This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File: XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier: 59gzBPCZegIMHnv0pF9O00abF2ynnVrvBESf71VqY4c=
Subject key identifier: FB:C7:F5:65:CB:CF:73:5B:02:75:D5:4E:95:9C:26:64:A5:0E:84:CE
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer: /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial: 086B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number: 0866
Signing time: Thu 25 Dec 2025 01:45:18 +0000
Manifest this update: Thu 25 Dec 2025 01:45:17 +0000
Manifest next update: Sat 27 Dec 2025 01:45:17 +0000
Files and hashes: 1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: ScMPGxDAI9w8wLl5XoVLse0x1te9wY9yZCCYawv/PNw=)
2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Validity
Not Before: Dec 25 01:45:17 2025 GMT
Not After : Dec 27 01:45:17 2025 GMT
Subject: CN=694c972e-6073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:8a:2a:e1:8f:33:57:12:87:3a:53:76:97:
19:c6:4d:f9:3a:c4:fa:c0:e9:5f:ce:4e:0b:cb:4e:
24:f6:53:91:8d:13:68:b5:52:de:e2:a2:ba:f5:26:
84:22:b7:58:e1:e8:07:d5:4c:91:2b:d3:98:20:28:
b6:41:71:ae:7c:1a:dc:71:0f:9e:39:c6:49:74:a3:
e0:47:a8:de:7f:d6:0b:29:8e:41:d9:10:cb:a5:ee:
e2:40:57:15:af:df:ac:2f:6c:cc:9c:14:2a:16:fc:
1b:96:b7:69:93:47:ca:d0:f1:b8:6b:56:b9:2e:d3:
93:ee:14:a5:bd:f8:24:34:59:0d:ec:ab:4c:b8:d9:
06:04:91:d6:4d:26:c4:7e:5f:18:de:ee:58:63:a1:
72:bc:d9:e5:89:03:48:fd:6b:25:99:e6:7a:d3:cb:
4b:aa:41:c2:25:95:c9:78:3d:ed:1c:d0:e0:9b:a8:
6c:9e:a1:58:64:8c:db:96:31:4b:97:ab:ea:57:dd:
1d:a6:82:72:68:2c:94:29:8a:13:ec:d3:80:fc:b4:
29:ac:7d:13:00:3d:d7:2a:3f:10:ed:83:79:06:cc:
1e:1e:8c:e3:eb:91:0e:5a:a5:1b:e5:d6:6c:68:be:
88:ff:8d:82:63:95:4e:56:df:90:9d:31:be:58:81:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:F5:65:CB:CF:73:5B:02:75:D5:4E:95:9C:26:64:A5:0E:84:CE
X509v3 Authority Key Identifier:
keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:aa:09:33:1a:5f:d7:6b:c1:7a:3b:9c:69:a9:45:98:95:
85:80:11:2f:3a:dd:bc:fa:29:8b:3c:c9:64:bd:33:e5:3e:6c:
c2:8a:00:02:b5:f4:f7:d5:9c:52:ce:36:e9:b9:8e:3d:f8:31:
a3:98:4a:0e:69:71:d4:32:9e:0a:91:7f:09:b6:1d:be:0e:b3:
92:6d:c4:fa:d7:48:87:60:62:f1:42:80:31:42:3a:46:ac:c5:
0c:11:f3:91:a0:9f:d7:57:fe:2d:c8:7a:2f:1d:50:65:96:b5:
34:e3:64:72:dd:50:93:77:fd:30:d2:96:01:18:35:4a:01:1b:
e1:33:fc:6c:f0:a0:a6:e2:c3:53:22:ac:76:3f:1c:fd:a4:0d:
de:3b:0e:f0:c6:b9:3e:69:a0:cd:06:ee:89:3c:f9:43:cf:59:
c6:7a:1e:a2:de:dc:2e:56:7a:a9:a3:c4:22:43:0e:dc:ba:c2:
4c:9b:f5:2d:16:75:d4:45:4b:a7:63:af:d8:48:4d:ee:fe:2e:
43:36:3f:f0:3d:69:cf:da:10:1b:ab:e5:74:59:27:22:fc:04:
94:44:5a:1a:a2:61:3a:03:f3:a6:ab:87:66:3c:32:1c:31:86:
93:76:93:a4:4d:92:23:55:d8:1e:10:6f:6c:e3:45:cc:92:9a:
a8:70:e6:b5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCGswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzg5NjdBRjExMC8GA1UEBRMoNUNBQTk4MkMwMzE3OTMyNjMzMkQ2Qjc3MEE1OEU4
Nzk1Q0I4NDU5RjAeFw0yNTEyMjUwMTQ1MTdaFw0yNTEyMjcwMTQ1MTdaMBgxFjAU
BgNVBAMTDTY5NGM5NzJlLTYwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDImooq4Y8zVxKHOlN2lxnGTfk6xPrA6V/OTgvLTiT2U5GNE2i1Ut7iorr1
JoQit1jh6AfVTJEr05ggKLZBca58GtxxD545xkl0o+BHqN5/1gspjkHZEMul7uJA
VxWv36wvbMycFCoW/BuWt2mTR8rQ8bhrVrku05PuFKW9+CQ0WQ3sq0y42QYEkdZN
JsR+Xxje7lhjoXK82eWJA0j9ayWZ5nrTy0uqQcIllcl4Pe0c0OCbqGyeoVhkjNuW
MUuXq+pX3R2mgnJoLJQpihPs04D8tCmsfRMAPdcqPxDtg3kGzB4ejOPrkQ5apRvl
1mxovoj/jYJjlU5W35CdMb5YgWoHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+8f1
ZcvPc1sCddVOlZwmZKUOhM4wHwYDVR0jBBgwFoAUXKqYLAMXkyYzLWt3CljoeVy4
RZ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4OTY3LzRBQTQ0MkY0NzhEOTExRUE5QTgwOTU1Q0Y4QUVBMjI4L1hLcVlM
QU1Ya3lZekxXdDNDbGpvZVZ5NFJaOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLcVlMQU1Ya3lZekxXdDNDbGpvZVZ5NFJaOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzg5NjcvNEFBNDQyRjQ3OEQ5MTFFQTlBODA5NTVDRjhB
RUEyMjgvWEtxWUxBTVhreVl6TFd0M0Nsam9lVnk0Ulo4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByYqoJMxpf12vBejucaalFmJWFgBEv
Ot28+imLPMlkvTPlPmzCigACtfT31ZxSzjbpuY49+DGjmEoOaXHUMp4KkX8Jth2+
DrOSbcT610iHYGLxQoAxQjpGrMUMEfORoJ/XV/4tyHovHVBllrU042Ry3VCTd/0w
0pYBGDVKARvhM/xs8KCm4sNTIqx2Pxz9pA3eOw7wxrk+aaDNBu6JPPlDz1nGeh6i
3twuVnqpo8QiQw7cusJMm/UtFnXURUunY6/YSE3u/i5DNj/wPWnP2hAbq+V0WSci
/ASURFoaomE6A/Omq4dmPDIcMYaTdpOkTZIjVdgeEG9s40XMkpqocOa1
-----END CERTIFICATE-----
Generated at Thu Dec 25 15:43:47 2025 by rpki-client