:2e:d8:e0:55:09:a9:af:59:
3e:9d:73:be:42:2b:c3:81:d2:7c:aa:4c:8e:5b:0b:d5:85:1a:
63:fe:81:9c:9b:85:83:09:e2:78:2f:94:ba:db:60:ec:2b:5d:
3d:59:4b:82:9c:4b:98:d4:a0:98:4d:09:6b:61:fe:14:1b:02:
bc:d0:fa:f5:33:86:a4:aa:82:01:12:16:94:98:69:da:8c:0d:
dd:00:56:06:14:1a:32:10:e6:f7:dd:ed:0e:69:48:63:15:91:
91:ba:82:3f:d6:e8:03:ba:91:21:1d:e4:89:9c:4d:a9:29:30:
84:b5:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:44 2025 by rpki-client