This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          dhnhkcOi5ygeR0dPoODwn3osUov/PFI6/3x2O3P/5G0=
Subject key identifier:   79:37:FD:6C:9B:43:A6:4B:62:EA:E9:4B:FB:C4:FC:6E:47:2D:AB:9D
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       6AE16BA8D51638683C3CE03B23A16E954A7F4AB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          06DC
Signing time:             Tue 09 Dec 2025 17:33:49 +0000
Manifest this update:     Tue 09 Dec 2025 17:28:49 +0000
Manifest next update:     Wed 10 Dec 2025 20:51:49 +0000
Files and hashes:         1: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: uM+K25XjiFBmg01Ykw+FeyNt+bAV2ichFzFudxAE2G4=)
                          3: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 20:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e1:6b:a8:d5:16:38:68:3c:3c:e0:3b:23:a1:6e:95:4a:7f:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Dec  9 17:28:49 2025 GMT
            Not After : Dec 10 20:51:49 2025 GMT
        Subject: CN=7937FD6C9B43A64B62EAE94BFBC4FC6E472DAB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:07:b0:f8:20:f4:0b:b2:27:c1:48:16:13:
                    dc:86:c0:7e:2c:3c:b1:f1:f7:27:1c:9a:9f:32:f7:
                    89:b3:e9:12:9d:b7:43:c5:75:56:c6:fc:93:b1:c7:
                    f6:3a:cc:ba:25:ef:8a:a8:3e:77:64:4c:1a:9d:8c:
                    a3:6e:2c:92:d9:f7:d0:82:b1:a7:ef:e2:41:99:75:
                    47:5e:70:bf:0c:7d:0b:15:a3:f2:04:dc:87:3e:a9:
                    d3:46:bd:20:ac:b5:8b:31:47:2b:ae:5b:7b:a8:3e:
                    ae:5b:b2:57:12:11:d2:e5:ed:b6:26:cd:09:5c:63:
                    8b:54:56:bd:45:9c:33:93:c9:e5:15:ff:41:eb:2a:
                    e3:6a:35:63:67:dd:24:b0:59:54:69:ac:42:63:d3:
                    73:dc:ef:10:cf:ac:7a:74:b0:a1:df:0a:57:6f:bf:
                    41:32:a5:ee:34:4c:04:4c:2a:ff:41:28:75:b9:a7:
                    50:0f:9c:85:64:50:fe:03:4d:dc:70:bb:d8:2e:63:
                    53:99:bf:95:cc:5e:9d:6d:32:44:e1:2e:c6:68:b4:
                    2a:85:3d:6c:d7:4f:27:75:ec:97:e7:e2:38:56:8b:
                    83:3c:7a:4c:ab:d1:6e:62:90:e0:34:4e:6c:f9:c3:
                    e3:eb:a8:0c:13:ef:b9:64:1f:9a:50:22:55:bf:76:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:37:FD:6C:9B:43:A6:4B:62:EA:E9:4B:FB:C4:FC:6E:47:2D:AB:9D
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:30:37:57:4d:6e:21:0a:be:77:78:3b:f9:86:ab:e1:da:
         17:61:dd:b4:62:85:13:07:3e:29:65:5b:98:2e:70:75:0f:e8:
         d7:5e:07:56:74:29:bc:7b:b1:e3:b5:a1:42:35:14:ac:cc:fa:
         a7:8b:b0:7b:48:de:d7:3c:02:ce:9c:a5:70:66:24:ec:7d:57:
         1b:b4:d8:46:e3:47:ae:e6:ac:51:ab:34:9c:cc:ac:2a:35:5f:
         44:4b:33:e9:b9:1a:ff:9e:c9:75:84:9a:4f:89:3c:6a:a3:a1:
         c7:28:e5:38:50:14:f5:0b:23:45:92:89:62:8c:3e:47:ac:95:
         38:c7:bf:c2:ad:21:44:ca:6a:3a:b5:2f:1e:df:fb:db:ae:6b:
         0a:b3:16:5b:b9:04:e6:ff:ac:bb:23:8e:ac:60:3e:14:2f:b1:
         7d:52:91:00:03:53:81:36:2a:df:8a:37:84:f7:13:9d:c8:ed:
         a3:e0:de:8d:d0:7c:a9:30:6e:9e:b6:bb:e9:b2:e3:b7:b3:b6:
         96:91:a0:7c:ef:df:f7:e1:c7:f4:b0:24:2f:e1:c4:ba:71:26:
         b1:31:dc:1a:5b:9a:d2:dc:ac:57:9b:5f:9e:03:bb:44:a9:49:
         ea:c8:2a:40:5a:0e:d9:4e:71:bc:97:22:86:e4:54:7e:02:8e:
         b6:4e:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 22:54:23 2025 by rpki-client