This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          eVfpl6iZVOT+ilP2KaZQPzs3s9OgL+aOPE/oPsuoCa4=
Subject key identifier:   4D:3C:19:A8:FB:27:FA:8F:C8:18:0A:48:7F:F7:A6:5E:12:90:7D:8B
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       2AF9704682369CBF5D18B0434714217E9F651C61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0850
Signing time:             Wed 31 Dec 2025 10:12:42 +0000
Manifest this update:     Wed 31 Dec 2025 10:07:42 +0000
Manifest next update:     Thu 01 Jan 2026 10:19:42 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: bXYZHJg+dfJJi0xNX5W2A6GBTWExm20plL2jD/KZ5Rc=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 10:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f9:70:46:82:36:9c:bf:5d:18:b0:43:47:14:21:7e:9f:65:1c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Dec 31 10:07:42 2025 GMT
            Not After : Jan  1 10:19:42 2026 GMT
        Subject: CN=4D3C19A8FB27FA8FC8180A487FF7A65E12907D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:d0:ad:e7:03:21:68:84:56:c2:7a:08:0f:
                    d9:e0:fe:6c:c1:06:79:6c:ff:33:10:2f:12:da:a9:
                    5f:87:42:93:1f:bd:d9:21:be:8b:4b:30:60:b0:b7:
                    f1:42:d7:e0:c1:76:25:44:33:41:13:51:97:6f:9a:
                    11:df:b8:8c:e4:51:fa:83:d8:b5:70:2a:73:d1:fc:
                    0c:0f:7d:fb:05:6a:0e:5e:76:44:b6:79:95:35:8c:
                    66:9a:ec:b0:23:ee:8b:f9:f1:bf:b9:a6:b5:b4:08:
                    32:ec:f7:d7:0d:13:5d:96:1e:86:0d:c5:40:e2:5a:
                    e8:bf:e5:7a:33:7e:f8:08:1f:70:a9:71:5e:12:14:
                    89:d3:76:1f:6f:84:2f:6e:9b:50:f3:83:97:0f:b3:
                    14:04:25:65:8c:69:e5:4d:b6:e9:77:ca:8a:e7:d6:
                    ea:18:1a:6b:1c:d0:21:db:3f:f7:ca:8b:03:98:a1:
                    7a:26:d7:df:65:15:f4:03:71:ff:54:b8:56:5d:17:
                    62:ac:dc:35:e6:3d:f4:43:ef:3f:96:1a:08:a0:40:
                    63:16:db:43:ad:60:e1:33:33:3a:59:dd:c6:b0:67:
                    aa:97:26:ec:32:da:72:7c:18:8a:7c:90:ef:99:68:
                    95:df:79:35:b1:40:e5:0b:a6:71:a4:4d:ee:f4:6e:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:19:A8:FB:27:FA:8F:C8:18:0A:48:7F:F7:A6:5E:12:90:7D:8B
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:75:68:38:75:c5:c2:82:dc:1f:6a:4c:d6:97:bd:80:b8:
         ae:c9:48:4d:1c:4f:e0:a7:29:91:a0:02:59:67:2b:3a:4a:2a:
         5f:44:0d:7b:69:95:8c:6f:47:fb:15:90:07:70:d5:36:42:67:
         c1:c7:6d:8c:6b:60:34:49:b0:a8:0b:88:8a:da:ee:7e:af:b9:
         7f:da:3c:36:72:d5:a1:bd:48:c5:71:6d:47:e7:96:d5:03:38:
         43:d9:71:0b:30:8f:d2:e8:81:a8:fd:e4:17:39:25:db:8f:cf:
         78:c9:8a:40:a0:95:b3:d6:d5:60:d9:21:5c:e0:50:06:67:f6:
         75:e4:75:05:d1:22:ad:c6:6a:64:6a:1a:1d:4b:22:ec:e9:a0:
         e2:2b:cc:7c:98:5f:50:6a:38:8f:d1:42:4f:dd:99:58:d8:79:
         02:73:93:5a:f0:e7:67:b8:91:fe:6e:fc:ea:f0:28:93:a7:e8:
         29:3b:45:26:bc:26:ea:77:c4:64:e4:1d:ee:41:77:44:6e:53:
         28:fc:de:73:f4:cb:a8:f7:b0:47:ca:d1:13:c0:69:96:1a:90:
         ca:e0:f3:bc:d2:39:7a:ca:5f:70:5c:40:c7:6a:57:75:20:bd:
         8f:ea:fd:e2:a1:86:48:12:01:09:ee:fc:c1:29:46:33:4d:e7:
         3b:52:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 13:40:28 2025 by rpki-client