This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json) Hash identifier: 8wDERvimTBd5IwKnBUCe6Yj8J3NEo8NPvI8NkxebrlA= Subject key identifier: B0:9B:A3:CE:4F:26:39:66:1D:D0:05:0D:C5:EF:7E:01:24:B5:35:FD Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA Certificate serial: 0828 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft Manifest number: 0828 Signing time: Wed 24 Dec 2025 01:54:50 +0000 Manifest this update: Wed 24 Dec 2025 01:54:49 +0000 Manifest next update: Fri 26 Dec 2025 01:54:49 +0000 Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: tZ8+PUjQXuGpA+qSoJSM6/l4sCQmGFrvCK5x62ywboM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 26 Dec 2025 01:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA Validity Not Before: Dec 24 01:54:49 2025 GMT Not After : Dec 26 01:54:49 2025 GMT Subject: CN=694b47ea-df32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:e7:07:8a:30:40:4a:05:f4:a1:07:9b:88: b0:42:8a:3f:45:8c:c8:28:b8:ea:a3:41:3a:04:7c: aa:6d:56:ec:be:60:f7:d4:8f:e1:9f:e8:a6:35:d1: 36:1d:ca:11:5d:5c:19:1e:16:0f:9c:4a:fa:d1:45: c5:46:b1:3f:09:04:80:f7:9d:dd:7f:30:8a:bb:39: 98:4b:bb:60:42:28:3b:3f:c4:29:5b:db:af:18:ec: 65:43:b5:97:fd:08:a6:d9:b3:9b:b4:a3:97:ee:dd: 86:a6:59:12:da:0d:96:0b:7b:9b:b8:9d:0c:39:22: 39:3e:1a:ac:93:5e:4b:45:57:ed:94:10:ac:ee:f2: 4f:91:72:fb:9a:8b:37:e7:1e:86:fe:97:81:24:08: fb:35:1a:5f:3a:38:98:96:54:f7:aa:81:48:27:52: d3:b7:df:67:4c:53:e2:e3:98:f0:14:ea:d5:25:7a: f2:0d:71:04:cf:c5:35:7e:34:4f:d7:68:cb:e9:5f: 50:ec:31:6d:5f:91:73:8f:d1:0d:86:29:b6:b9:c3: 7c:fd:88:15:31:a8:83:15:b4:3f:e8:99:e6:37:6c: 86:7b:a2:76:fd:a4:1d:e1:82:6a:85:ce:62:95:2e: 42:7b:c3:7a:d0:d4:d8:99:99:c5:e2:33:74:38:f3: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9B:A3:CE:4F:26:39:66:1D:D0:05:0D:C5:EF:7E:01:24:B5:35:FD X509v3 Authority Key Identifier: keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6e:44:d1:3e:4a:a3:5b:c3:c4:79:81:9c:aa:f3:a8:bf:71: 1c:17:ac:26:8e:ec:9c:fe:27:70:df:09:ae:b2:46:7a:8f:5f: 09:d9:e0:29:71:fc:03:f2:fb:50:0f:75:cd:fe:3a:b4:b1:bc: 13:62:45:40:5b:2c:e1:3f:c2:ee:ef:ff:0b:03:8f:a2:25:30: 4b:a9:72:67:23:44:7f:0d:ff:fd:8f:1c:92:62:da:6e:65:89: 23:48:54:3f:c1:04:30:39:eb:ae:40:42:df:d9:8b:8f:79:71: 6d:a9:72:63:44:be:4d:0d:9d:6d:0e:dc:cb:88:ac:7e:82:32: 03:94:41:8d:7a:b3:c9:20:f3:58:cb:c9:86:cc:c4:cb:a1:e9: f0:61:34:89:17:b6:69:0a:2d:50:11:a0:11:35:56:cb:df:57: 97:e9:b9:1d:2d:24:f8:94:19:6e:23:0c:b7:17:80:b8:7e:54: 68:9a:79:83:fe:7d:95:9e:bf:24:37:bc:6c:a9:58:0f:f3:22: 21:13:3c:3d:5a:7b:42:bf:0d:51:34:66:ce:c4:c1:e0:d4:9e: e1:a4:f1:b2:f8:8d:90:12:01:a3:72:fb:9d:7d:a1:95:1c:f6: 0b:54:e5:72:f3:ba:78:60:ba:2d:02:ee:9a:99:76:56:be:8f: 95:1d:6b:13 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QjFGQjJBRjExMC8GA1UEBRMoRkE0MzVBQUU2MzRBMjQ5NDAxOEM1Q0RGODg1NzA5 QUY1QkNFMzZCQTAeFw0yNTEyMjQwMTU0NDlaFw0yNTEyMjYwMTU0NDlaMBgxFjAU BgNVBAMTDTY5NGI0N2VhLWRmMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDiYecHijBASgX0oQebiLBCij9FjMgouOqjQToEfKptVuy+YPfUj+Gf6KY1 0TYdyhFdXBkeFg+cSvrRRcVGsT8JBID3nd1/MIq7OZhLu2BCKDs/xClb268Y7GVD tZf9CKbZs5u0o5fu3YamWRLaDZYLe5u4nQw5Ijk+GqyTXktFV+2UEKzu8k+Rcvua izfnHob+l4EkCPs1Gl86OJiWVPeqgUgnUtO332dMU+LjmPAU6tUlevINcQTPxTV+ NE/XaMvpX1DsMW1fkXOP0Q2GKba5w3z9iBUxqIMVtD/omeY3bIZ7onb9pB3hgmqF zmKVLkJ7w3rQ1NiZmcXiM3Q482bnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsJuj zk8mOWYd0AUNxe9+ASS1Nf0wHwYDVR0jBBgwFoAU+kNarmNKJJQBjFzfiFcJr1vO NrowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkIxRkIyL0VDQkM3RTgyOUY4MzExRUE4NDU5MTUzN0Y4QUVBMjI4Ly1rTmFy bU5LSkpRQmpGemZpRmNKcjF2T05yby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLy1rTmFybU5LSkpRQmpGemZpRmNKcjF2T05yby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QjFGQjIvRUNCQzdFODI5RjgzMTFFQTg0NTkxNTM3RjhB RUEyMjgvLWtOYXJtTktKSlFCakZ6ZmlGY0pyMXZPTnJvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtbkTRPkqjW8PEeYGcqvOov3EcF6wm juyc/idw3wmuskZ6j18J2eApcfwD8vtQD3XN/jq0sbwTYkVAWyzhP8Lu7/8LA4+i JTBLqXJnI0R/Df/9jxySYtpuZYkjSFQ/wQQwOeuuQELf2YuPeXFtqXJjRL5NDZ1t DtzLiKx+gjIDlEGNerPJIPNYy8mGzMTLoenwYTSJF7ZpCi1QEaARNVbL31eX6bkd LST4lBluIwy3F4C4flRomnmD/n2Vnr8kN7xsqVgP8yIhEzw9WntCvw1RNGbOxMHg 1J7hpPGy+I2QEgGjcvudfaGVHPYLVOVy87p4YLotAu6amXZWvo+VHWsT -----END CERTIFICATE-----Generated at Thu Dec 25 01:24:08 2025 by rpki-client