This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: GPN+QTRGVxSSNj3MAEJN3goFtU5b6Xey7q1BkfR8/Q4=
Subject key identifier: 22:3F:B8:CB:0A:35:38:8A:23:D3:2C:CC:9D:EB:E5:B0:43:35:ED:46
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 02DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 02DA
Signing time: Mon 22 Dec 2025 04:01:10 +0000
Manifest this update: Mon 22 Dec 2025 04:01:10 +0000
Manifest next update: Wed 24 Dec 2025 04:01:10 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: 2eCufYsDYD3yJZoXryWXsK6YdY0jkmaB3Q1WcbhFeW4=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 24 Dec 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Dec 22 04:01:10 2025 GMT
Not After : Dec 24 04:01:10 2025 GMT
Subject: CN=6948c286-43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:51:1a:b8:cd:07:1e:f9:cf:15:6a:9c:88:
4a:43:64:1c:3e:87:d9:a4:07:ef:39:8c:05:29:55:
46:1d:5f:8f:9c:01:0e:e5:8c:ef:86:ae:27:c6:d2:
3f:03:5a:96:5c:88:32:17:70:99:67:d7:44:4a:29:
5d:f0:4e:8d:0a:67:82:2e:e2:da:64:fa:e5:8b:a3:
69:81:a4:0b:c9:b2:21:bd:4b:9c:84:a4:09:65:47:
a7:64:65:60:f3:89:4d:63:bd:9e:0d:c6:c1:65:63:
ee:dc:e3:1f:61:c6:7c:d6:78:23:9b:fb:44:02:7d:
bf:45:04:e8:f2:51:75:92:f2:c7:ed:bc:6f:bf:9b:
b5:4d:b0:c3:09:e8:08:27:0c:4a:1c:69:db:78:70:
43:e9:f0:fe:7d:6c:e2:92:9f:50:b3:22:84:74:3a:
b8:6a:20:a1:a5:ef:f5:86:c9:8a:48:03:7d:f0:f3:
42:b9:21:8b:43:4e:03:2f:88:bc:40:32:a0:1d:7f:
9e:4d:80:35:b2:76:55:57:78:5e:99:01:33:57:fe:
9b:1d:9b:0e:46:d9:de:14:4d:bd:c2:bd:a0:bc:e2:
be:2b:fe:31:7d:ae:c1:fc:4c:0a:0d:01:03:66:5f:
8c:2d:5c:7c:c7:0b:d8:aa:8b:f5:84:b4:82:30:6b:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:B8:CB:0A:35:38:8A:23:D3:2C:CC:9D:EB:E5:B0:43:35:ED:46
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:35:5b:67:9a:7a:00:8e:d9:30:36:ab:f1:92:b7:9b:94:
2a:34:1d:6c:a0:d1:94:a0:3c:f6:ea:f7:7d:ab:0b:ce:01:28:
4e:cc:9c:7d:e0:c6:3b:6d:ed:22:11:73:62:d8:0d:df:aa:fc:
2b:03:1e:11:10:7a:0b:8c:77:70:9d:52:c1:07:e1:63:4f:98:
be:fe:f0:94:ea:8f:de:33:be:d1:be:d4:7a:cd:0a:67:25:3a:
98:ec:48:5e:46:b3:b4:fc:5d:42:6e:3a:c0:bc:01:a5:43:f5:
4d:3c:bd:5d:5b:3a:19:ae:f7:69:65:65:f5:3d:8b:db:eb:46:
02:91:bc:8c:fa:96:9d:68:61:2e:99:c2:4e:ed:ad:3e:46:2c:
df:c4:78:f8:b7:71:d2:25:2b:6c:a8:c1:77:0c:c1:68:6f:62:
a1:d8:8f:92:d7:2e:6f:fd:21:ad:8f:91:26:2d:81:50:b4:0c:
85:9b:8b:f7:f8:5f:ba:8b:22:06:4d:54:15:74:f4:bc:03:87:
0e:8a:11:3f:83:b7:47:08:61:bd:b1:f7:84:18:bc:29:24:db:
b0:a8:ed:d7:a4:21:e0:d7:5b:82:01:8c:f1:d3:a1:96:01:c0:
e8:b1:dd:6c:51:e4:93:ac:36:32:5a:fb:56:1a:be:0d:98:97:
dd:f0:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:49:14 2025 by rpki-client