This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: DSTrvB2ykOF2EFXUoor58ZjTiIcHvXTeyNx1XvAFd+c=
Subject key identifier: F1:CB:26:27:D7:FA:BC:80:D7:AF:18:F1:E7:2E:B4:57:31:5A:8F:5C
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 099E
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 099D
Signing time: Sat 27 Dec 2025 01:25:18 +0000
Manifest this update: Sat 27 Dec 2025 01:25:17 +0000
Manifest next update: Mon 29 Dec 2025 01:25:17 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: pq0t9RRQf+dtBe6TuVahs8BWUWEpAZJrmxVkvkQ7xfU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Dec 27 01:25:17 2025 GMT
Not After : Dec 29 01:25:17 2025 GMT
Subject: CN=694f357e-33ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:48:6c:0e:7a:ce:d2:a3:4c:ce:45:14:35:
1c:59:d7:4d:0c:13:6c:b7:a5:ab:1c:ea:b3:03:8e:
50:98:76:55:df:9f:07:64:36:eb:f5:53:f4:81:76:
c6:f6:a5:d2:22:a6:5e:76:20:00:c5:da:be:14:10:
2c:ae:6c:c9:96:fe:23:b7:34:2b:a8:02:5b:1c:88:
30:ec:6c:b2:43:13:5a:4e:d6:ce:27:f2:d3:df:7c:
7a:e5:16:01:1f:76:40:42:42:dd:e6:b5:17:5a:e5:
97:99:5c:3c:92:63:3e:ac:a0:2c:ca:61:7c:23:25:
a9:b5:a7:3b:17:a8:9e:58:4c:7b:17:4a:0a:48:da:
44:44:65:b4:76:83:cf:c8:d9:14:66:39:b3:00:85:
b6:91:b5:e1:79:0e:3c:7c:23:af:03:4e:bf:db:e2:
af:bb:f2:27:74:a8:c5:6e:2e:53:e8:f7:93:2a:84:
78:e5:6e:c0:cd:66:e9:25:43:c3:b9:0f:3f:63:6f:
0e:f5:17:a3:d8:d9:00:f6:1c:63:5d:73:ac:98:4c:
fa:00:c6:91:e7:e4:c7:8c:56:46:dd:4d:1b:9f:46:
8e:ea:7f:21:eb:b0:f9:e4:82:61:0d:99:d3:fb:d1:
08:47:3c:5b:fa:2e:bd:9d:7f:d3:8e:78:f3:27:51:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:26:27:D7:FA:BC:80:D7:AF:18:F1:E7:2E:B4:57:31:5A:8F:5C
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:90:c1:3f:c3:81:2d:cb:13:a9:77:fb:c0:27:e9:ae:4b:7f:
c2:32:77:f8:14:16:de:60:bf:82:63:9a:73:29:00:3c:98:64:
1b:a1:d9:2d:78:03:ca:12:7a:0f:64:7a:39:9f:55:46:91:7f:
c4:d2:a5:9a:45:e5:17:39:30:dd:39:9d:30:a5:05:00:8d:3c:
09:45:b8:fb:b1:48:62:e3:d7:eb:a9:e1:35:03:09:86:96:0c:
31:0e:c1:44:a6:70:cd:32:75:ab:bc:29:ec:13:7e:5d:8a:7c:
5f:83:a0:16:ed:57:15:a7:28:99:f8:1b:22:c2:32:3f:e0:72:
fa:17:16:01:b0:47:fd:a8:d2:b5:bd:9a:e7:c2:eb:1b:75:74:
82:8b:99:af:64:25:35:59:ca:e1:3b:7f:20:dc:27:26:cd:40:
46:45:d3:9e:fe:7f:64:9a:d1:f9:9c:16:55:05:c7:63:f8:de:
6d:b7:35:71:04:63:57:9a:29:50:26:4c:73:07:a0:7f:e1:ca:
c9:9e:26:37:b8:9a:40:ac:c6:5d:2b:72:a2:03:f5:01:f2:f1:
24:73:70:5d:55:ba:20:7f:95:4e:93:c4:5f:06:4f:bf:b0:1f:
92:c3:76:d6:84:d7:20:89:1e:ab:82:da:10:80:8a:d3:78:dc:
ed:43:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:04:30 2025 by rpki-client