This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File: DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier: iz7Ac31HEfqkE9M6W7oGDgwWx0X9ZCX0FyOBbeocC20=
Subject key identifier: 89:0F:26:DF:39:E3:A0:76:C6:2F:DB:65:D5:2B:2F:0A:F8:37:92:C9
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: 01B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number: 01B1
Signing time: Thu 25 Dec 2025 04:40:08 +0000
Manifest this update: Thu 25 Dec 2025 04:40:07 +0000
Manifest next update: Sat 27 Dec 2025 04:40:07 +0000
Files and hashes: 1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: cdvUgqFA0X7QlAPc8dO3JJAyU93zyC/gp8iMi2K78Kw=)
2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Validity
Not Before: Dec 25 04:40:07 2025 GMT
Not After : Dec 27 04:40:07 2025 GMT
Subject: CN=694cc028-e06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:79:98:a6:05:95:ec:e5:55:9e:7f:d8:63:
a1:32:c4:04:2f:92:5a:f2:b8:62:d7:d7:94:8d:27:
4b:00:d3:c1:ab:e1:ac:d9:64:46:b4:55:cb:00:f7:
47:97:c1:9d:49:c7:d7:61:40:3a:58:29:ef:87:39:
e3:32:e4:ee:e8:75:94:76:5e:c7:f4:61:24:c9:42:
5e:15:0c:0b:18:38:70:14:56:ce:f5:ec:cf:78:b3:
7a:a9:bb:69:27:b1:28:4c:76:90:30:be:16:39:c9:
ab:c5:07:16:d8:94:57:a4:4c:d3:c9:9f:c1:be:02:
eb:5d:7b:93:aa:6b:e8:e7:4f:88:34:0d:ac:21:46:
72:3c:22:de:01:9b:9a:e2:0d:c4:46:8b:4c:74:3a:
97:b9:75:74:85:60:db:a7:08:54:80:24:14:65:a3:
39:ec:07:89:1a:1c:d5:18:9b:d6:d4:16:61:65:87:
02:00:4a:e4:00:76:90:ff:bc:6c:c7:69:64:9b:3e:
0c:46:fc:49:7a:7b:c3:c3:b5:f2:16:54:79:69:0a:
c3:61:c2:27:98:cc:82:de:8f:c1:f9:86:65:7c:43:
40:f5:73:95:af:c6:79:26:7b:a0:18:f5:7f:3a:dc:
ee:35:4f:33:34:30:48:69:54:7f:e1:58:58:6c:5c:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:26:DF:39:E3:A0:76:C6:2F:DB:65:D5:2B:2F:0A:F8:37:92:C9
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ca:09:c0:bf:c8:af:2a:f0:43:f0:ce:49:f6:6f:6f:ee:59:
7b:70:22:ae:94:fb:61:ff:69:76:3b:6f:2d:37:aa:8b:fc:ab:
db:8c:d1:8f:72:a6:d4:e8:63:b0:f0:04:68:28:48:49:8d:30:
a4:f3:7e:27:de:86:bd:52:e1:3b:db:eb:a4:4c:9f:b2:0e:02:
86:65:b4:97:28:20:ff:0c:46:3a:e1:af:c0:06:3d:f9:ff:aa:
dd:a9:76:4d:42:01:e9:1e:76:39:e7:b4:e0:e0:68:fe:e2:9f:
8e:bb:fa:60:93:18:96:32:0e:db:f7:82:6e:ed:b3:86:88:7e:
c2:dc:2e:c9:ed:37:ef:15:a2:b6:a8:d7:e0:13:15:b4:2d:4e:
42:02:0a:f6:0a:45:e0:f5:bd:fc:bd:31:49:96:7f:dd:41:07:
0d:9b:86:7d:b4:12:6d:c4:85:85:c8:a2:4d:f4:1b:62:8b:a7:
21:a6:ce:77:2d:57:ba:08:c3:ea:13:36:bd:95:fb:97:ca:c1:
3f:24:87:af:a4:7e:f9:09:3e:bc:43:a8:76:38:8f:18:f8:98:
9f:5c:f5:db:6e:de:a5:d3:19:51:ff:c6:a3:8b:d9:af:53:6b:
88:76:d1:4c:25:9c:e1:7e:3e:06:20:b5:b1:33:4b:90:54:ed:
c0:2f:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:16:12 2025 by rpki-client