This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File: kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier: 23Kspn12fBLurv+2Vb3Qb4VgVeEwrMhIPTlHpwm7hhU=
Subject key identifier: A0:4F:D6:2F:57:92:B3:E6:35:1F:2C:1F:4D:9D:05:4F:F2:48:38:09
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer: /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial: 025D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number: 0251
Signing time: Sun 21 Dec 2025 04:14:59 +0000
Manifest this update: Sun 21 Dec 2025 04:14:58 +0000
Manifest next update: Tue 23 Dec 2025 04:14:58 +0000
Files and hashes: 1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: 3h6cfwlRAKfTiCdPj8+mmpe0HWqWTHQVOM7YHco/xJc=)
2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Dec 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Validity
Not Before: Dec 21 04:14:58 2025 GMT
Not After : Dec 23 04:14:58 2025 GMT
Subject: CN=69477443-5ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:09:cc:c6:d1:38:5b:21:c3:15:7e:ca:e2:
35:f0:ce:76:69:a0:62:c2:4a:9e:86:c4:45:62:a6:
e2:07:af:a8:e0:27:61:4c:77:ac:c8:27:70:86:9f:
81:71:2c:be:f9:8c:99:3f:c1:a5:f1:1f:92:ad:82:
95:6f:bc:e6:23:a3:bd:9c:28:aa:91:28:bb:11:9d:
06:85:b4:4f:ac:3d:c7:43:4c:b6:50:45:3d:1f:76:
39:12:6d:a4:25:d0:9f:e3:c3:9e:f0:56:6d:8e:86:
15:61:a0:b8:29:61:f5:48:94:ed:65:a4:48:24:f5:
11:4d:9c:77:f8:9e:f1:41:94:4a:2d:e0:6e:4e:cc:
42:3f:00:5c:36:5a:53:5e:31:5d:33:0d:9d:04:cb:
36:fc:be:d9:94:4f:52:37:ca:35:d6:9d:c2:71:fd:
6d:7f:53:06:61:47:9b:de:1c:aa:41:35:9e:d0:08:
16:4a:7f:74:f9:5d:2a:66:7d:97:e5:b2:00:92:2a:
65:01:22:29:41:95:6e:96:a0:ab:cf:b7:e3:e6:7f:
c4:36:d8:23:d8:36:c7:16:7d:d8:9b:c9:47:43:be:
c5:f8:6a:cc:09:c3:e5:8c:c2:28:05:6f:f8:9d:f8:
f6:a5:d3:5d:48:c8:d0:e8:53:40:15:2f:ee:3d:91:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:D6:2F:57:92:B3:E6:35:1F:2C:1F:4D:9D:05:4F:F2:48:38:09
X509v3 Authority Key Identifier:
keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:71:66:79:a1:55:19:3f:b8:68:88:a4:35:60:03:1c:a6:
56:62:bb:52:78:64:ec:b4:76:86:dc:7b:dc:09:14:f8:dd:2c:
64:41:b1:fa:16:d3:27:bd:94:b7:5e:01:59:a0:b9:d2:cc:c4:
a1:5f:59:2a:63:ce:a3:99:00:1a:6d:79:87:b0:bd:bb:08:37:
70:af:78:f4:f4:47:94:db:63:fc:ee:8d:da:58:2d:d5:7f:52:
98:28:7f:0e:89:75:2d:82:2c:6d:cb:18:77:c8:5f:9b:02:5e:
7f:6e:c6:d1:22:6f:53:10:62:21:09:e3:6f:c6:b6:b6:f3:b4:
dd:3d:49:15:15:15:4f:e1:17:f9:6a:12:5e:b2:54:8c:a9:fa:
2d:4c:dd:d6:34:2a:c4:d8:2d:dc:81:66:a5:0a:5c:aa:5b:fa:
a6:09:0f:bd:7c:48:9f:0e:91:d7:f1:86:2c:d9:f9:1c:97:19:
3f:a0:83:90:fe:12:33:3a:de:d7:48:c5:01:23:c0:a7:92:40:
f9:6a:3a:a5:14:0b:ec:b6:fd:f1:ed:ce:3a:25:2b:39:2c:af:
cc:e6:a8:0c:ae:25:74:44:91:4e:52:ae:62:5b:f5:a9:a1:a3:
04:1e:7c:ff:6c:69:20:17:b0:73:07:2c:f2:02:29:9d:72:c3:
ad:dd:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:07:44 2025 by rpki-client