This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft File: hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json) Hash identifier: j8qzsxGXPahwyZFuAfZp9GQz1/XF+e0pC/1g3FSr4nI= Subject key identifier: 48:77:A7:DD:DD:2F:4D:E7:F5:67:E6:8B:50:7D:D6:6E:DC:17:6A:CD Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15 Certificate issuer: /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015 Certificate serial: 0224 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft Manifest number: 0222 Signing time: Wed 24 Dec 2025 04:28:04 +0000 Manifest this update: Wed 24 Dec 2025 04:28:03 +0000 Manifest next update: Fri 26 Dec 2025 04:28:03 +0000 Files and hashes: 1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: QStqutihpjH/s1TR9M3fUbhJuLWtgcD7hra7g3Y2i4U=) 2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=) 3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 26 Dec 2025 04:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015 Validity Not Before: Dec 24 04:28:03 2025 GMT Not After : Dec 26 04:28:03 2025 GMT Subject: CN=694b6bd4-5c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e7:30:ff:0b:66:44:03:65:26:bd:b5:9e:96: b6:d5:96:7e:12:47:a4:00:73:37:61:08:66:ad:7f: 6e:a2:7b:71:ea:d0:9b:58:37:a2:f6:d8:3a:84:88: c1:6e:75:47:b3:e9:3e:c2:d8:e4:c2:56:8a:df:61: e2:ba:5f:e5:67:93:f9:b2:43:cf:56:ea:3d:06:29: 28:7f:0e:0e:53:26:59:35:b5:c5:1e:8c:6d:2d:f0: 76:55:93:10:79:7b:f3:5a:a3:01:df:e1:d2:4d:4a: 50:e9:f9:35:4d:19:16:a2:20:4c:e0:e4:bb:ad:85: 6b:40:72:24:51:2b:8b:c5:97:9b:87:9d:e4:ba:9b: 94:6c:96:64:e6:fe:fb:98:52:60:f6:09:03:ca:05: 6b:63:91:88:8c:8b:89:21:c8:d0:0d:19:05:93:ac: 6f:73:d4:8e:5f:c3:69:2e:81:0f:6d:8b:a3:20:77: 01:08:3e:a5:ad:6e:84:bb:a9:ba:dd:fd:0b:af:3b: 53:fb:3a:0c:02:3e:13:36:38:45:e5:14:c2:a3:29: ac:ad:3b:00:b3:c3:50:61:a6:17:30:c7:57:d0:47: e1:82:83:cb:dc:d8:16:32:fb:5e:74:40:99:46:a8: 7a:ab:1b:c4:bf:9c:90:c4:1d:eb:24:ed:cd:38:88: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:77:A7:DD:DD:2F:4D:E7:F5:67:E6:8B:50:7D:D6:6E:DC:17:6A:CD X509v3 Authority Key Identifier: keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fa:a7:c1:00:a8:b3:45:3e:77:f8:c8:79:3f:41:7b:c6:ff: 0c:5d:c3:18:81:20:d9:71:95:04:74:12:b8:14:19:68:d5:eb: 76:28:61:9b:86:7e:5a:71:23:d4:97:88:1c:cb:24:eb:73:0d: 5d:c0:46:bb:04:14:c3:74:a1:00:ec:ef:28:ca:01:11:4a:90: 55:2d:b5:9d:b5:bb:21:f6:b4:b1:66:23:50:46:93:d5:e4:4e: 61:fe:6d:ec:17:dc:66:73:9e:74:2b:71:ac:c7:b6:70:50:48: 47:53:7a:4d:4c:6b:90:44:31:b8:8b:cb:70:04:68:c5:86:f4: 62:1d:1d:c7:14:7f:68:de:17:cd:3f:35:25:9b:e4:33:b4:df: 6e:42:8a:b9:29:35:ff:6e:f5:59:1d:0b:7e:a4:9e:c7:d7:02: 0a:3a:b8:0e:14:45:82:44:08:f5:67:0d:db:ea:c7:58:62:7d: 7f:29:74:87:b3:80:e1:3a:39:89:ad:1a:0e:f0:c1:eb:ad:e1: 2e:cd:95:f0:2b:98:b3:b6:31:e9:30:a4:c4:55:4a:a6:65:0c: 80:ba:bb:eb:e4:9c:19:33:0b:2f:a1:7a:e2:fe:f3:54:81:d0: fe:40:7b:13:17:31:19:fe:40:91:eb:6f:45:7d:97:fa:bd:ba: 4b:ac:ea:4a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OEY0QTFBRjExMC8GA1UEBRMoODRGMDFGQzMzOEREMkMxNDFFQTQ1RDMxN0IyMTFG NzZDRjVEMDAxNTAeFw0yNTEyMjQwNDI4MDNaFw0yNTEyMjYwNDI4MDNaMBgxFjAU BgNVBAMTDTY5NGI2YmQ0LTVjODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDl5zD/C2ZEA2UmvbWelrbVln4SR6QAczdhCGatf26ie3Hq0JtYN6L22DqE iMFudUez6T7C2OTCVorfYeK6X+Vnk/myQ89W6j0GKSh/Dg5TJlk1tcUejG0t8HZV kxB5e/NaowHf4dJNSlDp+TVNGRaiIEzg5LuthWtAciRRK4vFl5uHneS6m5RslmTm /vuYUmD2CQPKBWtjkYiMi4khyNANGQWTrG9z1I5fw2kugQ9ti6MgdwEIPqWtboS7 qbrd/QuvO1P7OgwCPhM2OEXlFMKjKaytOwCzw1Bhphcwx1fQR+GCg8vc2BYy+150 QJlGqHqrG8S/nJDEHesk7c04iOs/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSHen 3d0vTef1Z+aLUH3WbtwXas0wHwYDVR0jBBgwFoAUhPAfwzjdLBQepF0xeyEfds9d ABUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjhGNEExLzc5ODAyNkQwM0Y1QzExRUZCODNDNzk3RTc2MkU5NTFBL2hQQWZ3 empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2hQQWZ3empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OEY0QTEvNzk4MDI2RDAzRjVDMTFFRkI4M0M3OTdFNzYy RTk1MUEvaFBBZnd6amRMQlFlcEYweGV5RWZkczlkQUJVLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCt+qfBAKizRT53+Mh5P0F7xv8MXcMY gSDZcZUEdBK4FBlo1et2KGGbhn5acSPUl4gcyyTrcw1dwEa7BBTDdKEA7O8oygER SpBVLbWdtbsh9rSxZiNQRpPV5E5h/m3sF9xmc550K3Gsx7ZwUEhHU3pNTGuQRDG4 i8twBGjFhvRiHR3HFH9o3hfNPzUlm+QztN9uQoq5KTX/bvVZHQt+pJ7H1wIKOrgO FEWCRAj1Zw3b6sdYYn1/KXSHs4DhOjmJrRoO8MHrreEuzZXwK5iztjHpMKTEVUqm ZQyAurvr5JwZMwsvoXri/vNUgdD+QHsTFzEZ/kCR629FfZf6vbpLrOpK -----END CERTIFICATE-----Generated at Thu Dec 25 04:57:39 2025 by rpki-client