This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          S2hWk43htVoTUgQ0Wl0eNsBrSbweuywL7HSTf6PWcx0=
Subject key identifier:   58:8D:C8:E4:51:5B:7C:F9:C2:2D:79:53:2F:A6:00:B9:92:4B:4C:A5
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       7C176D39A1FDC1E007C7BD5552902F7FB3799274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0655
Signing time:             Fri 21 Nov 2025 22:13:26 +0000
Manifest this update:     Fri 21 Nov 2025 22:08:26 +0000
Manifest next update:     Sat 22 Nov 2025 23:24:26 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: +dtCAR0yCvE5bs3qHVOT0oulBpODsWOgJzw64uzNlvw=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Nov 2025 23:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:6d:39:a1:fd:c1:e0:07:c7:bd:55:52:90:2f:7f:b3:79:92:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 21 22:08:26 2025 GMT
            Not After : Nov 22 23:24:26 2025 GMT
        Subject: CN=588DC8E4515B7CF9C22D79532FA600B9924B4CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:19:e6:72:5c:32:e7:6c:40:f0:6e:fc:8b:
                    92:87:28:72:97:77:50:9e:02:a3:f5:03:df:02:ea:
                    04:07:7e:c4:45:9d:72:c7:ef:8b:67:e2:72:55:10:
                    1c:13:39:10:05:a7:5f:27:86:c3:2d:e7:13:a5:42:
                    0a:a4:79:1d:c4:8d:8c:05:13:a3:0a:8b:cb:90:ce:
                    00:b3:5f:97:71:57:c8:88:2e:d7:63:5a:9e:ff:88:
                    e7:1f:23:74:de:05:e3:97:4f:45:67:e4:22:79:94:
                    65:c7:df:23:59:1d:78:d6:fd:bb:5f:8d:b3:6f:ba:
                    07:43:d2:cd:1c:8d:18:e4:9f:c8:0f:72:40:09:1c:
                    fa:3a:d6:d3:e5:6c:91:d7:f0:a1:4d:f6:d9:1c:a3:
                    84:ec:1a:45:ff:7c:51:0f:48:7f:73:b5:0f:14:0b:
                    cd:5f:1f:80:71:0c:02:33:e9:6a:b6:da:8e:45:ea:
                    14:de:40:af:68:32:dd:e4:e4:d7:86:cd:9b:15:77:
                    72:85:0f:55:12:72:22:de:70:2a:a4:18:1a:d6:1b:
                    ee:db:bf:fe:1c:38:a2:75:a8:91:16:50:87:9e:2a:
                    df:19:ed:7f:e0:f6:84:02:83:c0:d6:53:fb:13:fb:
                    64:48:c7:8c:f0:f8:a6:03:c3:36:5a:89:26:8e:dc:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:C8:E4:51:5B:7C:F9:C2:2D:79:53:2F:A6:00:B9:92:4B:4C:A5
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:48:7b:b9:e4:45:a6:26:fb:96:d4:fd:7f:55:13:14:af:c8:
         c7:2a:17:fe:a3:1e:98:16:6a:f9:4e:36:aa:e0:b4:f4:54:73:
         5a:25:d3:07:8c:51:ca:11:96:38:54:b6:93:61:d7:5c:16:46:
         dc:e1:87:04:b9:af:d8:8e:f0:fb:e7:37:13:9a:9e:a3:87:03:
         2a:12:8a:b3:f5:22:d9:76:76:05:40:d2:d7:e5:78:3a:4d:54:
         71:0c:b5:d6:3a:6d:08:98:fb:2e:bb:7a:19:31:f2:b8:dc:83:
         98:96:18:74:87:01:d1:69:d3:c9:e3:08:61:d8:b4:a7:b3:2f:
         e2:fb:1c:57:e5:4a:c6:86:6d:98:8b:8e:89:13:9f:7b:20:fd:
         eb:ae:f4:c8:1b:cd:6c:0c:07:a3:95:fc:e7:f5:5f:f9:0a:f4:
         05:be:f4:e5:bc:14:6e:b2:4c:86:79:e8:bb:7e:0f:0f:2a:b8:
         2d:df:e0:6d:a0:75:05:14:d8:01:c1:bd:a3:cf:0e:cf:88:84:
         54:f2:51:5e:97:70:6a:fd:d4:b6:81:07:df:ae:cf:67:31:1a:
         81:e2:2e:7c:f3:f6:0f:cc:07:15:d9:0a:43:c8:64:08:58:a3:
         ee:99:86:41:00:1a:e1:55:52:fb:0a:1c:43:26:b7:26:9e:fa:
         e1:10:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 04:34:37 2025 by rpki-client