This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          6dXQJPzJdw5/sXx90ztjGM5Y2+sr05Ya3FhuROahJPw=
Subject key identifier:   28:4C:19:C5:F1:94:59:D7:48:26:66:88:E5:85:6C:81:C2:94:95:8A
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       4C7C1D2997ED4BE074EEE936B59C5B0AADFE794E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          067D
Signing time:             Wed 26 Nov 2025 21:46:35 +0000
Manifest this update:     Wed 26 Nov 2025 21:41:35 +0000
Manifest next update:     Thu 27 Nov 2025 21:55:35 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: z6YK04gZZ1kjyZjEETDD78eMPu0kMJPZ9c4k+bNk5V0=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Nov 2025 21:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:1d:29:97:ed:4b:e0:74:ee:e9:36:b5:9c:5b:0a:ad:fe:79:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 26 21:41:35 2025 GMT
            Not After : Nov 27 21:55:35 2025 GMT
        Subject: CN=284C19C5F19459D748266688E5856C81C294958A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:5b:b0:12:ca:d9:b3:b5:94:46:c1:d0:91:
                    aa:72:a8:9f:ef:f1:9f:88:5f:c1:0d:b8:cd:01:a9:
                    32:ae:ce:46:7b:38:e9:1b:4c:6c:a0:e7:d2:de:51:
                    dc:37:66:d3:c6:5b:f3:26:41:b7:8a:60:5b:57:af:
                    1a:f8:c0:27:5e:ad:77:4b:7f:10:57:d1:b3:fe:54:
                    a9:61:e5:49:84:ff:a9:92:89:6a:3d:ae:bd:9c:31:
                    c8:80:b0:5a:ac:bc:ec:d7:78:30:d7:72:81:21:d9:
                    5c:24:93:4a:01:d9:64:8b:34:0c:21:09:d3:b3:a0:
                    ae:d5:b2:bf:d3:bd:a6:fc:8a:c9:4d:51:3d:4e:33:
                    b6:cd:b4:13:03:13:02:48:d9:d7:0a:83:fa:aa:12:
                    b7:4f:c4:fe:8a:6a:a9:43:2d:c7:98:da:f7:28:46:
                    79:f7:ce:92:b7:4c:4b:b7:12:f6:aa:70:49:0a:5e:
                    31:88:7c:5f:84:66:a6:40:0c:70:db:88:f9:86:ef:
                    3c:d0:93:73:8c:e8:91:19:31:de:9f:26:1c:3b:23:
                    7e:24:73:9b:22:a9:b6:a4:8c:cb:68:a2:5b:74:ee:
                    99:e8:ca:b8:d5:8e:f7:ba:ec:69:c0:eb:40:92:79:
                    82:ca:c5:6f:a2:3d:55:e6:bb:37:63:94:af:4f:e0:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:19:C5:F1:94:59:D7:48:26:66:88:E5:85:6C:81:C2:94:95:8A
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:49:8f:f1:71:21:14:f7:6b:02:05:c0:2f:10:4e:c4:dc:f1:
         3c:c8:36:f2:f0:f4:91:7a:2f:49:c1:fc:3a:46:70:fb:2a:c2:
         6c:d7:6d:75:25:88:5b:28:02:bd:2d:84:a6:08:2a:73:b4:8b:
         bd:26:d9:93:c6:4f:5f:87:e5:14:f0:0a:0e:9d:a5:b9:21:90:
         10:d4:ac:d3:fe:fb:0f:7e:6d:bf:25:b4:15:05:b8:5b:38:c5:
         ad:51:f7:2f:8c:fc:38:ac:b1:f9:0d:e7:12:ef:1c:c9:a5:98:
         bd:a2:27:3f:47:d3:e0:e5:cd:d3:0a:7d:36:5e:40:34:8d:7b:
         bc:20:a2:02:c6:2d:6a:c9:ef:13:2d:d4:2b:2b:73:15:19:83:
         36:55:f3:8e:5b:91:ad:1c:44:b9:9f:75:6a:15:b6:42:44:4f:
         5e:1a:e6:2c:43:53:91:b0:33:38:e6:0c:8f:61:e2:31:20:54:
         bb:d7:54:c5:88:a0:95:b4:5a:98:10:bb:db:19:4f:6d:a7:84:
         f7:2a:30:81:2e:bd:fb:ce:e5:e7:42:a7:1b:7a:38:72:02:7e:
         75:7d:48:43:3a:2b:6b:ca:41:9b:03:a4:8b:e8:a7:99:cf:c1:
         6a:42:78:9d:a5:35:6d:b1:9d:f3:5a:f2:5c:cd:00:46:cb:29:
         0f:fd:65:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 23:14:51 2025 by rpki-client