This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: dbKkp9D9teBuKlz4sloTiztwCnoDrgP7BqiCSndediw=
Subject key identifier: 2E:96:96:62:47:A3:37:B0:FC:DF:5D:88:54:BA:74:B5:60:D1:8F:B2
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 037B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 0379
Signing time: Sun 21 Dec 2025 03:39:46 +0000
Manifest this update: Sun 21 Dec 2025 03:39:45 +0000
Manifest next update: Tue 23 Dec 2025 03:39:45 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: 8ALjrZDBHOZhIAR+xifU+56tn1yDRg1yu8bH8abVyeM=)
2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Dec 21 03:39:45 2025 GMT
Not After : Dec 23 03:39:45 2025 GMT
Subject: CN=69476c02-2695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:9c:3e:c2:07:65:9d:79:c3:0c:53:bf:28:
ab:e5:0e:51:b0:f4:69:80:12:1f:02:bb:b8:2e:44:
36:7d:d5:ba:9d:d5:b8:26:bb:42:42:13:f2:1c:26:
a4:65:96:08:4b:75:b2:e3:44:55:8b:f5:cf:f0:d0:
1e:07:2f:ee:52:53:aa:67:ec:ce:6c:a1:5e:a8:0f:
7a:1d:89:54:bc:10:15:64:31:06:52:c2:30:ec:42:
f6:3a:88:9f:5b:c9:ab:f5:be:c3:17:e4:8c:a2:42:
c4:e7:a5:b4:d0:0d:72:80:71:ef:19:39:30:0f:dc:
fd:36:56:89:44:d7:3d:b5:f9:ac:b1:f2:f9:a1:66:
b8:a7:c5:bf:e3:b0:c5:db:21:48:15:df:d1:05:7f:
c1:b1:60:f6:f4:f5:e4:a5:da:92:af:6c:c4:14:d3:
a7:c5:6b:1c:cc:9b:12:7e:26:90:ba:e5:12:2a:28:
6d:f6:d6:3f:36:30:71:c0:b9:0b:07:b7:ae:1d:07:
b8:cd:c8:59:24:1e:b3:90:b1:6b:b0:10:91:71:82:
40:04:67:fa:7a:5b:73:21:11:9d:ea:ea:df:f0:33:
76:32:ad:76:a8:25:4b:5f:af:4c:02:55:3c:20:1c:
3c:29:66:a3:43:25:bd:2e:ee:72:08:35:db:3b:c7:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:96:96:62:47:A3:37:B0:FC:DF:5D:88:54:BA:74:B5:60:D1:8F:B2
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:70:9d:ef:45:a8:db:b8:8e:ba:4a:ae:5b:78:0f:51:20:ff:
a2:17:90:1e:2d:fd:d9:96:99:18:49:9b:14:ca:9f:f3:25:5a:
a3:e8:51:71:6c:42:44:8f:0c:b2:21:6b:44:35:61:50:52:c4:
8f:03:c0:74:38:59:6f:01:9f:3e:4c:11:52:17:08:fe:74:a4:
8e:c9:d0:37:0a:50:4a:3e:43:77:fd:3d:9c:1e:cc:9a:eb:f3:
70:f0:6c:70:af:90:ce:ad:de:8b:79:e8:c4:d6:04:ef:6d:e3:
c2:63:9a:b0:2d:e3:b1:f4:4c:36:fd:0a:36:a1:6b:82:3b:b8:
9d:dc:9b:7b:9c:b1:da:fa:74:f2:4d:b2:61:8d:c8:ed:27:83:
61:33:2b:5c:21:0b:56:17:89:72:d9:7c:b7:6d:39:11:80:cb:
63:a5:e0:7b:9f:3f:44:4c:3f:fd:6d:4d:ba:d9:f4:fb:d3:87:
2d:a4:73:d9:a8:bf:6d:4d:12:bd:79:e3:55:8e:2e:84:4e:07:
27:f9:8c:7f:99:7a:85:07:04:0e:a9:e0:53:94:55:69:79:94:
4a:ff:9d:85:c9:9c:7c:2c:bc:1a:90:64:fb:f1:71:85:1c:ce:
d3:4e:85:7d:2c:38:14:02:f9:60:f3:53:f9:14:64:c0:20:ce:
cc:78:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:40:58 2025 by rpki-client