This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
File: C9AISPg4_ZC5ntw3aQcglV-wCQY.mft (raw, json)
Hash identifier: TpB/GrdZGn1gbAgiPpoKnsBR0ZOtws6iR/Lr4cIwD40=
Subject key identifier: 6D:09:C2:34:0B:BE:AE:E8:7D:6C:17:B4:42:DD:71:A6:E8:A2:66:95
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Certificate issuer: /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial: 052A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
Manifest number: 0520
Signing time: Thu 25 Dec 2025 02:53:16 +0000
Manifest this update: Thu 25 Dec 2025 02:53:16 +0000
Manifest next update: Sat 27 Dec 2025 02:53:15 +0000
Files and hashes: 1: C9AISPg4_ZC5ntw3aQcglV-wCQY.crl (hash: wFi0vw1/MZ+orOOuoOGfdAoaid/hQUIbjrEsH44fGXY=)
2: D183ECC8085B11EFB55C9B09017001B1.roa (hash: 0wIzN3h+rbMY0RCClFPjyEoqaeNOqCrB7nmVrP7H1cQ=)
3: E6DF30E4F82B11EFA5C0E79C762E951A.roa (hash: XT/378XgrexD0cGPoUkpGHpC1ayYncJAvh9qFOMCnmA=)
4: 72363EB671BE11EF838644A0762E951A.roa (hash: PA/h5ekoPNUQiLuqHkxlB+THQPCIzkVE47Cb2Ae6PV4=)
5: 40DDBBD0697011ED9FF1D1DFF1222468.roa (hash: 9yUPzierdn2O592kHymHo5qeiCIOptKnSJWBFxxbCyk=)
6: F651CEB6579011EE8A5472724AD9E6FC.roa (hash: 5bXimLkE8Qqx3GSG77JS4WMgm65eY1+wSpVGQZoXe9k=)
7: D6C5DD44697011ED921888E1F1222468.roa (hash: 6qobUBR5lY4TVVfXDdQHOyj3miAJRqZDg8CWZOUWKVs=)
8: 034B4056317011F0960BB9BBDAE4EC9C.roa (hash: 8EdsfqrdTyiR6sjIsfm2OCwX3gpoE6Lu3uWVDJVedCo=)
9: 069971DEA80C11F0ABBD17E1DAE4EC9C.roa (hash: WcnVuk8znWk2E8XVbTz8BI0h+oYIfhMrZBOZ5CTfGPY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662367AF, serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Validity
Not Before: Dec 25 02:53:16 2025 GMT
Not After : Dec 27 02:53:15 2025 GMT
Subject: CN=694ca71c-594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:92:c1:e7:53:56:b3:a0:1a:25:18:1b:52:
1b:9a:b0:47:58:a9:4e:3b:64:6a:5b:ba:44:45:e2:
80:17:11:4f:b6:ae:f5:da:14:8a:44:62:82:79:1a:
2d:c7:7a:f1:96:d4:ea:63:fd:55:33:d2:95:77:eb:
89:76:30:99:c5:17:ac:b7:7f:e4:8b:16:f5:37:fe:
c5:15:77:b4:41:87:25:63:46:f3:ae:3b:ce:13:a2:
ff:4c:8e:a6:9e:ae:0d:4f:c7:a4:b5:93:86:31:d4:
a4:1c:35:6d:ba:33:f2:f0:f4:3e:c1:c9:ce:3e:a1:
0d:7a:70:45:84:7a:8e:b0:d6:57:4f:ef:87:85:87:
9c:e1:7c:ea:ef:22:91:4d:d4:af:84:8b:53:b7:13:
53:f8:78:5d:02:7c:7f:67:be:23:c0:92:7f:a1:cb:
29:27:da:ca:ee:8d:8d:69:85:82:c8:3b:8a:f5:59:
9f:68:82:4e:6e:f3:5e:8e:0a:61:77:32:7d:d8:67:
c0:ec:18:7c:3c:ef:63:1e:51:50:d7:58:e0:9b:0a:
04:12:29:9b:1e:50:45:10:f8:c0:76:b1:b0:67:31:
49:ee:78:89:c7:fd:01:bb:ca:2a:f3:6d:dc:d6:29:
