This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
File: U0PDi98uSRgxOaWKxC8Rb6mWc80.mft (raw, json)
Hash identifier: a8g/UfP/KBMD+78U1LspIKfKZvaX79haIFCFTAKb4Vs=
Subject key identifier: 6F:C9:14:A3:58:70:AF:20:AF:0D:77:7B:9F:8A:80:9B:7F:F4:B7:57
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Certificate issuer: /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial: 0502
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
Manifest number: 04FE
Signing time: Fri 19 Dec 2025 02:55:34 +0000
Manifest this update: Fri 19 Dec 2025 02:55:33 +0000
Manifest next update: Sun 21 Dec 2025 02:55:33 +0000
Files and hashes: 1: U0PDi98uSRgxOaWKxC8Rb6mWc80.crl (hash: lA8Di2PuztVZScrk9pXlpwWFTewzO/WdR6gZt9jQRQw=)
2: 391A826E132311ED89F578F7F1222468.roa (hash: f4iDvOghIvvKoUP+uwLCDZEkbK2gOJxg1Mz+fV118HQ=)
3: 8EDD8A98132311EDA5DBA8F8F1222468.roa (hash: NC2uz7SGVEzPm4cOqmNgoejzxjyFF2dCIW3kwBubs0A=)
4: 442E54A0698611ED8D98369BF1222468.roa (hash: v9qpDczOM2omGAxHNgOZ2CM78LXieRY5BCkv9MbsQT8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EADB7AF, serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Validity
Not Before: Dec 19 02:55:33 2025 GMT
Not After : Dec 21 02:55:33 2025 GMT
Subject: CN=6944bea6-686f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:9e:6f:1e:d7:fe:1d:8b:0f:de:8d:41:62:
a2:54:85:25:e2:ea:82:41:db:48:07:f3:8a:f0:3d:
a4:89:78:0c:2e:07:38:87:4d:c8:f2:05:47:8c:ec:
f2:df:ed:39:88:38:35:41:dd:be:0b:43:4c:fc:6c:
c4:3f:47:4d:52:e8:d0:83:58:d9:dc:08:69:25:ab:
70:77:34:78:24:3c:d4:11:56:18:de:60:08:82:a9:
7d:3f:36:26:c5:a8:ab:e1:30:7b:c9:7a:39:e6:7f:
12:51:a4:c1:a1:78:f0:08:d9:d5:ec:39:3e:28:e1:
45:37:58:d4:fe:87:42:df:57:92:8b:e9:d8:7e:1f:
5f:88:82:0c:91:42:45:66:7b:71:bd:5f:3e:ff:cb:
a8:c2:97:ad:57:7a:df:8b:64:42:8a:cd:e8:ff:5b:
5a:7f:08:e0:2d:2e:d6:5c:d8:9f:95:c0:c9:96:63:
ad:d2:bf:85:bb:bd:17:9e:71:be:69:25:29:f3:94:
83:ce:78:7b:ae:a9:59:fd:50:ec:1b:73:ba:c4:6d:
80:73:d4:4d:84:48:ec:95:52:04:e4:78:f5:81:20:
ec:2a:0b:6e:fb:f8:43:3a:b3:20:64:e8:b1:30:4a:
89:6a:76:fe:9d:c7:c6:bb:ce:ed:11:db:a9:69:53:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C9:14:A3:58:70:AF:20:AF:0D:77:7B:9F:8A:80:9B:7F:F4:B7:57
X509v3 Authority Key Identifier:
keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a2:6c:88:ec:5e:4f:6b:16:8c:f6:f6:0e:58:8d:68:cb:a4:
