This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File: QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier: omiOQw3ODHnv+9YSRganwpPrc6DylovhSKQUxnhHfcs=
Subject key identifier: 1D:B5:42:B9:91:5F:42:4F:68:33:D3:61:7E:3A:8A:C1:3F:E4:CD:B4
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer: /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial: 22
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number: 22
Signing time: Fri 19 Dec 2025 05:21:23 +0000
Manifest this update: Fri 19 Dec 2025 05:21:22 +0000
Manifest next update: Sun 21 Dec 2025 05:21:22 +0000
Files and hashes: 1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: Xho+MBG2VNYIMxE/wu7s3GpU+U/lm7ISa0cz/uDrXoM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 05:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
Validity
Not Before: Dec 19 05:21:22 2025 GMT
Not After : Dec 21 05:21:22 2025 GMT
Subject: CN=6944e0d2-c780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:93:f2:58:b6:ec:09:d9:2e:3e:61:50:1c:
fc:b7:06:2d:3d:cd:96:4b:09:04:8a:b0:8a:84:f8:
04:5c:ee:66:36:2a:de:ab:0b:21:23:88:af:79:25:
59:fc:2e:68:03:38:8e:25:5e:f2:dd:d9:33:8c:c2:
26:87:00:cc:be:df:66:8e:67:68:1e:1b:d9:44:85:
96:6f:28:7c:da:9a:55:c0:a2:a8:23:86:3e:bf:9b:
94:73:77:de:2d:c6:da:03:c0:71:c5:97:cf:73:6e:
61:e3:b6:3f:65:ba:09:0e:50:12:89:e0:7b:84:75:
43:8e:4d:7f:18:69:0a:e1:e4:ab:42:9f:5b:68:67:
bd:c3:c1:fd:46:1f:1c:92:93:85:7a:35:6e:33:c1:
8a:1b:86:74:41:dc:c5:da:68:ff:f6:44:3c:5b:43:
47:36:64:87:b2:4d:d6:ac:dd:06:0f:b9:31:42:a0:
72:62:52:6a:94:37:bb:ad:49:b6:fd:64:fb:5b:9f:
bb:ea:95:7c:b1:1f:13:c9:63:97:54:44:03:1b:60:
fd:97:f9:4b:d2:b3:07:1d:5e:54:95:e6:d6:d4:20:
9e:5e:13:cc:1a:94:39:a9:0a:84:4b:0f:48:8f:ff:
e2:70:dc:05:be:03:7f:64:0e:ed:ae:45:6b:57:df:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:42:B9:91:5F:42:4F:68:33:D3:61:7E:3A:8A:C1:3F:E4:CD:B4
X509v3 Authority Key Identifier:
keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:e8:6f:30:44:fc:10:67:67:fa:d1:a8:4c:2b:d6:25:e2:
d6:53:65:f0:f8:59:b9:97:84:2c:5a:cb:d4:1e:fb:8e:87:51:
63:64:ee:48:1f:0e:3b:3c:f7:88:c4:26:e4:89:0c:aa:f9:3f:
0e:9d:ee:e1:d3:9c:a1:30:85:5d:e0:e8:ac:52:41:03:c8:c0:
c5:5c:17:51:c0:12:b2:40:7c:d8:99:7a:83:55:eb:f2:f5:80:
af:dd:0b:25:52:ea:3d:94:58:ae:47:ca:25:4c:f9:d2:20:fb:
4f:c0:a9:3f:c6:6d:25:03:24:68:16:9d:31:ac:a9:6c:79:c6:
f9:6c:5b:70:67:67:8d:45:67:01:44:40:9d:20:1b:a1:4f:2b:
85:39:2f:fa:a5:e8:87:b1:f9:a3:6e:cf:87:6e:6c:df:61:da:
45:55:75:81:16:bd:99:f6:83:0b:8f:ce:75:c5:e4:b2:03:d6:
e8:27:e5:cb:6a:fd:21:9f:18:38:0c:5a:57:bd:4c:34:b0:22:
52:dd:4e:9a:0a:3a:44:6f:b5:c6:ca:30:08:4d:8d:2b:3f:0d:
bd:2d:09:1b:1f:75:ef:fc:83:9b:a0:a7:b8:98:34:00:02:15:
2e:ef:91:86:3d:f1:cf:fd:b9:2b:29:35:6e:6e:4f:ca:41:e5:
31:17:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:46:43 2025 by rpki-client