This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          dmimw+1kKTjbgevEbfN+ucMlrwlut39tCHfetsswe/I=
Subject key identifier:   A8:EE:1D:B6:52:82:49:35:25:ED:05:D5:B0:B6:BA:37:2B:35:9C:27
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       19EFABA26D097D7EF4AE37C0356E0C139B8ED9FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0650
Signing time:             Fri 21 Nov 2025 01:04:42 +0000
Manifest this update:     Fri 21 Nov 2025 00:59:42 +0000
Manifest next update:     Sat 22 Nov 2025 01:51:42 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: xVENWH+R6D0v5MSaV4LLbmafUOHRLjNaWSY472jsxkQ=)
                          2: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Nov 2025 01:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:ab:a2:6d:09:7d:7e:f4:ae:37:c0:35:6e:0c:13:9b:8e:d9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 21 00:59:42 2025 GMT
            Not After : Nov 22 01:51:42 2025 GMT
        Subject: CN=A8EE1DB65282493525ED05D5B0B6BA372B359C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:16:c6:35:04:74:a9:34:bd:31:58:21:f4:
                    b7:39:fa:55:83:01:99:9a:a0:d8:10:c9:f3:78:02:
                    bc:29:06:85:8f:73:82:42:e2:a5:40:3a:d7:20:05:
                    ec:db:2b:38:b0:07:0f:a6:28:02:86:65:ee:ce:2e:
                    76:03:93:f9:87:f8:a5:56:be:b7:85:6d:9a:5a:7a:
                    ba:22:01:7e:fa:97:78:13:45:bb:ec:2f:1f:f8:6c:
                    3a:de:80:fe:9c:57:79:0f:03:78:3f:82:98:39:7d:
                    14:be:81:33:84:23:be:bc:5f:ae:5a:cb:df:9e:7d:
                    52:4c:23:e8:05:4e:a1:0d:c6:d0:25:85:eb:26:2b:
                    9f:e4:24:67:91:fb:05:4a:90:21:e5:76:4b:9d:bd:
                    48:b0:f2:7a:3a:f8:d2:56:82:97:39:bf:31:71:a1:
                    49:74:87:8a:99:ca:59:c0:d2:9e:3c:32:81:0f:2a:
                    17:87:71:33:10:78:36:ec:3b:f1:2e:af:e1:c4:c4:
                    26:d3:7f:99:06:1f:31:ba:89:69:26:f2:d0:5d:23:
                    ea:49:4b:4f:10:92:46:09:c6:91:a4:90:82:14:86:
                    47:a4:9c:e2:69:c1:ec:72:7a:9b:99:56:4e:ef:79:
                    7d:1a:11:1a:52:3c:9f:04:27:19:4f:40:15:69:c9:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EE:1D:B6:52:82:49:35:25:ED:05:D5:B0:B6:BA:37:2B:35:9C:27
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:77:3d:5b:89:f8:79:70:47:27:a2:c9:57:8a:0d:83:7c:2c:
         ac:87:72:17:68:de:ad:d7:15:6f:80:6b:d9:19:b2:b5:d6:40:
         21:b7:6e:34:11:f2:c6:6c:8d:cd:f0:58:e9:7a:5b:4b:0f:11:
         c0:96:2e:36:e8:65:67:9d:97:f1:fc:ad:16:a7:bc:c1:1c:7a:
         d4:87:6c:ae:5a:55:32:91:ab:a0:84:56:42:29:4f:48:31:53:
         36:18:5e:68:a7:82:70:44:e5:db:47:a0:07:b5:f4:ae:a1:83:
         21:5c:b0:69:31:b7:b9:bf:3a:eb:29:f8:75:14:df:93:de:00:
         01:2e:71:40:e2:5c:b0:89:b4:d0:13:a5:b2:a8:ad:00:33:35:
         b2:26:4d:2d:80:e4:c6:88:62:14:71:ed:ec:18:33:5e:73:32:
         93:37:b8:88:28:6b:c2:27:d5:34:3b:64:bf:df:c7:93:b8:44:
         9f:f6:d5:21:09:ea:c4:e7:fd:8b:22:52:b0:36:6f:d3:41:60:
         e3:59:00:8d:39:6b:f3:3f:db:e3:51:b4:ef:f5:e3:fd:be:cb:
         80:df:96:48:be:65:5a:84:f2:c1:68:d6:cd:ac:d9:a4:4e:0a:
         f4:ca:44:4e:0c:7a:a1:84:ac:87:1d:04:a0:fa:60:e0:d6:f9:
         c2:9c:86:b4
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUGe+rom0JfX70rjfANW4ME5uO2f8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI1MTEyMTAwNTk0MloX
DTI1MTEyMjAxNTE0MlowMzExMC8GA1UEAxMoQThFRTFEQjY1MjgyNDkzNTI1RUQw
NUQ1QjBCNkJBMzcyQjM1OUMyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMN8FsY1BHSpNL0xWCH0tzn6VYMBmZqg2BDJ83gCvCkGhY9zgkLipUA61yAF
7NsrOLAHD6YoAoZl7s4udgOT+Yf4pVa+t4Vtmlp6uiIBfvqXeBNFu+wvH/hsOt6A
/pxXeQ8DeD+CmDl9FL6BM4QjvrxfrlrL3559Ukwj6AVOoQ3G0CWF6yYrn+QkZ5H7
BUqQIeV2S529SLDyejr40laClzm/MXGhSXSHipnKWcDSnjwygQ8qF4dxMxB4Nuw7
8S6v4cTEJtN/mQYfMbqJaSby0F0j6klLTxCSRgnGkaSQghSGR6Sc4mnB7HJ6m5lW
Tu95fRoRGlI8nwQnGU9AFWnJ2dsCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSo7h22
UoJJNSXtBdWwtro3KzWcJzAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBACF3PVuJ+HlwRyeiyVeKDYN8LKyHchdo3q3XFW+Aa9kZsrXWQCG3bjQR
8sZsjc3wWOl6W0sPEcCWLjboZWedl/H8rRanvMEcetSHbK5aVTKRq6CEVkIpT0gx
UzYYXmingnBE5dtHoAe19K6hgyFcsGkxt7m/Ousp+HUU35PeAAEucUDiXLCJtNAT
pbKorQAzNbImTS2A5MaIYhRx7ewYM15zMpM3uIgoa8In1TQ7ZL/fx5O4RJ/21SEJ
6sTn/YsiUrA2b9NBYONZAI05a/M/2+NRtO/14/2+y4Dflki+ZVqE8sFo1s2s2aRO
CvTKRE4MeqGErIcdBKD6YODW+cKchrQ=
-----END CERTIFICATE-----
Generated at Fri Nov 21 04:02:21 2025 by rpki-client