4b:fb:47:c2:bc:45:28:fa:19:9b:2f:3d:28:44:32:70:f9:46:
f9:01:cb:4c:5a:34:8e:6e:45:b1:ff:28:b2:48:ff:1f:c6:99:
2f:0d:0e:dc:3e:1f:60:eb:d9:e5:c5:45:fa:1a:bc:23:84:fa:
42:3a:3b:46:fd:e8:f6:e3:4a:4b:86:4f:8f:e4:7f:a1:a7:7c:
42:c2:d3:b0:fe:9d:64:6c:41:d5:d3:6b:d4:da:d0:41:9d:0c:
c5:1e:34:39:a5:f3:c3:00:26:a4:b7:49:ee:39:c4:0c:26:4f:
35:d4:c8:59:0a:c0:8d:bf:e0:31:d8:1a:f6:aa:87:30:52:40:
a3:b0:de:1a:0c:65:76:63:73:01:49:46:08:b1:30:05:0e:51:
85:0e:10:a2:f1:fb:cb:92:b7:eb:a4:ec:c8:b5:27:a3:fb:97:
f6:77:b8:18:c4:18:aa:ad:38:1d:75:65:3c:fd:db:e1:ba:6d:
47:c9:2a:da:01:7c:4e:12:da:8d:f1:09:8a:a9:14:e1:bf:97:
5f:0f:97:00:81:87:74:b7:5d:80:75:f9:8e:40:ce:18:e8:05:
9f:c9:0a:b2:ed:78:c6:4a:81:98:32:4f:b0:96:40:8a:75:85:
bb:6d:0d:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUFEQjdBRjExMC8GA1UEBRMoNTM0M0MzOEJERjJFNDkxODMxMzlBNThBQzQyRjEx
NkZBOTk2NzNDRDAeFw0yNTEyMTkwMjU1MzNaFw0yNTEyMjEwMjU1MzNaMBgxFjAU
BgNVBAMTDTY5NDRiZWE2LTY4NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+ip5vHtf+HYsP3o1BYqJUhSXi6oJB20gH84rwPaSJeAwuBziHTcjyBUeM
7PLf7TmIODVB3b4LQ0z8bMQ/R01S6NCDWNncCGklq3B3NHgkPNQRVhjeYAiCqX0/
NibFqKvhMHvJejnmfxJRpMGhePAI2dXsOT4o4UU3WNT+h0LfV5KL6dh+H1+IggyR
QkVme3G9Xz7/y6jCl61Xet+LZEKKzej/W1p/COAtLtZc2J+VwMmWY63Sv4W7vRee
cb5pJSnzlIPOeHuuqVn9UOwbc7rEbYBz1E2ESOyVUgTkePWBIOwqC277+EM6syBk
6LEwSolqdv6dx8a7zu0R26lpUx69AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUb8kU
o1hwryCvDXd7n4qAm3/0t1cwHwYDVR0jBBgwFoAUU0PDi98uSRgxOaWKxC8Rb6mW
c80wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVBREI3LzNDOEVCMjkyMTMyMDExRUQ5Q0FFNDNFRUYxMjIyNDY4L1UwUERp
OTh1U1JneE9hV0t4QzhSYjZtV2M4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UwUERpOTh1U1JneE9hV0t4QzhSYjZtV2M4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEy
MjI0NjgvVTBQRGk5OHVTUmd4T2FXS3hDOFJiNm1XYzgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzomyI7F5PaxaM9vYOWI1oy6RL+0fC
vEUo+hmbLz0oRDJw+Ub5ActMWjSObkWx/yiySP8fxpkvDQ7cPh9g69nlxUX6Grwj
hPpCOjtG/ej240pLhk+P5H+hp3xCwtOw/p1kbEHV02vU2tBBnQzFHjQ5pfPDACak
t0nuOcQMJk811MhZCsCNv+Ax2Br2qocwUkCjsN4aDGV2Y3MBSUYIsTAFDlGFDhCi
8fvLkrfrpOzItSej+5f2d7gYxBiqrTgddWU8/dvhum1HySraAXxOEtqN8QmKqRTh
v5dfD5cAgYd0t12AdfmOQM4Y6AWfyQqy7XjGSoGYMk+wlkCKdYW7bQ1B
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:14:55 2025 by rpki-client