This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          /yxmJhayxHKmRpSsmvvIFIBwAXB8iZ0zbuDwRRgvz4w=
Subject key identifier:   13:21:B1:56:99:C4:00:1F:D3:CD:DC:FB:A6:E7:B2:62:EF:77:D9:11
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       08E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          08E3
Signing time:             Sat 27 Dec 2025 01:41:06 +0000
Manifest this update:     Sat 27 Dec 2025 01:41:05 +0000
Manifest next update:     Mon 29 Dec 2025 01:41:05 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: rJOHlg1VN0dT98wyYl1HWj/P7HbK6UIYWsPPawVNvew=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Dec 27 01:41:05 2025 GMT
            Not After : Dec 29 01:41:05 2025 GMT
        Subject: CN=694f3932-a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:58:5f:37:6e:cf:1f:ae:59:82:f6:24:29:
                    4d:d2:7b:a9:7b:c4:88:a3:90:14:f6:c8:b8:6e:30:
                    f5:ae:bf:6b:f3:23:cb:39:e5:7f:c5:dc:d2:04:5e:
                    a8:ae:8c:81:9c:89:3a:1a:28:db:60:50:44:90:fe:
                    25:2b:96:7a:de:69:32:d6:3d:aa:72:0f:62:95:f2:
                    83:51:f2:b2:a7:cc:6a:a8:76:96:5b:12:ff:e7:fd:
                    81:84:7c:b8:aa:12:ff:4d:93:12:23:0e:df:4f:0f:
                    a1:4d:f0:30:6a:bb:5d:b2:f9:b8:22:38:16:c3:f1:
                    ab:98:df:66:38:0e:6d:10:9d:e7:24:ba:fb:df:09:
                    12:09:59:38:e7:5b:3e:e0:43:6f:ad:a2:5e:5d:63:
                    00:f0:c2:fa:53:ce:51:68:d1:7b:b2:46:4f:94:2d:
                    e6:b5:9f:fc:b2:76:ce:65:99:af:02:9d:fc:8f:88:
                    61:6d:3e:01:7e:91:46:1b:da:a5:90:19:da:a8:df:
                    33:11:42:c4:ea:1e:43:b7:ce:ac:ab:a1:f6:9d:fc:
                    ce:aa:17:1b:5c:5a:70:8a:d5:20:4b:ad:92:10:f4:
                    c9:51:77:38:b9:aa:ed:ee:cb:78:b7:f5:81:a9:54:
                    47:27:ae:91:ad:b3:2c:0c:b8:3d:48:4d:03:9c:99:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:B1:56:99:C4:00:1F:D3:CD:DC:FB:A6:E7:B2:62:EF:77:D9:11
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:2e:1b:1b:1f:8c:cc:5c:9e:57:6d:d5:dc:a4:c0:a8:7a:fe:
         8e:da:9f:02:0d:36:17:c0:c7:3b:43:76:d4:4d:b0:d4:87:4a:
         b5:e2:93:3b:db:43:e6:fc:64:e7:34:5b:da:84:cd:ac:a7:47:
         18:4e:52:1c:bd:be:ec:c2:87:19:dd:7c:b4:84:6c:d2:89:11:
         d6:b0:a6:df:38:60:37:58:fa:bb:3d:f4:88:2d:bd:36:ab:b8:
         ab:72:3d:a2:c9:7b:03:2e:cb:61:16:0f:d7:8f:5d:16:2b:41:
         59:84:c7:b3:9e:ee:ab:1d:9f:e7:f0:62:b0:a7:01:d9:f4:5e:
         76:87:07:94:57:86:3f:69:b5:5a:1f:84:0f:49:57:9a:c5:ab:
         42:5b:1e:ab:ad:e1:2e:0e:e9:3c:18:fc:c0:aa:76:32:5a:eb:
         70:90:7c:23:aa:75:92:f0:5d:35:76:41:e8:71:5e:17:d7:1a:
         ec:8c:d5:b0:36:78:f5:99:95:4d:6a:d3:06:b8:b3:29:e9:2d:
         2d:3a:ec:61:56:b2:c4:da:36:93:a3:c6:ce:33:57:03:e0:51:
         64:e9:c5:f4:ac:82:ef:52:08:88:d8:73:30:d6:b3:6d:52:52:
         f7:2f:eb:51:b7:d6:cb:60:74:af:11:80:7c:32:af:22:d9:1a:
         a0:3d:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:50:07 2025 by rpki-client