This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
File: 1DoqVLLNNnZCx2hmihOEa4nsje8.mft (raw, json)
Hash identifier: tuC3JZrCxmlD5E8a5NYagt5QKq0MLx73bGTcRNcPSbo=
Subject key identifier: 6B:3F:E8:74:7C:FA:4D:DE:92:8A:60:19:28:B4:71:CA:41:B8:E7:9F
Authority key identifier: D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
Certificate issuer: /CN=F364EAB0AF/serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Certificate serial: 021A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
Manifest number: 0218
Signing time: Sat 27 Dec 2025 04:26:12 +0000
Manifest this update: Sat 27 Dec 2025 04:26:11 +0000
Manifest next update: Mon 29 Dec 2025 04:26:11 +0000
Files and hashes: 1: 1DoqVLLNNnZCx2hmihOEa4nsje8.crl (hash: 6O2Q/WUY1kleOVGAas3Q5SzN2qytGwhehBex5Yo1sG0=)
2: 7DA8929649D011EF8540F4B5762E951A.roa (hash: YovCsrPwXRshmsWk3A69TUGehERZxXiw2xy+oTe5v1Y=)
3: ECC95BD248EB11EF9E6AB0A8762E951A.roa (hash: oLh1HXERxgDkZE8Kx15N1v8Oh2muKtEvQ5qn9c925Ag=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Dec 2025 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364EAB0AF, serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Validity
Not Before: Dec 27 04:26:11 2025 GMT
Not After : Dec 29 04:26:11 2025 GMT
Subject: CN=694f5fe4-f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:14:14:d9:2a:d0:74:1d:bd:6a:f6:6a:8d:ed:
52:cf:92:f5:fa:0b:02:2b:68:77:7a:c9:57:2c:78:
2f:64:1b:f3:d2:d0:35:73:dd:38:68:05:aa:87:83:
a6:bc:80:5b:f9:5c:f6:6f:9b:c1:b4:64:69:72:9d:
ee:1d:e4:0f:80:82:a8:9b:49:b1:35:ae:bf:b3:5c:
b9:96:e2:5a:23:0c:64:93:b6:f1:9b:dc:d8:f4:4a:
11:03:e6:08:fa:75:e2:75:5f:ce:50:94:b4:4c:0f:
0f:40:a0:b0:a3:08:86:4d:4e:5d:5d:9b:90:08:74:
58:4e:55:45:45:85:0e:6f:19:91:7f:88:3c:37:44:
38:ec:ec:be:ae:4b:18:59:e7:7e:11:df:ad:1a:21:
31:69:b1:3a:72:35:27:49:f0:87:d6:d2:17:3f:76:
8d:a9:9a:a9:a2:fd:55:16:3b:66:27:d3:22:dd:7c:
cb:9a:73:c7:8d:eb:cb:34:58:70:be:7d:39:f8:b2:
bd:00:25:fa:59:4d:cd:6a:ac:7d:7e:f0:4c:07:ee:
35:75:a8:b8:e7:cc:4c:8d:9b:fc:cf:4c:a4:66:87:
1f:e6:2d:2a:c4:70:6a:40:e4:b4:b3:fd:e7:5a:f9:
7a:a4:ba:8f:93:df:38:39:d9:46:99:1d:1b:92:03:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:E8:74:7C:FA:4D:DE:92:8A:60:19:28:B4:71:CA:41:B8:E7:9F
X509v3 Authority Key Identifier:
keyid:D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:46:9b:39:f0:22:2b:8b:a9:5f:2c:07:19:bd:25:9a:f5:
61:85:19:bf:4e:ab:0f:d7:fd:06:8d:d1:32:ca:fa:56:a5:ca:
40:dc:9f:66:48:59:de:8d:eb:83:15:7e:4e:e0:d2:c6:f4:19:
4e:6a:8d:67:5b:fc:cb:67:ce:6f:1c:2b:26:b3:0a:e4:e5:21:
01:d3:f9:d5:69:10:1d:32:fa:90:da:ac:a9:52:b1:42:83:ca:
b7:63:83:f2:88:2b:31:0c:bc:58:66:02:45:d7:75:90:48:cc:
fc:4f:5c:8e:51:66:15:9e:29:3f:a7:1a:38:3d:e0:8b:8e:60:
80:7e:5e:ad:a9:0e:95:60:5e:af:18:cf:42:d7:e8:bc:91:68:
88:67:c7:1b:fc:92:11:cd:42:f3:1e:a6:aa:05:8f:bf:a5:36:
f1:ca:5a:62:2f:a6:98:16:29:5d:e2:57:11:04:74:04:a7:22:
cd:63:27:d9:3a:03:d4:79:67:9c:ed:ad:7d:ec:2c:b3:03:eb:
ed:59:a1:1a:75:68:c5:f2:b7:ef:07:b4:65:ab:53:81:63:e1:
6c:26:a8:7f:69:28:86:dc:94:9c:b3:f6:b8:6c:7c:0c:7d:13:
25:0f:a1:7c:d9:ea:ed:f5:2c:dc:fb:19:75:df:27:43:33:86:
02:94:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:57:42 2025 by rpki-client