This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          N9CIKOfQnYkh7C7IrAN+OWVJfIzfITf3jqaiEUg1Rzk=
Subject key identifier:   88:58:C8:1B:77:E7:7E:DF:E4:1A:0E:77:93:9E:05:9C:D0:46:7F:E1
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       162E2133448767446F9BEC417AB1E1ECCC939343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0646
Signing time:             Wed 19 Nov 2025 10:48:41 +0000
Manifest this update:     Wed 19 Nov 2025 10:43:41 +0000
Manifest next update:     Thu 20 Nov 2025 11:18:41 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: wQi0OQVh9lgsKXj1TUw1UTRacPtaG/+bcth3VNZMsRo=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Nov 2025 11:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:21:33:44:87:67:44:6f:9b:ec:41:7a:b1:e1:ec:cc:93:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 19 10:43:41 2025 GMT
            Not After : Nov 20 11:18:41 2025 GMT
        Subject: CN=8858C81B77E77EDFE41A0E77939E059CD0467FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:48:62:c4:ec:bb:d7:40:18:f4:77:fa:cb:
                    59:73:ff:ca:a6:b6:29:ba:b5:a9:0e:dd:d5:4a:06:
                    01:a1:59:07:2d:9a:3c:52:f9:09:95:98:c3:33:de:
                    bc:a8:27:56:c8:2e:9c:8d:16:9f:f2:d5:cf:55:29:
                    99:27:f2:7a:96:8b:8b:85:28:4a:ce:33:26:aa:45:
                    ff:e7:66:ad:56:e9:a0:8b:ee:c1:36:97:be:0f:87:
                    d5:3a:20:01:45:8f:86:85:e9:1c:75:d3:66:f4:6b:
                    3c:ec:9e:b1:b7:3a:8e:d8:f4:4f:6b:d7:9d:74:66:
                    b6:1b:22:4f:a6:d6:07:15:df:ac:57:f3:23:bd:07:
                    e1:cd:65:24:3c:4e:a0:27:2c:c8:f0:63:b8:55:41:
                    5a:68:ec:67:17:6b:8a:0c:b1:b8:24:83:e2:e1:5f:
                    33:27:34:d9:d4:73:a0:f8:17:31:1b:f4:2b:66:06:
                    df:ca:a3:97:5f:5c:70:b9:d7:cf:25:7f:43:8e:92:
                    22:ab:83:57:96:56:17:45:76:e2:19:3b:a9:4a:10:
                    cc:83:d1:55:30:80:a3:e7:54:c2:47:8f:52:4b:1f:
                    36:84:6c:e5:e6:ec:62:1f:54:10:d4:91:24:29:29:
                    67:77:c3:8a:8a:10:8e:0d:21:a2:1c:06:56:b9:3f:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:58:C8:1B:77:E7:7E:DF:E4:1A:0E:77:93:9E:05:9C:D0:46:7F:E1
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e8:1f:a5:f7:2b:6f:d1:94:1c:a3:e8:03:b5:63:fc:2c:32:
         57:06:21:ff:e9:a8:85:83:ef:94:d1:6b:03:ee:d2:af:5b:1b:
         d2:ee:c9:c7:a7:50:c3:3a:dd:f0:9b:06:89:d3:a5:be:26:27:
         78:59:29:e2:de:9e:db:b5:f7:cf:29:e0:5c:ac:c5:a6:77:4c:
         7e:73:29:41:26:a8:55:b2:9d:c7:83:43:92:0a:74:e0:43:df:
         31:ca:02:16:f3:23:44:45:37:f4:58:ef:7b:eb:35:90:53:20:
         12:16:1e:33:8a:b7:3e:a4:bd:22:15:29:83:e1:eb:fc:64:c7:
         a1:b5:b0:79:4f:fc:1e:84:3c:a8:fb:d4:4e:78:a7:7f:93:45:
         df:6f:56:01:30:98:4b:59:74:ab:10:c9:1a:88:bb:f2:c3:8e:
         f3:8b:02:33:ec:32:d9:8b:dc:0e:1b:81:8d:de:8c:18:ec:99:
         89:c7:2b:5d:7d:7b:12:51:5d:72:87:0f:a8:5b:26:16:f5:b9:
         fa:b4:2b:33:a9:ef:c4:2c:f2:17:60:4a:3d:51:33:56:c5:ea:
         c3:d1:77:58:a6:6a:aa:20:d4:d2:2b:68:9e:ed:0d:ff:63:ee:
         b6:d6:67:7d:9d:72:e5:a8:ed:e5:d9:6a:62:2c:5e:02:82:93:
         a1:08:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 19 17:39:22 2025 by rpki-client