This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          0PFCsDB9aoJq/6NJ/OMOu9INGRkR34eIj9pun3/L1wc=
Subject key identifier:   20:74:EB:B4:71:6B:4E:14:33:10:30:E1:31:EB:D2:24:CD:3A:64:73
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       557878F75ADB1F83A998424ED22319EE65B08D1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          08F5
Signing time:             Thu 22 Jan 2026 13:29:28 +0000
Manifest this update:     Thu 22 Jan 2026 13:24:28 +0000
Manifest next update:     Fri 23 Jan 2026 14:04:28 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: pA4k8n3kr4jsx5alqC8fP6q43lobz41dE1Hs1UVkHnU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 14:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:78:78:f7:5a:db:1f:83:a9:98:42:4e:d2:23:19:ee:65:b0:8d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan 22 13:24:28 2026 GMT
            Not After : Jan 23 14:04:28 2026 GMT
        Subject: CN=2074EBB4716B4E14331030E131EBD224CD3A6473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e3:64:48:23:93:e6:72:c5:3b:79:20:24:10:
                    0b:96:4a:25:fe:e9:ac:77:5b:4a:80:04:1d:37:69:
                    c8:3c:70:4e:50:d4:f2:6c:07:97:98:69:d8:b3:9c:
                    9e:ab:9b:7a:38:cb:81:40:c1:e5:31:40:73:ab:75:
                    f8:3f:33:5e:7e:39:fe:2b:dc:dc:c2:ce:a9:d1:82:
                    0e:2c:a4:57:ca:27:24:42:44:3a:53:62:a2:ba:1a:
                    e3:29:81:b3:d8:e4:13:f8:31:2d:1e:3e:a1:7f:2a:
                    06:94:0b:aa:cc:12:a9:4e:a9:8d:7d:07:4c:18:d3:
                    c1:af:de:54:2b:9a:f8:ff:a1:b6:6c:90:da:40:2c:
                    93:26:b9:86:7e:21:e2:2e:95:9c:28:ab:f8:88:f5:
                    d8:e8:79:9e:27:24:5b:5c:db:6d:18:6d:c0:48:cf:
                    f5:26:68:a4:ca:85:3d:86:63:5d:8a:01:76:d9:19:
                    37:be:95:9d:65:ba:aa:11:55:16:61:7f:86:42:05:
                    36:d5:8f:40:65:a0:d2:fb:62:d8:45:ec:00:b6:47:
                    17:ea:97:69:0d:22:c5:2b:39:75:a2:48:16:ca:58:
                    d1:cb:c1:45:c1:21:cf:18:9b:7b:e1:7c:84:39:31:
                    28:09:3e:54:ca:7e:ac:21:9e:25:27:04:1f:ad:97:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:74:EB:B4:71:6B:4E:14:33:10:30:E1:31:EB:D2:24:CD:3A:64:73
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:45:c0:e8:98:ed:6d:ed:85:e0:40:0a:3b:6f:55:ff:b0:
         f4:cd:b6:af:42:82:5b:6f:fc:43:98:84:73:6a:c3:a4:b8:f5:
         12:2d:cf:60:19:5d:fe:89:01:50:4a:df:29:54:a9:00:64:b5:
         71:c8:c9:28:0f:59:06:80:da:c9:b3:2b:08:67:f7:90:4c:a1:
         62:7f:40:39:50:10:6e:54:b6:a8:7c:39:a2:32:e6:f5:62:8f:
         7b:a6:92:6b:0f:6f:62:f9:77:72:d5:5a:d7:c4:e2:26:ee:de:
         40:08:f7:d0:1b:9f:f8:de:ca:5f:9b:07:f8:f4:60:53:74:9b:
         a7:68:29:2c:f2:dc:d0:34:8e:54:b2:e5:27:13:d7:b4:37:27:
         1f:4b:50:82:1d:0e:25:b6:05:a6:d1:a7:7a:a4:f1:da:14:f7:
         d4:d4:35:80:85:d5:0d:b2:99:43:7b:3b:09:21:fb:7d:48:8d:
         7e:d5:48:8b:50:ab:62:61:f3:84:ba:b2:12:ff:11:1f:5f:f5:
         fc:69:e0:73:c2:a4:a9:89:d7:51:c8:5a:75:f9:3e:ee:6b:e5:
         00:e5:78:09:a2:0f:83:3e:d8:42:ef:43:af:1b:57:db:8e:a4:
         ba:8c:b8:31:3c:70:43:65:11:c7:d0:61:fb:f7:0f:d3:d0:72:
         c7:f4:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 18:42:16 2026 by rpki-client