This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File: XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier: H7lT+glZO7wPMCcKLGT3V4ef5qOebr4HghbisFxC8xc=
Subject key identifier: CF:E5:9F:FB:A9:CF:8F:F4:05:AF:F6:01:59:F6:BD:DC:10:1D:73:35
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer: /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial: 0468
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number: 0465
Signing time: Tue 30 Dec 2025 03:09:10 +0000
Manifest this update: Tue 30 Dec 2025 03:09:09 +0000
Manifest next update: Thu 01 Jan 2026 03:09:09 +0000
Files and hashes: 1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: YSwOo1Mp1vrbiYg0MAJwkzmqgeEeFNwUmGLMibVDR+A=)
2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 Jan 2026 00:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Validity
Not Before: Dec 30 03:09:09 2025 GMT
Not After : Jan 1 03:09:09 2026 GMT
Subject: CN=69534256-0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:a7:7a:e5:49:98:67:aa:d2:26:f7:17:bb:
e9:17:b3:08:cf:02:1c:b4:23:1c:7d:03:df:42:8b:
ee:50:82:c1:8e:5d:f1:bd:b0:21:da:f3:28:d0:06:
34:5d:95:5f:e2:e4:51:ca:b8:0b:2d:df:30:98:35:
59:22:54:48:60:b2:35:37:fb:56:5b:e5:36:f2:f6:
15:4c:2d:e8:b9:41:c0:a8:10:71:64:7a:a6:40:13:
77:5f:15:59:e0:0a:e7:15:46:cb:0c:9e:76:b6:eb:
0a:64:af:af:be:bf:3f:04:19:c8:ae:65:36:42:31:
6a:1a:fc:0f:21:62:4e:f6:2d:69:7f:ab:b5:4d:50:
5b:78:51:70:fe:9f:46:80:bb:df:56:6a:35:60:a1:
61:3b:a1:34:ea:ee:44:43:64:0a:16:aa:f6:a3:95:
f4:b7:36:e4:e0:02:00:40:09:67:c9:f6:b5:de:87:
3b:bf:a0:05:aa:b6:f4:bc:99:00:dc:8a:74:94:41:
77:b9:e3:a3:b5:ce:13:1f:2a:c5:56:4d:24:12:56:
bd:de:41:7a:a2:49:31:77:05:35:eb:87:f7:d3:60:
eb:53:4e:6e:7e:66:1d:ad:21:eb:28:2e:10:01:2c:
3d:09:68:82:3e:94:ae:88:cf:b4:fd:65:8a:66:30:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E5:9F:FB:A9:CF:8F:F4:05:AF:F6:01:59:F6:BD:DC:10:1D:73:35
X509v3 Authority Key Identifier:
keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7a:3b:02:55:b9:56:58:a8:76:c5:8b:69:0a:ea:05:1a:2f:
64:e3:2c:84:26:1e:b9:ae:0c:f8:78:08:ff:5d:72:4b:89:63:
d0:57:87:6a:07:be:1d:e3:8a:f1:5c:3d:6d:75:67:4a:0e:4f:
09:ef:43:d6:f9:23:3d:12:12:39:bb:c5:6e:c3:62:94:48:26:
6f:10:28:be:52:0b:3a:0c:9a:32:74:03:e5:cc:84:26:26:a2:
50:41:b8:af:87:bb:7c:d1:9a:11:04:b3:9c:f1:8f:57:b9:59:
97:56:ae:4f:bb:1d:5e:9b:d6:13:54:cf:b7:ef:bd:82:bb:a1:
70:8a:35:d2:a5:67:ff:64:d6:7a:29:07:9a:12:da:ee:ee:f4:
60:37:14:e5:1e:53:5d:4c:b0:19:b5:fa:2f:5a:e1:e3:6d:ea:
fe:8f:20:01:ea:6a:2a:46:16:84:3e:8e:6d:ff:77:12:76:e4:
cb:ec:6e:e8:00:e4:37:a6:fb:25:b1:e5:a7:c4:f7:a4:d2:f0:
de:b3:83:d3:90:ca:18:43:dc:b5:9e:d9:dc:26:b7:62:b6:2c:
05:c7:23:34:da:f3:dc:9c:a0:50:38:3b:a3:99:c4:02:b6:db:
38:31:d9:ec:c0:85:d5:5b:46:02:cf:f4:cf:8d:b2:4a:6b:b8:
4b:68:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:10:27 2025 by rpki-client