This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          XK8H6pj3yToBfq/cKDJ01quowuC2g/lQLy0ei6DeDi0=
Subject key identifier:   26:FE:E1:86:4A:44:7F:46:A9:DD:42:18:A5:E4:D7:88:16:8C:8B:33
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       47D24F5719E615FC2A07904124EC71D82A7A2E31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          08B5
Signing time:             Mon 12 Jan 2026 01:50:08 +0000
Manifest this update:     Mon 12 Jan 2026 01:45:08 +0000
Manifest next update:     Tue 13 Jan 2026 03:39:08 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: vqasTeHqQZ1n9JCnjG8fyS/BNO2d50uzV7KtZNc8wR8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 03:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d2:4f:57:19:e6:15:fc:2a:07:90:41:24:ec:71:d8:2a:7a:2e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan 12 01:45:08 2026 GMT
            Not After : Jan 13 03:39:08 2026 GMT
        Subject: CN=26FEE1864A447F46A9DD4218A5E4D788168C8B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:08:9c:b0:c0:fe:a1:0d:d3:c1:e6:9d:5f:
                    96:02:93:ab:39:b3:55:e9:24:76:15:3d:b6:79:ea:
                    14:6c:2d:2f:72:47:48:0d:b6:48:c5:54:70:be:ef:
                    df:8d:ad:3f:86:f4:94:0a:af:e2:a6:f6:25:55:08:
                    1c:03:69:43:63:a8:b5:ff:1e:64:5c:a4:3d:71:ef:
                    5d:0b:17:f4:e9:5e:60:0d:87:80:4e:0f:bc:9e:ce:
                    16:77:75:05:00:0f:5f:d6:04:33:ec:99:50:b6:0b:
                    d5:80:f1:95:3f:49:26:79:68:ac:ca:5a:2f:11:6e:
                    3b:6b:72:3a:f2:ca:e9:f7:c0:c4:02:7d:33:54:46:
                    b0:98:3f:2a:88:8e:be:43:81:ec:1b:ef:13:d0:d0:
                    de:bd:e6:df:eb:2b:5c:d2:44:4e:f2:dc:3a:76:dc:
                    0b:0e:df:7e:15:0d:4d:04:47:a6:9c:f1:5a:7c:3a:
                    b7:3e:92:fc:ff:47:0a:f8:a6:e9:3a:09:62:45:55:
                    96:15:11:5a:6b:f4:77:58:4d:30:35:b9:ef:c4:5d:
                    d5:f9:97:c7:f0:42:df:ed:a8:f7:67:cf:5d:ea:c3:
                    f5:fa:5d:91:56:49:13:0f:38:63:e4:53:51:56:b6:
                    80:f6:5b:99:b9:ad:76:de:b1:4d:94:96:21:5b:bf:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FE:E1:86:4A:44:7F:46:A9:DD:42:18:A5:E4:D7:88:16:8C:8B:33
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:6a:a2:97:a4:5b:23:4e:d1:ef:ba:e2:9e:49:43:2a:4d:
         7c:42:d5:7a:77:21:df:b1:b8:67:d0:a3:fa:2a:b3:9c:b5:5f:
         c0:e5:5d:b4:b5:3b:91:4a:50:e9:c4:0e:8e:73:e2:54:a4:05:
         5b:d8:7d:9d:6f:38:01:84:17:09:c9:0f:46:2c:e2:5c:07:2e:
         3e:27:3a:e1:4f:32:ab:60:64:1b:d2:64:23:ac:20:ec:23:8e:
         26:7e:d2:4e:f1:89:66:4c:b3:7d:2f:c4:88:72:fd:cd:a9:ae:
         52:6e:42:3d:62:dd:af:8f:b9:a3:33:3f:30:3f:1d:db:08:a8:
         43:d9:d6:2f:df:5a:42:cd:d0:a7:9c:69:82:d2:40:7d:e3:24:
         18:dc:2c:3a:c9:e7:02:57:72:7f:fd:f1:48:de:a4:6a:ed:13:
         48:9a:87:00:95:cd:34:18:ca:4f:c5:40:b6:1d:5c:bd:33:16:
         21:94:dd:09:af:2e:99:9e:7f:24:b6:89:39:c6:92:dc:57:a7:
         4c:6e:23:8a:b2:1b:df:b6:07:ef:56:d6:4e:cb:d3:35:50:fe:
         f9:9c:ae:13:53:4a:0d:0a:13:09:54:07:a4:a5:de:da:9f:3f:
         f5:a0:43:b4:c2:a4:17:7c:08:9e:95:85:51:a8:cb:75:8a:d7:
         85:72:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:22:16 2026 by rpki-client