This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          He4KX4sIdy3TKMuMPjQsfWoESjk7LZf+tPLP1SukrUg=
Subject key identifier:   F5:8B:7D:C1:0D:36:FB:59:71:02:3C:A0:7C:24:B0:1A:42:96:3A:21
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       16101D4F13A9E1381D0241456DBCD2A23FFD69E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          069A
Signing time:             Mon 01 Dec 2025 01:39:04 +0000
Manifest this update:     Mon 01 Dec 2025 01:34:04 +0000
Manifest next update:     Tue 02 Dec 2025 02:13:04 +0000
Files and hashes:         1: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: bQhB6TYjZfdZKeRmNkA2EXFkm1G0X/1ZcLDrTeBa1c4=)
                          3: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: s9FDqt9NMwoNGnIn7/7u0Ttp9C2BeQx/Ij6nJtSod6s=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Dec 2025 02:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:10:1d:4f:13:a9:e1:38:1d:02:41:45:6d:bc:d2:a2:3f:fd:69:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Dec  1 01:34:04 2025 GMT
            Not After : Dec  2 02:13:04 2025 GMT
        Subject: CN=F58B7DC10D36FB5971023CA07C24B01A42963A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:5f:7c:2e:9b:be:bc:51:24:26:d6:03:e4:
                    d8:11:8b:0a:fc:46:22:d9:3b:d5:a4:c4:4b:a3:c5:
                    8a:74:e6:d4:37:52:fe:18:99:a2:60:47:25:f9:41:
                    2e:1d:85:12:04:10:76:fc:b7:dd:7e:27:ae:e1:f4:
                    72:68:a8:ce:52:0b:ac:e4:d0:5f:ed:56:8d:60:ce:
                    72:0c:fb:43:34:2d:22:c3:4e:6f:43:7e:fc:42:71:
                    79:d0:5f:82:11:be:3d:6c:32:0d:14:8e:3f:2c:6c:
                    e4:2f:63:09:85:d7:6e:0d:e9:40:de:18:e2:3e:da:
                    2e:c0:b3:f6:29:ce:74:ff:21:f8:c4:d5:f0:a0:c8:
                    9f:fc:aa:1f:d1:81:29:e5:50:10:16:3d:7b:4c:f8:
                    03:15:67:91:76:c5:e5:4b:bf:51:c7:0b:8c:37:c2:
                    b2:88:7f:27:87:fd:cd:66:7c:ea:fd:e3:93:37:42:
                    8f:72:de:54:3c:84:d0:9a:0b:08:c0:1f:54:fa:ca:
                    31:ab:55:a4:da:d3:62:17:70:be:06:c1:8e:70:cc:
                    34:3c:be:39:47:3c:66:5e:d8:88:46:38:86:2c:26:
                    76:7f:fe:14:c8:f0:a9:60:98:9d:6e:fd:ec:cb:a6:
                    02:5f:1c:2d:c0:a3:9d:e9:43:1a:29:46:34:e6:5f:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8B:7D:C1:0D:36:FB:59:71:02:3C:A0:7C:24:B0:1A:42:96:3A:21
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:df:ce:9b:0d:a7:4d:04:d1:27:c1:5e:63:3e:72:25:c3:f1:
         72:26:96:9e:da:91:9d:5b:34:12:d3:94:81:39:5d:80:05:ac:
         97:18:64:ff:dc:d1:2a:61:0b:46:88:3f:85:53:f6:ff:7b:b7:
         72:15:08:ba:ff:2f:ee:77:e9:08:32:b6:e8:e8:a5:b7:54:a3:
         91:da:d7:59:6b:39:c2:92:13:4c:f2:82:ad:6a:cb:a6:b0:18:
         67:6e:10:89:ca:be:49:59:6a:74:8b:c9:09:66:28:1e:3e:e3:
         37:b8:6c:e7:4d:cf:f9:89:30:aa:b8:32:ae:33:87:1c:ac:42:
         ec:00:3b:83:61:49:2d:00:16:56:a1:b5:6b:9b:6a:5c:79:a3:
         7b:a0:17:9e:5f:42:48:77:88:fd:9a:ba:e9:0c:73:94:2c:a8:
         b4:24:ad:f2:94:61:69:b9:25:13:49:d6:df:6a:28:39:69:1a:
         06:73:70:a4:69:28:8d:06:46:71:34:5f:e0:83:24:a6:60:94:
         c0:a5:4f:5e:78:16:b0:d5:3b:02:68:b8:97:b6:bd:e8:ca:f8:
         d8:73:cc:ca:6d:24:b7:37:cb:88:63:bc:0f:4b:c9:73:e7:05:
         f2:d8:5a:32:0c:a4:e5:48:04:e9:57:b7:d2:8b:f2:93:c6:3c:
         d1:d6:73:eb
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUFhAdTxOp4TgdAkFFbbzSoj/9aeYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI1MTIwMTAxMzQwNFoX
DTI1MTIwMjAyMTMwNFowMzExMC8GA1UEAxMoRjU4QjdEQzEwRDM2RkI1OTcxMDIz
Q0EwN0MyNEIwMUE0Mjk2M0EyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbYX3wum768USQm1gPk2BGLCvxGItk71aTES6PFinTm1DdS/hiZomBHJflB
Lh2FEgQQdvy33X4nruH0cmiozlILrOTQX+1WjWDOcgz7QzQtIsNOb0N+/EJxedBf
ghG+PWwyDRSOPyxs5C9jCYXXbg3pQN4Y4j7aLsCz9inOdP8h+MTV8KDIn/yqH9GB
KeVQEBY9e0z4AxVnkXbF5Uu/UccLjDfCsoh/J4f9zWZ86v3jkzdCj3LeVDyE0JoL
CMAfVPrKMatVpNrTYhdwvgbBjnDMNDy+OUc8Zl7YiEY4hiwmdn/+FMjwqWCYnW79
7MumAl8cLcCjnelDGilGNOZfoncCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBT1i33B
DTb7WXECPKB8JLAaQpY6ITAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJvfzpsNp00E0SfBXmM+ciXD8XImlp7akZ1bNBLTlIE5XYAFrJcYZP/c
0SphC0aIP4VT9v97t3IVCLr/L+536QgytujopbdUo5Ha11lrOcKSE0zygq1qy6aw
GGduEInKvklZanSLyQlmKB4+4ze4bOdNz/mJMKq4Mq4zhxysQuwAO4NhSS0AFlah
tWubalx5o3ugF55fQkh3iP2auukMc5QsqLQkrfKUYWm5JRNJ1t9qKDlpGgZzcKRp
KI0GRnE0X+CDJKZglMClT154FrDVOwJouJe2vejK+NhzzMptJLc3y4hjvA9LyXPn
BfLYWjIMpOVIBOlXt9KL8pPGPNHWc+s=
-----END CERTIFICATE-----
Generated at Mon Dec 1 06:32:59 2025 by rpki-client