This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          k3soXG66Qopa1MKiWpJFgmYVmGu5+ZD/4wbnPrA1VIM=
Subject key identifier:   5A:D8:7C:46:3E:0F:4B:BC:B1:AC:D6:D4:09:CF:C1:12:81:F1:38:47
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       492D6BE960D13D9246FD5E89F91FDA41E8C953C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          068F
Signing time:             Sat 29 Nov 2025 10:35:40 +0000
Manifest this update:     Sat 29 Nov 2025 10:30:40 +0000
Manifest next update:     Sun 30 Nov 2025 10:46:40 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: A/1CCLuVWc/1Fz7DPjWqXQ7j4hgMiFnpu3nqgOV3afI=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Nov 2025 10:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2d:6b:e9:60:d1:3d:92:46:fd:5e:89:f9:1f:da:41:e8:c9:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 29 10:30:40 2025 GMT
            Not After : Nov 30 10:46:40 2025 GMT
        Subject: CN=5AD87C463E0F4BBCB1ACD6D409CFC11281F13847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:47:8a:7b:70:67:15:24:2f:b5:3a:3f:14:
                    92:f6:db:5c:4b:bc:8f:50:5c:4e:82:36:28:22:c3:
                    ca:47:23:31:39:a2:19:06:ab:cb:d7:6e:b6:81:06:
                    78:c9:2a:db:d7:76:9c:6d:7d:1e:3c:ff:b9:79:6d:
                    34:39:3d:ff:5f:95:5b:ce:cd:31:c7:3e:fa:ba:dd:
                    99:82:ba:f0:c8:27:af:0a:07:43:db:13:59:27:c7:
                    fc:c3:72:54:4b:70:78:c1:1d:52:71:32:79:a0:5d:
                    50:df:04:d7:a5:9d:27:95:02:80:1d:8e:b8:a2:85:
                    96:25:ec:89:33:ce:90:5a:25:4b:1f:96:d2:09:c0:
                    5c:eb:c9:ff:a5:ac:92:75:a9:a1:9b:83:04:68:d8:
                    92:60:51:7a:af:c8:78:fb:b4:29:98:21:ea:ce:b9:
                    21:b5:b2:be:ce:99:15:08:90:55:a0:e4:aa:45:9d:
                    d0:15:f5:db:9f:20:d8:c6:fb:1b:31:cc:46:23:fd:
                    1b:e0:f8:47:72:3e:ac:1d:45:49:a2:2d:1d:e9:fe:
                    a1:b5:54:00:fd:ff:6f:da:c0:9e:92:b1:90:b2:fc:
                    57:82:05:a7:5c:4a:1b:7f:a9:00:cc:f9:2d:f3:d6:
                    d0:e0:5f:f5:ed:d0:16:f4:02:61:6d:0d:00:f6:20:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D8:7C:46:3E:0F:4B:BC:B1:AC:D6:D4:09:CF:C1:12:81:F1:38:47
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:c8:4f:20:54:6d:95:a8:f4:ec:29:87:a2:e5:1c:4b:45:
         a6:b6:2c:8f:d3:64:0f:a3:43:8a:5d:8e:9c:4d:2f:a2:d8:8e:
         07:b5:60:b8:11:47:df:ab:32:78:26:ab:3f:a5:3b:58:e7:fd:
         1d:1d:27:fb:d3:e3:55:8c:f2:ac:f8:93:38:79:7e:c1:7d:d4:
         10:fe:3c:86:da:8c:5e:91:b5:2e:f1:1f:7f:14:37:4e:a4:ad:
         9a:3b:0e:46:32:bf:07:0e:ef:d8:e5:ad:66:61:ca:e5:c9:1d:
         38:f9:d3:73:50:87:f1:0d:45:15:77:49:6a:a3:bf:da:1b:5a:
         c1:90:7a:d3:58:24:a3:d7:ec:9f:75:41:c2:c4:bf:08:92:76:
         93:02:0c:66:42:72:d2:e6:29:43:34:c5:e5:8c:b6:23:e7:c9:
         e1:44:2d:5f:18:af:29:4c:06:f8:8c:92:ac:11:1e:ce:40:1a:
         5e:43:6d:f5:10:99:3b:2b:af:f0:a2:f9:29:7e:b2:0e:31:78:
         ba:93:f9:f5:ec:1f:2a:6a:70:23:31:9e:40:0d:6c:72:15:44:
         f1:a0:ef:d2:98:82:98:96:b1:d2:b4:d6:0c:5a:36:9a:cb:73:
         12:45:c1:37:ea:b3:33:22:63:a7:c4:36:f1:46:dc:ea:d4:0d:
         5d:20:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 15:02:54 2025 by rpki-client