This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          0k6RG1MO76iwerAhFDjFAFtXq0HFTWfY9T01oAgg1Pw=
Subject key identifier:   62:BE:50:A3:54:83:9C:09:8A:0E:97:62:4E:C2:24:2C:49:96:A1:EC
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       643B3FFA95AF82707B60D548A71BD98D762FC120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          085B
Signing time:             Thu 01 Jan 2026 08:02:06 +0000
Manifest this update:     Thu 01 Jan 2026 07:57:06 +0000
Manifest next update:     Fri 02 Jan 2026 09:27:06 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: l1gVCRFNZOqW/DtqTykwZMjzsSjE/FhgnFigKJ6NF4Q=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 09:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:3f:fa:95:af:82:70:7b:60:d5:48:a7:1b:d9:8d:76:2f:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan  1 07:57:06 2026 GMT
            Not After : Jan  2 09:27:06 2026 GMT
        Subject: CN=62BE50A354839C098A0E97624EC2242C4996A1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:96:f2:25:03:1d:3d:db:85:59:2d:6a:b9:
                    a1:5f:44:72:81:cb:9b:84:60:3e:e3:cc:00:6f:28:
                    6a:05:91:4d:66:34:f1:e5:e9:b6:9a:9c:46:c6:3d:
                    6f:c8:a8:a5:4d:48:05:0b:d6:0c:8e:47:1c:51:58:
                    52:5f:1b:23:fe:8e:d5:f0:ec:a1:aa:74:4e:4f:5f:
                    3a:fe:94:52:8a:59:7e:f4:8e:94:0b:4e:34:eb:a0:
                    e2:e2:69:01:f1:fd:e4:d7:b8:1d:e7:ca:08:73:90:
                    fb:3c:b3:bd:9a:8e:05:a2:09:c9:d2:f8:e9:01:56:
                    4e:de:71:ee:0f:14:7d:32:f1:98:d5:3c:84:e5:f7:
                    7f:50:a7:21:0f:fd:a7:ab:6e:12:8e:0f:c4:5a:53:
                    31:8d:b9:bc:25:39:a4:4a:5f:fe:8d:9b:87:3b:2c:
                    a8:10:db:07:1c:f3:59:db:b5:46:5a:fc:cc:e7:76:
                    29:51:fb:1b:29:61:1e:05:72:af:fb:5a:aa:cc:24:
                    44:50:b2:83:4d:43:67:d7:d8:37:79:af:57:f2:3e:
                    09:e5:c6:4c:3a:f2:f4:58:01:66:54:94:c1:89:24:
                    15:85:2c:45:cb:a1:7a:ca:06:4f:23:8a:d5:63:5f:
                    7a:d5:c0:3f:d0:06:9e:7b:29:39:31:f9:7e:68:3b:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BE:50:A3:54:83:9C:09:8A:0E:97:62:4E:C2:24:2C:49:96:A1:EC
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:4e:bd:73:77:4d:51:4f:c0:c4:88:e2:1b:02:fe:28:74:
         27:02:9e:b5:4d:12:83:81:17:67:a3:20:49:93:94:cc:02:71:
         df:cf:4e:9b:ff:5e:09:74:02:59:5c:63:4c:e8:51:0d:32:48:
         13:31:f2:9d:b4:d9:f0:d0:75:fb:fe:1a:a7:14:d0:85:bd:df:
         f2:54:fd:d7:ae:96:b5:d9:25:b9:ce:e9:70:02:03:f7:de:7c:
         32:70:11:30:12:d7:fa:7f:d5:59:78:eb:cb:e3:fc:44:f0:82:
         6e:61:49:3a:05:15:ec:7c:30:e9:32:c7:90:9b:92:c7:ec:b5:
         a9:74:cc:2f:45:15:b5:5f:91:91:2d:26:b5:dd:05:1f:1f:75:
         88:cf:ff:ca:e5:3a:75:df:11:b0:62:00:3f:8d:b5:c4:23:16:
         98:5d:58:c7:45:a0:a3:ad:a2:12:5b:dc:a4:6b:0e:6f:ef:dd:
         5b:2e:9d:2f:87:ec:40:66:50:d8:85:df:72:ae:87:6d:a7:46:
         98:8d:8c:a0:68:96:c9:1f:94:a9:08:2a:58:7f:54:5e:b0:3e:
         7b:a3:56:f2:d5:59:b4:26:8f:49:1b:4b:4e:24:67:41:bc:0e:
         16:84:45:5b:d5:fb:a0:2d:b1:3a:97:b9:8a:13:87:f0:e4:61:
         00:1d:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 11:02:18 2026 by rpki-client