This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          cghnUzr6346ya1vuccFUaRm+xUGxqeMOvDG0AUQTsGY=
Subject key identifier:   70:C9:16:11:66:71:87:11:AA:87:1F:46:F3:5D:00:94:B4:1D:FC:6D
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       06F63F64B8FC6678FB059A5BB13557A0CA152ED6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          089E
Signing time:             Wed 07 Jan 2026 15:20:22 +0000
Manifest this update:     Wed 07 Jan 2026 15:15:22 +0000
Manifest next update:     Thu 08 Jan 2026 19:04:22 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: Jch3jOSkUiO8XxmMUcQwkOmDr1cPHrcZTMFeCAool70=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 19:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:3f:64:b8:fc:66:78:fb:05:9a:5b:b1:35:57:a0:ca:15:2e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan  7 15:15:22 2026 GMT
            Not After : Jan  8 19:04:22 2026 GMT
        Subject: CN=70C9161166718711AA871F46F35D0094B41DFC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:a8:15:31:db:b9:bb:0b:0e:06:51:d2:d4:
                    2b:d9:45:52:29:8e:6b:f4:21:5b:0f:ed:15:54:f7:
                    24:db:b9:2b:6f:8d:11:5d:d7:12:be:16:f1:ea:4e:
                    87:5a:59:b0:a4:93:9a:98:86:15:2f:b0:e1:31:83:
                    17:08:41:51:a7:35:51:a1:85:84:93:23:fe:7b:0b:
                    53:8d:7c:0a:38:77:53:84:f2:ea:0b:86:cc:6d:34:
                    8e:c6:27:6e:a1:a3:30:be:df:30:f1:09:20:9f:ca:
                    a7:0b:34:57:27:87:2a:d1:c5:ab:22:db:04:9a:5f:
                    3a:34:7e:ec:df:ca:f7:39:e5:0f:30:97:00:6f:a9:
                    e1:5e:fc:1c:c4:3d:63:41:68:85:fb:af:7c:53:35:
                    b0:43:98:8f:33:7c:11:07:6f:8a:ee:c1:ce:09:d3:
                    af:56:85:ac:dc:c6:00:52:26:31:d5:43:dc:7f:21:
                    f1:21:4b:76:86:37:c5:81:2b:19:4d:8e:08:e0:d1:
                    d7:81:01:46:d5:6e:ca:72:3b:26:6f:e4:63:3b:bd:
                    9f:35:5b:de:fe:10:86:91:e6:fd:ce:9e:4d:97:8d:
                    18:d7:31:8d:9b:fa:60:eb:40:9b:69:4a:3a:5d:10:
                    c8:d3:a7:dc:28:49:a4:a0:ff:af:c0:50:cc:04:88:
                    7f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:16:11:66:71:87:11:AA:87:1F:46:F3:5D:00:94:B4:1D:FC:6D
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:14:7d:b9:69:30:cb:13:50:7b:80:ea:df:15:90:2f:df:
         7c:fc:d5:2b:8b:4b:b6:f9:24:ea:62:3b:33:26:0a:bc:fe:4d:
         df:ca:fc:84:fe:4f:57:39:a9:c3:99:7b:fc:8e:8e:b5:9f:20:
         95:2b:a3:bc:9c:be:8f:45:8e:bd:46:9d:71:ff:86:cb:38:11:
         76:92:41:eb:4a:6a:3e:86:b0:47:ca:1e:ae:3e:68:4f:21:0b:
         92:1f:c3:2f:23:76:f5:2e:b6:54:bc:28:1a:08:a3:b4:9e:09:
         22:48:f5:aa:ef:a5:d8:16:6f:7b:b2:ec:3e:59:61:49:e2:15:
         1d:5d:72:82:24:07:50:70:f8:9f:58:5d:97:d3:b0:06:c2:3a:
         e0:ce:7c:c8:c5:fe:73:43:8b:ac:c8:ee:1c:f7:dc:b0:d0:e1:
         82:5d:2a:2a:8d:01:f9:69:b2:ef:94:32:46:f5:c2:a7:aa:ec:
         74:ac:a3:f5:4a:8a:bb:5f:ff:10:8c:ba:32:88:a1:c1:dd:e6:
         c0:ec:b5:70:56:a6:d7:9a:71:00:21:2f:1a:20:2a:b5:53:5f:
         e4:7f:d1:09:e1:de:76:41:cc:4a:2a:ed:05:9e:bc:df:52:9f:
         cb:d6:e8:cd:ea:6c:7b:1c:a1:23:f8:0a:89:76:fd:46:3b:4b:
         0f:b3:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 21:19:05 2026 by rpki-client