This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier: 6R2IHlFvjGNCZlXpvTLS+4SAaTYACfZ+Y3/nLfFBkEc=
Subject key identifier: 20:31:C9:A4:CC:9A:49:9A:C6:CA:01:8F:82:98:49:D0:F3:BF:25:14
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 0444
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number: 043F
Signing time: Sat 20 Dec 2025 03:15:47 +0000
Manifest this update: Sat 20 Dec 2025 03:15:46 +0000
Manifest next update: Mon 22 Dec 2025 03:15:46 +0000
Files and hashes: 1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: mNdyHEiMjTtwhQlAI9lwSoFtmyJD54zDNY/RdgfjV7E=)
2: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (hash: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=)
3: AB725E028DE011EE9520701E4AD9E6FC.roa (hash: 7fwPCumSJFs34OrhghTo8l+HdWqKbq+1hmCpmK0WZcE=)
4: 22934508A60D11EDB81041C4F1222468.roa (hash: iIIKmZv0hW8wlHoV6xZsUe6KFdRjuYNOIqMfAgHd9Rk=)
5: 0845198C8DDF11EE841826194AD9E6FC.roa (hash: RjAkig7q9LVsQiCR96gKwlxjshut4m5EhwHTV6qeAo0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Dec 2025 00:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Dec 20 03:15:46 2025 GMT
Not After : Dec 22 03:15:46 2025 GMT
Subject: CN=694614e3-94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:ca:2a:eb:70:36:d3:d8:ca:1f:46:8b:d2:
c9:0f:d2:05:f2:5c:a0:8c:2b:35:84:be:7f:67:50:
8f:50:eb:20:59:01:f8:4c:39:4b:cf:8f:fa:0b:04:
b8:7e:50:77:70:10:01:e4:4f:9f:be:7e:c6:51:4a:
15:e3:c4:75:5c:4d:02:ed:b2:9b:a0:7e:70:8e:5c:
55:d3:4a:00:c0:d5:6f:cc:4c:c8:98:de:a7:76:22:
32:0c:6f:44:71:7a:ec:bd:31:f8:e7:7a:b9:da:6a:
34:5f:96:72:a8:35:1f:5c:57:9c:23:9d:2f:76:6b:
e5:38:c6:e3:88:b4:11:e4:2b:03:0c:c2:9d:0e:82:
93:0f:7e:3b:ef:66:68:35:60:2d:d3:98:39:ae:4a:
e3:36:91:90:76:77:5a:93:41:78:2a:9d:db:80:00:
94:ec:d7:a0:34:c3:ea:37:78:cd:c9:b0:42:99:e7:
17:99:f6:f6:6b:f7:1e:4d:ae:ee:c5:ec:21:f9:93:
92:ae:05:1d:5c:d6:d0:72:37:f5:9c:1e:28:45:01:
69:88:13:2f:7a:b3:7c:51:b2:d4:b7:fa:65:c4:5d:
5f:bb:4c:ae:20:a3:9c:bf:01:06:d7:96:f5:b9:4c:
1d:a4:b2:d7:e4:39:5e:91:a6:1a:8e:02:03:03:4a:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:C9:A4:CC:9A:49:9A:C6:CA:01:8F:82:98:49:D0:F3:BF:25:14
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:46:03:f3:5f:96:ac:a9:9d:ac:4a:52:96:06:3b:93:65:8d:
93:ad:77:c1:79:e8:e6:ae:8c:2a:40:fb:0d:d4:66:dc:f6:20:
da:c4:cb:bc:9a:53:aa:1b:1c:f8:e9:18:f1:4b:1c:29:6c:69:
4a:5e:35:e4:fe:ea:b4:83:4c:1d:fb:5f:78:47:e4:7f:42:da:
ee:f6:2d:bb:50:ab:db:ef:85:29:3e:dd:a5:72:22:47:e3:7b:
fb:75:fa:be:b6:5e:d5:a2:a8:77:2f:40:10:22:20:4c:c8:80:
85:5b:2f:7c:76:a8:1e:b5:42:85:ac:0f:dd:27:fa:22:d2:ff:
d9:e2:f2:c4:45:db:64:7b:e9:10:53:85:12:fb:08:73:37:fa:
46:7b:d9:c1:b7:4c:d7:c3:e2:00:26:d2:c9:1f:75:87:08:84:
25:5a:cb:93:7c:8c:10:47:88:1c:d7:a7:fc:28:61:56:d3:a7:
0b:ad:a1:5d:1b:06:af:00:d5:dd:f7:d9:ac:e1:99:72:99:46:
fc:1d:af:20:3d:02:53:65:e4:c6:00:6b:be:59:89:df:fd:e0:
9a:2e:58:f3:94:95:29:48:a7:0b:5d:25:25:f6:34:4d:48:57:
2c:ae:88:d4:9a:e1:d4:f4:4c:b2:e2:a5:df:07:18:aa:ca:4e:
23:8f:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:17:39 2025 by rpki-client