This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          E+iBUTsBsH6HT5gB5kCWrijfNtVtqINzRJcei/V2kgo=
Subject key identifier:   32:ED:5D:47:99:53:42:87:42:09:4D:5E:77:79:07:8C:D0:CA:D6:8D
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       624A0AB22C958BE942FFD96FE049D3A445C45BA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          064D
Signing time:             Thu 20 Nov 2025 13:56:36 +0000
Manifest this update:     Thu 20 Nov 2025 13:51:36 +0000
Manifest next update:     Fri 21 Nov 2025 16:54:36 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: kudcpyOQIxc8TgjMiiuC/uVc+epz6RTDrnfBL5QXq/U=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Nov 2025 16:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:0a:b2:2c:95:8b:e9:42:ff:d9:6f:e0:49:d3:a4:45:c4:5b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Nov 20 13:51:36 2025 GMT
            Not After : Nov 21 16:54:36 2025 GMT
        Subject: CN=32ED5D479953428742094D5E7779078CD0CAD68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:60:1d:20:d9:14:9f:dc:17:ea:79:75:fe:
                    c0:80:04:00:70:a3:3f:dc:e2:bf:76:6a:dc:87:15:
                    6c:d1:08:1c:ff:45:57:e7:6e:f1:bb:4d:8a:9f:27:
                    dd:62:31:31:d2:87:77:1c:ac:f1:8d:30:f1:ee:35:
                    cc:79:a4:91:e9:e2:5f:35:47:1f:80:48:a3:1f:a1:
                    b0:ef:15:84:80:f9:1e:1f:70:2c:8f:c9:e4:96:ca:
                    be:d5:8b:8c:d4:f9:57:c5:25:d5:3d:11:b7:f1:8e:
                    9a:98:15:08:92:06:91:d8:98:a8:f5:51:d2:62:39:
                    4b:0b:f3:99:d7:3d:00:4c:f4:81:93:0c:bc:3c:ed:
                    c7:cf:1e:55:1f:61:5e:3d:55:33:a1:a2:47:96:24:
                    a4:00:ff:98:65:70:cc:42:ac:90:63:6e:1c:a9:4c:
                    2f:6f:17:72:d1:28:69:b5:17:5b:de:0e:0c:05:2c:
                    84:70:df:bc:27:a5:7c:26:ad:3d:03:43:80:4d:97:
                    06:6e:1b:6f:f9:91:40:15:81:c2:ae:a2:e9:aa:3b:
                    53:b7:17:9d:c9:45:87:0b:86:64:97:79:5c:9d:8d:
                    14:79:cb:ef:65:e1:88:6e:5a:26:38:7c:7e:d2:51:
                    1f:3a:b5:1f:25:5b:ba:fd:ca:59:b3:38:7d:b9:aa:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:5D:47:99:53:42:87:42:09:4D:5E:77:79:07:8C:D0:CA:D6:8D
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:06:3b:1f:a4:89:53:2b:b2:05:83:09:2d:86:1d:8d:68:
         9f:57:a8:b1:96:14:6e:2a:8b:18:35:8c:b8:90:b1:e4:49:12:
         0e:5b:bd:32:e0:66:27:ac:93:e0:ca:f4:21:ed:9a:f1:56:73:
         c9:06:3f:c3:00:84:46:cf:13:22:31:54:d5:6f:f2:e1:62:da:
         86:3c:b0:d0:5d:38:3b:17:49:9c:6a:ab:7b:d7:76:27:4b:15:
         a9:15:7a:44:75:a8:2d:17:5e:59:f8:c8:98:ea:89:ac:f0:ee:
         24:ed:69:3e:d8:1d:28:5b:79:1e:0a:f9:bd:cd:22:68:58:c7:
         05:e4:f1:f9:d0:ab:f6:fc:9e:3a:a2:0a:c4:80:7a:0e:d6:4d:
         2d:e0:fa:4f:84:4c:29:67:31:2d:e2:41:de:27:fa:53:6d:7f:
         5a:a3:b1:12:79:d7:b8:b4:f3:2d:f1:0b:55:9a:4a:27:1c:99:
         80:d4:a3:27:a0:45:13:f0:ce:2d:02:04:0b:00:6c:d3:aa:d2:
         34:11:4d:8c:ff:6a:cf:e5:f6:73:29:6c:38:42:9e:6b:30:56:
         f8:c4:1b:d9:2c:69:dd:6c:2e:39:3a:6b:26:c6:da:20:fe:a9:
         d7:55:28:f4:74:ed:30:11:b7:8d:cd:0a:96:82:4a:e9:c0:16:
         0e:df:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 16:24:40 2025 by rpki-client