This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File: LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier: jtv811JliLdcFz9rX7LmYeiyMxrZb+48XSmBT5Of1o8=
Subject key identifier: 18:92:DA:06:1D:C8:91:AA:90:36:D6:BE:F5:7C:38:A2:28:29:BB:B9
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer: /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial: 042D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number: 042A
Signing time: Wed 24 Dec 2025 03:24:00 +0000
Manifest this update: Wed 24 Dec 2025 03:24:00 +0000
Manifest next update: Fri 26 Dec 2025 03:24:00 +0000
Files and hashes: 1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: Po4RbdWFwWx/yB/yboaowOPrs/fB3cgWDuuzkKtfsnc=)
2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=)
3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=)
4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Dec 2025 03:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Validity
Not Before: Dec 24 03:24:00 2025 GMT
Not After : Dec 26 03:24:00 2025 GMT
Subject: CN=694b5cd0-8301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:1a:c5:4f:a7:f9:b8:2f:e5:a1:23:67:36:
4d:40:36:63:16:69:95:f4:e5:87:55:e0:cd:75:7a:
0c:7b:df:ee:02:40:06:84:03:ad:cb:31:1b:6f:2d:
81:76:ba:3b:de:65:a6:b7:ed:0a:a3:01:9f:21:9e:
63:94:7f:c4:79:71:62:e8:fa:c6:db:a0:ed:3e:02:
62:35:f7:e5:e2:03:ae:14:ea:fd:50:e4:bd:7f:70:
3f:3b:6f:7b:46:90:14:2e:ff:24:3b:df:ec:08:3e:
4b:02:f8:a3:e8:d9:2f:0b:03:1a:c4:14:93:00:73:
bb:ae:24:54:be:e1:5f:39:d3:7b:08:c0:c7:44:e4:
15:2d:b0:95:a3:e2:da:cb:54:b6:3f:40:2d:ae:03:
a7:b2:27:a7:df:86:c0:f0:66:04:27:33:53:81:74:
cf:6c:51:4a:7e:1d:88:a9:7d:26:1b:6d:d7:9e:01:
f7:17:38:a8:59:07:29:43:0b:cb:80:6e:60:7d:a3:
b6:1e:5d:34:b9:01:81:cf:ce:b7:93:de:5b:94:e7:
c6:53:f0:c8:fc:63:9d:f1:25:d8:00:bb:01:14:20:
a1:1d:73:50:e4:bd:06:82:bb:d9:c1:31:3a:27:f3:
77:2f:30:e6:31:0b:8d:4a:22:9a:62:1a:d7:58:96:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:DA:06:1D:C8:91:AA:90:36:D6:BE:F5:7C:38:A2:28:29:BB:B9
X509v3 Authority Key Identifier:
keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d4:02:7c:e2:43:a0:c4:07:8c:d8:21:67:83:ae:9c:69:80:
2e:9c:2e:00:a7:c3:27:46:88:83:54:5d:eb:65:97:0a:20:fc:
99:4a:dd:b7:d6:9b:b7:be:8e:55:17:59:19:35:5e:1c:ac:a5:
71:25:86:b2:68:1a:a4:18:af:10:a2:88:ec:b7:e4:99:5a:71:
78:5c:48:cb:10:c0:32:62:2e:fe:18:b2:b1:2f:1f:a9:2e:88:
07:9c:5c:83:d7:5b:49:3d:f4:77:32:82:b9:91:5c:a0:b0:7e:
28:08:73:1a:27:86:6a:eb:76:e4:53:b9:ff:11:3e:63:65:0a:
3b:26:76:72:d9:a8:c7:5c:41:6f:55:7b:32:bb:25:14:6b:bc:
ca:93:2d:bf:75:34:c1:12:3b:78:13:60:89:26:95:be:fd:90:
a4:97:7d:0b:dc:94:7f:a4:f9:cc:c1:c4:e8:30:5d:20:f4:a8:
4d:62:eb:83:9d:3e:29:9b:18:52:39:3a:b9:c3:62:91:77:19:
e4:3a:3f:91:37:f2:f1:50:99:31:1c:44:b6:11:0d:59:92:f6:
a9:c8:fc:98:bc:1e:e0:ed:dc:31:7c:f8:d8:c1:e2:47:5b:04:
77:3e:f4:b2:44:21:e8:55:58:75:a3:1d:86:ef:c4:09:6a:e3:
2a:52:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:34:35 2025 by rpki-client