This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          6UDvTuJq340DTnaGuKz4Z6A5O2cRxhW6H6sU5WGlEcw=
Subject key identifier:   CD:48:24:C8:62:A5:CF:14:37:72:08:3D:33:08:86:95:40:6B:7D:CF
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       33770D91B22765E37019F54ED1E98A5600A18094
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0862
Signing time:             Fri 02 Jan 2026 11:58:17 +0000
Manifest this update:     Fri 02 Jan 2026 11:53:17 +0000
Manifest next update:     Sat 03 Jan 2026 12:23:17 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: 9g19heEY/rXBJ9LAhA32ruyCqbjFYJxkbFuaKqqOAdk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 12:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:77:0d:91:b2:27:65:e3:70:19:f5:4e:d1:e9:8a:56:00:a1:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan  2 11:53:17 2026 GMT
            Not After : Jan  3 12:23:17 2026 GMT
        Subject: CN=CD4824C862A5CF143772083D33088695406B7DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:94:c5:6a:27:40:b7:16:1f:51:bb:31:a8:
                    bd:9f:bd:7f:3b:64:d0:c9:04:80:38:01:c8:5a:03:
                    e9:52:f5:59:90:82:41:24:20:32:11:01:25:74:c2:
                    f1:a8:0f:c1:07:e4:c1:1f:91:aa:17:4f:5d:8c:c2:
                    25:6b:f6:fb:48:5a:1f:10:61:9e:4e:f3:f9:97:f5:
                    f9:79:7f:f8:62:13:62:c9:6f:34:82:29:9b:cb:61:
                    9e:cb:ca:93:9a:c6:3f:a7:ad:86:0c:e1:35:e3:76:
                    b1:89:d7:29:6c:14:42:0c:bc:da:2e:df:7d:1c:3e:
                    5f:11:d1:ea:ab:2e:04:af:b0:26:b5:56:ef:00:f3:
                    bb:9e:32:55:f2:5c:97:92:c1:82:80:ea:30:28:57:
                    f0:b5:03:c1:00:f6:fc:25:ed:46:40:cb:8d:36:14:
                    ec:1b:01:59:25:c4:70:39:f5:78:11:d3:d1:14:a0:
                    18:e5:ee:7b:08:b0:9c:66:ad:25:ea:91:8d:02:88:
                    60:84:2d:db:3b:fa:fc:84:17:1d:58:f5:a1:d2:95:
                    3b:41:93:61:42:03:0f:3a:41:bc:4d:07:c7:98:da:
                    a7:dd:5f:d0:3d:54:8a:c3:ff:f0:47:98:35:fa:50:
                    8f:90:31:ef:df:7d:70:81:8f:d7:db:f4:14:ca:5b:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:48:24:C8:62:A5:CF:14:37:72:08:3D:33:08:86:95:40:6B:7D:CF
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b8:e3:c5:04:ae:4c:4f:5a:a7:23:90:4f:6a:5a:bb:ee:f9:
         df:f3:e2:fa:b9:59:0c:97:99:30:6b:55:1e:cc:ce:6f:af:e8:
         40:1f:9b:ce:6d:7b:26:95:2a:31:dc:2d:68:6f:b3:89:93:46:
         54:1d:37:72:72:d8:89:79:30:00:cb:d0:0c:e1:65:52:93:61:
         b3:e0:8a:7d:60:e0:73:6d:98:6d:19:5a:7c:46:7d:d2:03:36:
         78:0a:ca:5b:18:4b:88:a9:5d:66:4c:8b:2c:1f:49:6e:3d:fa:
         b3:20:05:7c:fa:4f:09:30:97:ac:93:00:e8:7f:45:85:02:d1:
         7c:f8:d3:73:e1:eb:7f:16:05:bc:66:ca:5d:09:e7:de:91:74:
         47:5b:83:94:1e:b6:d2:1e:e8:df:02:3b:a9:71:dc:0f:d8:07:
         bc:fc:54:11:9a:12:c3:b9:37:2b:0f:62:da:69:bd:7e:ed:1d:
         2d:c9:cc:b6:25:cb:c3:ed:57:47:7f:e2:4f:a3:91:70:37:dc:
         93:9c:d2:ae:05:d3:da:a3:81:0e:84:68:42:1b:e2:d8:eb:5e:
         9f:1b:29:b7:09:bf:cf:3c:54:f6:48:e3:2c:b6:9b:40:3f:32:
         a1:84:9b:3b:43:83:3c:bb:5c:e8:5e:22:56:40:dd:a4:cb:87:
         87:c9:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 16:58:55 2026 by rpki-client