This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File: xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier: k5rFmRP82Rx2RVgS290L5Wk54VxgCGDMBY+/G5/TLw0=
Subject key identifier: 38:62:15:74:EC:BE:E5:1A:02:A2:DF:CD:26:AE:4D:78:74:10:79:74
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 0175
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number: 016C
Signing time: Mon 22 Dec 2025 04:50:10 +0000
Manifest this update: Mon 22 Dec 2025 04:50:09 +0000
Manifest next update: Wed 24 Dec 2025 04:50:09 +0000
Files and hashes: 1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: YDuNH32aqNccL9w3jV1Szyjunh5FLoI11t41xs9M6fI=)
2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 24 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Validity
Not Before: Dec 22 04:50:09 2025 GMT
Not After : Dec 24 04:50:09 2025 GMT
Subject: CN=6948ce02-38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:22:d9:09:b7:d2:ac:73:79:01:82:32:52:
39:0c:f1:12:cf:f5:c2:ef:d2:25:63:52:80:77:80:
d9:fd:5d:2b:a0:e4:0e:16:93:57:02:d2:cb:90:ff:
5a:a2:48:de:47:80:4f:00:08:70:69:46:a5:05:e0:
ce:19:31:8b:fd:d4:98:59:37:9e:4b:67:95:7b:02:
b9:e1:9a:c8:20:ed:48:54:21:5f:b2:8d:3b:7c:15:
6c:59:90:14:98:6a:a2:34:12:9c:b7:6a:60:77:85:
13:94:c9:b1:4a:4d:68:80:6a:db:b9:75:41:c6:df:
34:d4:a8:47:fc:93:ce:b8:b4:26:bf:00:2f:a1:61:
53:9e:2d:bb:c7:aa:53:8f:99:9a:44:d7:9d:97:64:
a9:9a:7e:fb:3a:5b:26:3c:35:f1:c9:69:46:ef:86:
0d:8d:0b:e8:ea:54:5e:8a:39:59:cd:bf:ca:5a:91:
04:bd:3d:4e:bb:58:ee:72:e6:f9:7d:84:4f:37:2a:
79:18:04:9f:04:22:4e:25:d6:8e:9a:32:78:7d:44:
8e:77:a6:a6:f7:9b:5b:12:ef:c8:9b:f7:d6:0a:bc:
96:4f:a0:31:f1:5a:0c:04:a6:d8:c1:94:c4:3c:9e:
b4:9f:bc:7e:0a:bd:cc:5b:ad:a3:c8:72:04:52:37:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:15:74:EC:BE:E5:1A:02:A2:DF:CD:26:AE:4D:78:74:10:79:74
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:f1:61:28:6f:d0:bc:3d:f5:8b:07:5a:bb:47:e3:5e:85:
56:ef:0a:57:0f:08:c8:05:cf:c0:fc:ce:44:53:fd:8c:c6:9e:
a7:0b:dd:73:72:ff:5a:b7:8b:63:9d:8e:46:f1:30:2d:45:ac:
6a:9a:de:b6:c6:75:25:f1:0e:9f:7f:d0:e9:4e:75:d0:14:99:
4e:73:90:a3:54:ee:6f:d0:47:9b:8d:6d:74:b1:21:9f:db:de:
f7:03:ef:6b:db:1c:9f:26:e1:64:72:35:17:b5:14:4f:1c:10:
7d:94:42:ec:cc:48:84:fc:1f:22:87:2f:e0:c5:2d:62:3d:d4:
89:3a:22:2f:16:29:09:77:98:ac:83:6b:8e:69:02:55:63:fb:
da:be:44:2f:22:4e:d1:97:7d:43:d9:91:30:6e:c0:4b:91:ec:
42:de:63:be:8b:4b:0b:17:da:38:1d:09:4e:06:50:ec:1e:9b:
08:76:a0:e1:4a:e3:6a:0f:11:72:dc:cb:55:ad:bb:4a:14:31:
d1:42:94:3e:ca:6c:f2:a7:66:01:7b:79:0c:7c:53:47:d1:e0:
05:00:8c:0d:72:ab:b5:43:d9:2d:50:3a:d4:9d:9b:6c:db:28:
62:f1:ad:63:50:31:fd:62:4b:0a:dd:96:ec:40:a0:91:86:77:
58:4c:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:31:02 2025 by rpki-client