This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File: 9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier: 0+QjYVhQr9nu2A5NsfARJjbHIymzkDC7zM+GPk+tPiI=
Subject key identifier: A6:95:9E:44:8B:4A:5C:32:ED:D8:1D:70:CF:8C:EB:94:BC:2C:ED:0B
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer: /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial: 023C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number: 0237
Signing time: Fri 09 Jan 2026 04:23:20 +0000
Manifest this update: Fri 09 Jan 2026 04:23:19 +0000
Manifest next update: Sun 11 Jan 2026 04:23:19 +0000
Files and hashes: 1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: q3yVFbflth2Nn6aUJ5+Fz/0TjyJQyVNmBQtVW9rRFhc=)
2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 Jan 2026 04:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Validity
Not Before: Jan 9 04:23:19 2026 GMT
Not After : Jan 11 04:23:19 2026 GMT
Subject: CN=696082b7-eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:a8:6f:56:4c:8a:d3:b6:ce:16:f1:e6:d2:
b7:78:d4:2f:96:17:3a:06:77:1b:ad:3d:5d:6e:0d:
73:81:1c:ff:7b:94:31:9e:cb:ca:a2:35:ec:68:73:
89:a9:15:27:d4:74:af:35:79:bf:64:03:16:27:ba:
3d:98:8a:02:c6:4d:9a:52:3d:0f:1f:87:f9:0a:0a:
40:22:56:d3:77:50:7b:f8:f0:ef:25:1c:57:17:20:
d6:dd:d3:98:c8:7c:9f:f9:66:40:54:b8:c1:4c:0e:
71:c9:4c:04:75:1b:f9:c5:77:c3:92:c6:eb:48:32:
b4:3c:8c:df:dc:9e:31:e8:ed:55:18:0b:4c:96:ba:
3c:bd:69:74:1d:4e:4b:dd:8a:73:00:63:4d:81:2e:
94:1c:9f:8f:bc:2d:2c:84:85:1f:c3:34:1d:36:63:
b7:8c:c1:aa:d8:6a:70:a6:e1:05:0c:11:5d:9e:5c:
b0:c2:27:56:44:5d:19:72:91:f3:0d:a2:c5:41:63:
7e:0d:e1:04:ec:6d:49:43:23:1e:e8:a9:cb:f9:7e:
be:59:27:85:6f:46:ba:d8:ae:a9:fd:5a:80:91:83:
8e:7c:10:77:a3:68:c5:f1:54:1e:f4:f0:c7:30:0f:
1a:06:c7:fc:1d:4d:0c:a9:c2:99:30:a7:7d:d3:3c:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:9E:44:8B:4A:5C:32:ED:D8:1D:70:CF:8C:EB:94:BC:2C:ED:0B
X509v3 Authority Key Identifier:
keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:93:8d:4e:9c:2a:b3:4d:dc:ba:2b:93:64:bf:6e:1c:49:
6d:31:ea:04:90:69:a9:c5:ec:e0:58:b7:ca:89:fd:ec:ed:ab:
5f:7a:4a:4a:89:df:08:2a:50:19:0c:3b:5a:19:e3:5d:e8:17:
82:2e:a2:99:92:65:d7:2a:e9:c5:b8:d0:fb:60:b3:8f:d5:64:
2d:2b:9f:23:98:e9:40:6d:d1:f9:61:ea:45:b8:79:57:9d:ce:
74:95:47:9b:9e:23:ed:8d:e8:46:01:1b:89:ff:96:b4:72:6f:
51:35:89:23:5d:50:8f:0d:d1:55:e8:a8:d5:99:72:c3:e0:e3:
cc:5b:e3:b0:ae:55:b5:fe:af:f0:4b:2e:a1:b0:e1:61:72:df:
d9:ea:0c:9c:b6:2c:e6:10:74:3d:01:32:62:11:48:36:85:65:
58:19:4b:e3:23:3c:94:c1:55:d0:51:a3:58:8e:a3:fe:e8:08:
5a:4b:71:84:af:ff:44:56:d2:75:2c:e9:9d:c5:43:c3:75:25:
c6:86:63:b3:b1:35:98:8a:65:72:19:4f:7a:82:be:e6:c5:16:
cb:93:34:5b:ea:e0:1c:96:66:12:d2:38:78:cf:e9:a0:75:41:
26:ce:92:ad:58:b8:77:9e:a6:29:7a:22:0f:8c:63:01:ad:6c:
7c:f6:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:58:49 2026 by rpki-client