This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: R+Two8BzwYOjimRRMlRa9TbzTLXVgE4xDeu4wfT21+4=
Subject key identifier: A7:62:DF:16:AB:54:73:49:E2:DC:E9:00:C4:FC:E5:CA:2C:11:EB:CF
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 0387
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 0381
Signing time: Wed 24 Dec 2025 03:46:23 +0000
Manifest this update: Wed 24 Dec 2025 03:46:22 +0000
Manifest next update: Fri 26 Dec 2025 03:46:22 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: zdhckTGLCg6m8pWrNiITkRLz4A4F7+73iamcDW5MBAE=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Dec 2025 03:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Dec 24 03:46:22 2025 GMT
Not After : Dec 26 03:46:22 2025 GMT
Subject: CN=694b620f-2525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:da:b3:3e:0a:2d:aa:d5:80:ae:59:dc:85:
76:c3:1f:75:52:73:59:f0:08:fa:88:45:31:d2:cc:
d4:76:9e:2b:de:4f:7b:e7:f8:dc:0f:66:fa:c2:19:
e8:3b:07:81:c9:a1:3a:3d:33:54:12:aa:f7:d1:e7:
02:eb:b2:09:60:9e:70:6c:54:02:10:95:69:1e:f6:
f7:b4:4a:96:6e:dc:dc:92:1e:1d:79:3c:e2:ec:37:
56:f9:26:80:62:51:f7:6f:b3:65:54:d6:81:26:4b:
bd:c3:5e:b8:fc:f9:24:ca:52:9b:36:ba:28:a8:5b:
d0:fa:30:fe:0d:48:6d:04:1a:a7:f8:ff:ba:58:85:
e1:9d:33:1b:76:9f:d7:1f:85:73:57:78:e6:d9:44:
df:ea:69:70:3a:ac:7c:f5:f1:d4:56:8b:80:20:ee:
df:23:61:b6:e8:ad:64:9e:a6:59:9b:f2:a9:c6:8b:
69:b4:bf:fc:0d:a9:d8:37:a6:45:87:48:9e:99:9f:
15:4a:67:1e:96:c7:53:aa:15:c7:9b:58:da:4c:c1:
9c:dd:4d:2b:b1:f9:63:e1:04:f9:99:d2:2d:09:64:
47:49:7f:90:c5:04:b6:cf:43:a3:97:be:f5:c0:c3:
a3:ad:d9:d6:53:13:f4:cb:ea:93:fb:9f:b6:10:9c:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:DF:16:AB:54:73:49:E2:DC:E9:00:C4:FC:E5:CA:2C:11:EB:CF
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:61:bb:01:4b:ed:c7:5d:46:67:fd:03:1a:a9:cb:e8:08:
d5:a9:31:2f:c6:f3:d7:5f:b7:b3:39:f8:01:dd:0e:35:5a:b3:
1d:50:32:d5:89:51:d8:05:c6:cb:cc:a8:04:e3:6c:ce:fa:79:
1c:d9:e5:99:9c:c3:a7:c8:8b:4f:98:63:b9:a6:fb:0c:98:28:
95:de:38:a8:df:29:28:48:69:ec:7a:e6:a3:35:5a:f8:b2:8c:
d5:05:a0:b9:84:68:8e:d1:45:d3:fb:cc:b7:d2:72:e1:ec:71:
46:e3:de:82:e2:52:40:d4:83:23:fd:a4:45:83:c5:25:7b:1a:
ea:ae:ca:21:d6:f1:b6:5f:e0:55:e6:9d:7d:08:3d:f9:da:f0:
22:f0:0d:37:b2:8c:29:52:2d:93:dc:ca:88:d9:a3:18:97:06:
81:e0:9a:03:74:d8:bf:93:0c:1d:37:2b:73:b5:65:6c:ce:10:
2f:ec:71:99:24:06:50:a2:74:cb:b5:3d:41:e8:76:b7:2a:cf:
4f:24:91:ae:4d:74:f1:10:5e:9a:51:b7:c3:8b:ca:5b:46:aa:
09:57:ef:55:cc:17:13:0a:25:c0:ba:03:00:0e:45:4b:2b:bd:
e2:36:89:59:f2:5e:d7:5d:ca:46:20:c8:8a:42:8c:e9:08:52:
d5:a7:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:35:26 2025 by rpki-client