This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          VuZksEzknpPKUna3PvVSVKi4ujq1F6amJDC6iR2beLA=
Subject key identifier:   A8:BB:87:A6:E2:36:33:AA:EA:1D:DF:7E:26:3F:5B:4F:2E:58:84:B9
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       623E62FDCAA9AFB04D735EDE95EC3A9B98957F34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          088E
Signing time:             Mon 05 Jan 2026 10:44:32 +0000
Manifest this update:     Mon 05 Jan 2026 10:39:32 +0000
Manifest next update:     Tue 06 Jan 2026 14:03:32 +0000
Files and hashes:         1: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          2: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: W7Ea2+de7e52Wldj9gNJCPlNfEplanp0L9GKshXhDLY=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 14:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:62:fd:ca:a9:af:b0:4d:73:5e:de:95:ec:3a:9b:98:95:7f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan  5 10:39:32 2026 GMT
            Not After : Jan  6 14:03:32 2026 GMT
        Subject: CN=A8BB87A6E23633AAEA1DDF7E263F5B4F2E5884B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:a3:56:e9:41:55:d8:30:20:f9:ec:bf:88:
                    e4:d7:0e:19:a9:57:72:df:ff:ed:69:a0:fb:46:68:
                    e1:9e:07:82:44:bd:44:6c:32:d7:60:5f:4a:43:2c:
                    6e:95:82:82:d5:1a:7b:55:f0:2f:03:d3:15:5b:4b:
                    68:33:38:44:f6:26:99:1b:b4:14:80:c4:37:37:99:
                    b6:c7:b7:c4:75:24:b4:cd:a7:08:9c:d8:d0:fb:c2:
                    1c:d6:90:d2:32:90:62:24:b5:a2:97:67:1d:00:d4:
                    0f:f7:27:f2:da:d3:a7:ed:dd:07:b0:59:5c:e0:e0:
                    ac:57:97:bc:6f:70:9c:e3:71:fe:20:2e:dd:93:63:
                    7a:ce:2d:05:de:14:39:a3:af:d2:71:d1:bc:5e:5d:
                    4f:29:e5:84:10:36:19:29:3c:d7:3d:a0:fa:79:77:
                    ae:b3:ed:13:bf:3c:c5:ed:3f:bb:32:2a:1d:d3:61:
                    91:38:46:85:71:df:65:b1:e2:0c:ca:78:c1:34:d5:
                    f3:4d:46:95:32:7a:c5:63:1b:02:0a:bc:a8:26:18:
                    74:97:e0:d8:c9:7d:81:b0:25:f1:25:6c:47:c4:da:
                    9d:86:c3:ab:d2:f9:0a:e4:1a:69:f3:93:36:c1:b1:
                    13:f4:47:3d:4f:f5:d3:55:b6:98:ce:2b:eb:63:23:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BB:87:A6:E2:36:33:AA:EA:1D:DF:7E:26:3F:5B:4F:2E:58:84:B9
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:84:e9:17:fc:7b:df:bf:55:17:e8:aa:48:a3:06:29:93:bb:
         82:68:6c:ff:71:f3:fb:8b:ed:28:5b:92:0d:9a:92:0f:d9:cf:
         e4:e2:68:7e:c8:a6:56:d2:fa:4d:a6:7d:c9:79:65:90:2d:e1:
         93:e2:c5:70:c2:00:65:63:ae:0d:1c:e7:80:fb:6b:a1:84:ee:
         70:86:71:4b:b3:a0:1f:87:ae:17:e2:5e:ea:77:0d:cb:6a:30:
         88:c2:c6:3a:4a:23:43:de:4b:0a:b6:ed:00:27:c8:5f:14:96:
         bb:7f:1d:db:64:1b:80:f9:4d:b4:45:0c:f1:fd:c8:44:27:19:
         63:6e:8f:2d:31:ee:11:a4:39:62:35:06:ed:29:f5:28:3c:f3:
         51:69:a6:da:0c:1c:5e:16:41:5d:5c:8a:91:36:4c:66:86:02:
         b6:f5:a4:54:6d:16:c4:2a:9b:10:30:cf:f0:69:a4:e6:ba:69:
         20:74:30:58:36:ae:df:69:57:66:98:0b:84:8b:53:4f:bb:1d:
         20:5c:f1:07:4a:c1:0a:16:82:89:45:47:fd:4e:ca:ea:f1:da:
         0d:ca:43:cf:e1:35:b8:36:d6:61:b0:b3:d8:f2:8b:ee:24:24:
         3e:0b:56:b1:c0:0d:87:0e:be:ff:ee:59:61:55:70:73:de:ab:
         cc:c2:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 12:55:51 2026 by rpki-client