This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File: hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier: ebg6QFMVxdm2kFYGHK90Wuulb5Ds27sDxGo8G8GLAzw=
Subject key identifier: 76:68:1D:8F:B0:3F:C3:61:8F:EE:F2:C8:CF:CB:5E:10:52:B1:42:E2
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 04EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number: 04E4
Signing time: Sun 21 Dec 2025 02:57:11 +0000
Manifest this update: Sun 21 Dec 2025 02:57:10 +0000
Manifest next update: Tue 23 Dec 2025 02:57:10 +0000
Files and hashes: 1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: 7HEOhYlEMgw0Y84dNzO3s0yY2u6W89j6J2Y1zoHXnhE=)
2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Dec 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Dec 21 02:57:10 2025 GMT
Not After : Dec 23 02:57:10 2025 GMT
Subject: CN=69476207-fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:02:03:3d:ba:68:47:75:5f:c4:b1:6e:b7:
3e:92:82:e3:4b:9e:b2:a7:6b:3e:d3:53:e9:76:d3:
98:f9:df:ef:16:bd:5c:e1:c4:96:bb:05:e7:f6:57:
58:8a:0e:08:d6:2d:da:07:a6:22:b5:55:2b:74:3c:
b7:1d:26:fb:19:e5:84:50:71:12:82:a7:c5:ae:6b:
ba:6d:23:1d:05:54:1b:68:11:60:60:e3:6e:7d:6d:
63:59:36:d4:a2:e1:d8:86:2e:9c:67:6b:c0:7e:64:
57:92:dd:c3:d4:5a:8d:d6:5e:d1:6a:da:af:60:75:
2b:26:43:1a:d9:21:27:3c:10:74:ed:dd:52:ac:ab:
d1:7d:71:9b:81:49:61:a1:da:c8:30:0c:e4:aa:71:
1c:09:3f:7e:fd:aa:5d:67:13:a7:99:36:3b:6e:e8:
a1:8b:dd:4b:a5:16:b8:7c:87:1e:f5:47:2c:07:c8:
52:82:99:17:6f:aa:68:57:d6:d7:9f:47:9d:a1:1a:
80:8f:5d:6b:e0:11:fa:10:8a:99:f2:e3:62:cb:c2:
25:38:ca:bc:1a:de:7f:2c:bb:9d:fc:00:46:6c:85:
0f:48:52:1f:1e:1c:72:48:77:70:79:47:ac:e0:a6:
0e:df:68:a7:7d:0a:fa:97:d0:e5:66:be:e9:94:12:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:68:1D:8F:B0:3F:C3:61:8F:EE:F2:C8:CF:CB:5E:10:52:B1:42:E2
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:1a:04:15:88:40:bf:21:2e:ab:02:e1:1c:ad:4a:b8:64:
86:0d:a9:2e:4e:74:4b:6c:f1:20:76:38:54:ff:20:06:f7:32:
f7:53:81:7e:4b:44:1b:01:14:a0:75:48:08:8e:8b:4a:c2:df:
8c:fe:d8:8f:da:70:52:22:67:93:eb:02:25:d0:2d:09:a6:a2:
e9:20:f3:15:61:3c:2b:51:b6:6e:63:fa:1b:73:85:c9:70:17:
af:92:29:4a:a8:1a:bc:67:1e:ad:c7:68:84:ef:8f:f1:67:f9:
17:94:8a:11:4e:44:e7:82:6c:f8:7d:0e:ca:72:88:18:a8:b9:
5f:10:16:aa:9a:08:ee:0b:4c:2b:d0:59:ab:d5:74:0d:2c:66:
76:6a:55:fc:33:96:b0:55:ba:8f:54:41:75:64:f4:b0:0a:53:
a8:55:1a:79:a7:3e:4f:4b:04:9a:4a:b2:48:6f:e6:12:d5:63:
ac:dc:8b:a4:cd:22:b5:e8:2a:b9:41:b1:2b:f5:6c:f5:ed:ba:
6c:71:0f:e7:ce:33:2b:f3:da:1e:d2:af:7b:e1:84:b1:2b:3f:
64:df:c0:e8:49:48:d4:e6:06:ae:47:0e:97:78:49:c3:f0:81:
fa:4b:e6:65:d5:9c:7a:dd:50:7a:c6:b5:7e:69:a4:9c:22:28:
49:dc:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:04:02 2025 by rpki-client