71:94:16:b0:86:2f:db:78:5b:22:2d:33:08:e0:95:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:09:C2:34:0B:BE:AE:E8:7D:6C:17:B4:42:DD:71:A6:E8:A2:66:95
X509v3 Authority Key Identifier:
keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:63:7f:97:ab:67:09:22:d3:f5:3e:f1:38:95:c0:b3:7f:
94:b2:a9:74:f2:91:a2:69:5b:64:33:2b:ee:0f:c2:76:f4:b4:
de:f9:6d:a3:89:4d:dc:93:d4:74:55:0c:dd:7a:e5:09:ff:c5:
66:80:e5:57:e7:b0:ba:37:94:02:3d:3f:8e:5f:6b:ad:38:ed:
68:df:93:ba:29:6d:13:c2:9a:4a:73:82:1e:38:ec:8c:c5:fc:
a1:b2:bc:d0:42:29:f1:31:09:fa:a0:6b:50:a7:b2:c6:a6:a7:
1d:8a:38:bf:83:2b:b6:90:57:8e:76:64:87:b2:f8:79:3c:60:
5f:e0:11:48:34:db:58:46:39:0f:50:1a:5d:c7:17:6a:3f:eb:
3e:70:21:ab:43:52:7d:ce:8b:a8:0d:28:de:73:e5:d0:cd:19:
08:9b:cd:ed:1c:d6:ee:97:13:64:b1:d7:50:a8:6d:cf:8d:d1:
0d:6f:03:6d:9e:23:a2:62:38:c3:74:3c:fd:7f:a4:8a:1f:df:
33:94:60:98:02:68:53:0c:bd:53:62:34:43:1f:d5:c5:70:36:
23:11:69:1b:82:bd:6c:49:38:6c:53:fa:da:4b:23:52:c2:f6:
74:f4:f1:2c:3d:07:ce:48:cf:59:3a:87:11:bf:3c:f9:16:3e:
3e:af:2e:e7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBSowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIzNjdBRjExMC8GA1UEBRMoMEJEMDA4NDhGODM4RkQ5MEI5OUVEQzM3NjkwNzIw
OTU1RkIwMDkwNjAeFw0yNTEyMjUwMjUzMTZaFw0yNTEyMjcwMjUzMTVaMBgxFjAU
BgNVBAMTDTY5NGNhNzFjLTU5NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChVZLB51NWs6AaJRgbUhuasEdYqU47ZGpbukRF4oAXEU+2rvXaFIpEYoJ5
Gi3HevGW1Opj/VUz0pV364l2MJnFF6y3f+SLFvU3/sUVd7RBhyVjRvOuO84Tov9M
jqaerg1Px6S1k4Yx1KQcNW26M/Lw9D7Byc4+oQ16cEWEeo6w1ldP74eFh5zhfOrv
IpFN1K+Ei1O3E1P4eF0CfH9nviPAkn+hyykn2srujY1phYLIO4r1WZ9ogk5u816O
CmF3Mn3YZ8DsGHw872MeUVDXWOCbCgQSKZseUEUQ+MB2sbBnMUnueInH/QG7yirz
bdzWKXGUFrCGL9t4WyItMwjglVD5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbQnC
NAu+ruh9bBe0Qt1xpuiiZpUwHwYDVR0jBBgwFoAUC9AISPg4/ZC5ntw3aQcglV+w
CQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0YxMjIyNDY4L0M5QUlT
UGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M5QUlTUGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjIzNjcvQjQ1MDhDRTgwODIwMTFFRDgyODU4OEY3RjEy
MjI0NjgvQzlBSVNQZzRfWkM1bnR3M2FRY2dsVi13Q1FZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgDmN/l6tnCSLT9T7xOJXAs3+Usql0
8pGiaVtkMyvuD8J29LTe+W2jiU3ck9R0VQzdeuUJ/8VmgOVX57C6N5QCPT+OX2ut
OO1o35O6KW0TwppKc4IeOOyMxfyhsrzQQinxMQn6oGtQp7LGpqcdiji/gyu2kFeO
dmSHsvh5PGBf4BFINNtYRjkPUBpdxxdqP+s+cCGrQ1J9zouoDSjec+XQzRkIm83t
HNbulxNksddQqG3PjdENbwNtniOiYjjDdDz9f6SKH98zlGCYAmhTDL1TYjRDH9XF
cDYjEWkbgr1sSThsU/raSyNSwvZ09PEsPQfOSM9ZOocRvzz5Fj4+ry7n
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:12:07 2025 by rpki-client