This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          ExYaiTKyM0h9Ot5MalZv9pbUW9kNNW1zUdgYJJsaceQ=
Subject key identifier:   C8:E1:98:59:53:2A:7E:E4:C7:66:D4:3E:FB:18:0D:94:DE:9C:37:0C
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       363455E44BB7BB2EB7CD1BBDE51DB2D4C7A5AED1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0691
Signing time:             Sat 29 Nov 2025 21:13:03 +0000
Manifest this update:     Sat 29 Nov 2025 21:08:03 +0000
Manifest next update:     Sun 30 Nov 2025 21:37:03 +0000
Files and hashes:         1: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          2: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: sjcwBQHQIJfs+MP/LPK3lcHV/RyddC+/iME+/oZ+5h8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Nov 2025 21:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:34:55:e4:4b:b7:bb:2e:b7:cd:1b:bd:e5:1d:b2:d4:c7:a5:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 29 21:08:03 2025 GMT
            Not After : Nov 30 21:37:03 2025 GMT
        Subject: CN=C8E19859532A7EE4C766D43EFB180D94DE9C370C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:96:af:f8:79:2e:a2:74:0f:e2:e8:87:69:
                    d9:66:02:36:08:09:2b:67:2b:86:d2:96:15:a1:06:
                    e0:ff:bc:7f:e2:fe:c8:16:1e:4c:65:12:75:37:42:
                    ef:38:b9:0a:33:6b:73:c5:75:80:a4:d5:55:39:33:
                    d2:c9:4c:ae:9b:7a:5d:39:c8:2a:23:23:0a:87:f2:
                    c7:fa:4c:7d:9f:a6:9a:e3:fe:27:dc:16:77:1f:37:
                    20:0e:6b:d7:bd:e0:45:51:a4:5d:41:12:37:20:9f:
                    12:af:ca:52:c1:19:db:71:e4:8d:a6:87:7e:d6:86:
                    ef:e5:9f:49:1d:e6:9c:7e:00:07:17:1e:d5:75:62:
                    ca:f8:9c:d3:6a:e1:4e:e7:71:4b:09:59:be:51:17:
                    8f:72:c8:90:37:dc:be:64:5c:8f:bf:75:b9:a8:29:
                    46:01:db:cc:61:13:cc:47:fa:c4:fb:98:1f:f1:12:
                    fa:f3:4f:4d:59:73:1c:75:3b:a1:dd:72:a3:ee:dc:
                    8c:b7:48:67:44:c2:30:68:60:7d:ea:12:ee:fa:9b:
                    3d:78:82:61:30:7e:97:75:82:0f:52:52:82:fb:d3:
                    4d:97:2d:d5:27:2c:a2:69:ca:7a:b5:c1:97:af:ce:
                    5f:b3:88:5b:1c:5f:36:82:7c:06:be:34:68:7a:0e:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E1:98:59:53:2A:7E:E4:C7:66:D4:3E:FB:18:0D:94:DE:9C:37:0C
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:33:7a:a7:fb:d3:8f:53:fb:f7:15:06:a3:d4:bf:b1:cb:
         b0:e9:89:fb:19:93:df:0d:d4:6b:5b:44:a2:de:45:9f:e1:a5:
         df:14:e1:b9:9f:4f:60:64:af:38:75:3d:35:b6:bf:4a:7b:ca:
         8e:ae:8c:34:4a:d6:05:03:32:72:7b:11:60:91:36:39:47:83:
         93:eb:28:24:55:7f:f6:97:47:96:79:b9:e5:e1:93:31:52:d6:
         8c:9f:be:b9:97:db:6e:8b:a4:45:14:12:2f:dd:ae:37:76:28:
         4b:b3:89:dd:bd:7b:4f:bf:22:91:e3:be:3a:85:63:4a:52:40:
         0f:53:43:3a:7c:64:e4:64:45:82:d3:74:df:3f:6d:ad:d4:e5:
         1c:95:f6:18:e0:f6:59:1c:47:27:05:0b:17:71:ec:b9:96:34:
         06:4f:b2:3f:cc:7a:4a:cc:cb:38:51:17:e3:ce:ee:ac:b8:52:
         62:75:16:e2:95:38:1a:ab:1a:d5:ad:93:f6:f7:74:c7:db:85:
         e3:ff:65:b8:86:23:45:49:95:04:66:0a:71:22:8c:79:dd:0a:
         17:b5:46:18:30:06:98:7f:f1:1d:37:9e:5f:79:0f:32:11:3d:
         de:1c:b7:7b:a9:04:bf:9d:7b:00:62:0e:f5:93:1f:fc:8a:46:
         6b:43:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 03:54:53 2025 by rpki-client