This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier: +xitkDNel2yDtO4mS/cwORSSZxXXd7ZAtaaIECJ08GQ=
Subject key identifier: 99:3B:95:78:82:3D:4A:3A:91:8E:90:61:19:77:28:23:71:86:41:AC
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial: 0688
Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number: 0686
Signing time: Sun 11 Jan 2026 02:21:27 +0000
Manifest this update: Sun 11 Jan 2026 02:21:26 +0000
Manifest next update: Tue 13 Jan 2026 02:21:26 +0000
Files and hashes: 1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: gVIETgc6oKc9um7qvHQLB9QkdbLezUjKZDQFhAjW+PY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Jan 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Validity
Not Before: Jan 11 02:21:26 2026 GMT
Not After : Jan 13 02:21:26 2026 GMT
Subject: CN=69630927-49b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:c6:25:19:39:86:98:80:c4:88:13:fa:a9:
0f:2c:23:d3:93:9d:03:79:76:73:1e:f0:6c:6e:6c:
1a:c2:61:a0:b8:46:31:b8:f0:5a:dd:6c:20:1a:f9:
65:b6:40:13:76:24:a2:a5:d8:02:17:aa:17:1d:54:
6f:06:a7:5a:cf:4d:6b:31:ef:31:6b:33:e5:32:53:
09:f6:7a:8a:9b:52:15:d6:68:70:d7:99:25:76:44:
c0:d6:d4:47:03:4f:9c:e0:ed:68:08:7c:f8:0f:f3:
3a:1b:7e:62:08:51:61:52:c3:0d:58:97:05:69:ce:
f3:88:37:f8:93:83:f3:06:eb:87:c0:d2:29:ee:be:
3f:40:f5:04:10:71:12:26:18:f7:2f:0d:8e:81:dd:
52:56:d8:e8:26:22:86:8e:43:cc:65:19:ac:66:88:
e5:f3:83:f1:f9:14:48:14:64:ce:d7:29:86:b3:e2:
f0:49:e2:d3:d7:96:da:f7:c2:33:c7:7f:1e:e5:dc:
6b:8f:9a:98:73:7c:bf:b9:ef:2a:f8:dc:63:a9:23:
63:a0:a8:0c:c9:a1:53:43:29:f7:4b:a2:00:5f:58:
f6:32:7d:2f:fb:61:ff:3b:66:49:9f:99:17:8e:22:
8d:5d:82:02:1a:fb:ef:2b:37:de:0f:ac:5d:f8:98:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3B:95:78:82:3D:4A:3A:91:8E:90:61:19:77:28:23:71:86:41:AC
X509v3 Authority Key Identifier:
keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:4a:6e:9a:22:73:dd:26:e0:9f:97:e9:96:95:2f:98:3e:
0a:20:13:fa:44:18:03:30:fe:97:6a:8a:e4:8f:90:9b:3c:85:
cf:58:3c:71:8a:71:7b:86:a2:32:99:42:fc:24:9e:be:51:b8:
40:13:b3:9c:95:a4:65:8d:a9:7f:4a:f0:12:51:7f:85:76:56:
57:f0:5d:ff:fe:de:15:76:24:0d:c1:b8:a9:c7:31:d1:c0:5a:
34:f8:1a:49:90:4d:27:1d:42:81:67:c6:9b:17:c5:d8:ed:b4:
48:7d:2f:57:a9:d2:9c:f3:2e:44:d0:cc:b6:f6:cc:3a:d1:d7:
07:4b:51:73:3c:a9:e3:ed:61:b8:a2:cc:43:86:1a:35:b4:84:
21:b9:2c:f8:5b:56:94:36:a4:a1:80:cb:81:bd:97:08:7b:cb:
2d:f6:31:a6:95:81:50:79:74:74:bd:c3:7f:fa:d8:57:ee:0f:
5c:cd:96:d6:1d:c9:68:4c:30:2c:13:ce:9e:26:06:9b:79:d8:
ca:73:c1:53:8f:7c:97:da:be:d5:fd:ce:06:36:30:9d:86:2e:
e4:37:6a:12:ad:36:92:38:81:7b:b9:d6:19:d3:fe:eb:c5:8e:
fa:bb:40:79:db:e1:f9:eb:10:33:f5:d6:b7:da:18:7c:bd:6a:
2d:f7:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:15:26 2026 by rpki-client