This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File: hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier: bvTbADBQVfm5zvtsQ+Fh/xxY0B1flsy4WBlyefkTTh0=
Subject key identifier: 3E:61:66:30:5A:BB:CF:7F:2C:D7:BB:7B:1A:FD:8C:1C:1D:8B:D5:4B
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer: /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial: 095A
Authority info access: rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number: 094D
Signing time: Sun 21 Dec 2025 01:34:06 +0000
Manifest this update: Sun 21 Dec 2025 01:34:06 +0000
Manifest next update: Tue 23 Dec 2025 01:34:06 +0000
Files and hashes: 1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: lYyhD1ODbBfpaca2EAh3sAA9ua/qVUptx4nbuAUCjNQ=)
2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Validity
Not Before: Dec 21 01:34:06 2025 GMT
Not After : Dec 23 01:34:06 2025 GMT
Subject: CN=69474e8e-319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:a0:4c:c7:8e:95:08:19:27:b1:08:a0:09:
03:76:1d:96:01:d0:69:75:78:2b:d0:ce:0e:86:85:
26:d5:69:59:a7:5a:5f:91:ce:73:53:b8:ce:e7:ca:
bf:8b:05:d3:5f:83:bb:c9:58:4c:b2:f3:7c:ba:d9:
11:81:01:d1:5b:52:26:13:56:00:bf:46:10:4d:27:
dc:a7:9c:cd:cd:d6:db:9e:31:98:c3:7d:e8:89:b1:
12:01:9d:3c:73:0f:55:65:4e:53:d2:4d:8a:8b:a5:
5f:be:d7:75:4a:2c:44:7b:db:56:0d:0e:7c:75:6b:
e8:a5:f1:b0:d8:1c:34:45:ed:24:41:9f:52:9e:7b:
6b:0e:d0:80:09:bf:a7:8c:15:f3:51:b9:79:75:eb:
cf:7b:0d:20:de:7a:db:3c:2b:77:02:ed:72:98:3d:
2d:b9:d1:aa:48:79:d5:ab:99:99:8b:ac:97:16:cc:
b5:18:58:58:12:0e:d4:44:00:18:75:8d:19:b2:78:
51:ec:40:53:35:e4:2e:73:c1:79:01:06:c9:95:2a:
84:00:cc:7e:95:8a:08:57:cd:01:3f:39:d7:e7:bd:
3e:dc:b4:8c:4e:3a:5c:a5:e6:07:55:71:ad:15:98:
04:dd:83:a6:d0:32:49:b1:d8:fc:fe:d0:82:95:83:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:66:30:5A:BB:CF:7F:2C:D7:BB:7B:1A:FD:8C:1C:1D:8B:D5:4B
X509v3 Authority Key Identifier:
keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:7a:48:44:bc:84:c2:42:34:75:cc:35:19:fd:33:6f:f1:
94:12:aa:c5:3e:9f:c6:9c:0e:bc:f8:6c:06:ee:bc:49:29:4a:
36:91:b4:78:b9:5e:3b:bf:ba:56:13:0b:d4:71:e7:51:88:1c:
ab:72:bc:01:ea:ba:f3:32:de:98:fa:76:a2:e7:0f:c2:72:52:
65:2c:19:73:d6:39:05:d7:fa:2b:a8:e9:50:0a:5b:0a:28:84:
0c:82:ef:22:8c:47:87:e4:ae:98:1a:38:1e:d1:20:ba:31:98:
de:58:fc:51:1c:18:16:8b:82:75:23:22:88:be:f9:19:94:e9:
97:95:34:01:82:18:c1:92:e3:c1:21:1c:22:ae:59:de:e8:7f:
ec:77:3d:1c:f5:40:d3:26:91:c1:8d:b5:e9:49:b1:bb:38:cf:
f3:20:8e:b8:6d:1f:0d:56:d5:f5:af:bd:d5:b1:78:cc:1c:b2:
b9:7f:d3:04:db:a5:11:2a:30:7f:5d:57:b3:c6:9a:c8:0c:ed:
8e:ab:2f:71:be:c3:29:34:73:2d:59:35:4f:57:82:7d:88:4d:
e1:8f:8d:70:67:85:b3:b0:7b:70:0d:08:60:d8:1a:f2:5a:87:
13:6a:be:7a:94:43:bf:07:52:b0:a9:39:c5:65:26:29:fb:35:
22:20:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:26:11 2025 by rpki-client