This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          SGxQpAGXq9adAuJwFeae/e+pLq7i49uGJZGssL+YzeA=
Subject key identifier:   BA:DC:04:41:CB:F3:02:C2:EA:04:1B:4F:CD:0F:9F:A1:67:AD:36:1F
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       4BA321D9D2503FA2BD66B1776896B2A0B16C9A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          083F
Signing time:             Mon 29 Dec 2025 07:10:38 +0000
Manifest this update:     Mon 29 Dec 2025 07:05:38 +0000
Manifest next update:     Tue 30 Dec 2025 08:57:38 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: tCHi86iahnRnwKe26vP6RaN5BzflNyWA/uCZjJ23TGs=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 08:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a3:21:d9:d2:50:3f:a2:bd:66:b1:77:68:96:b2:a0:b1:6c:9a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Dec 29 07:05:38 2025 GMT
            Not After : Dec 30 08:57:38 2025 GMT
        Subject: CN=BADC0441CBF302C2EA041B4FCD0F9FA167AD361F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:70:a4:af:eb:11:44:a2:5c:94:2a:81:ed:
                    ff:3a:1c:1d:e2:1a:f8:e1:ba:8b:58:52:a0:9a:b4:
                    4b:2b:3b:26:ce:91:a6:8e:1a:1a:65:66:37:b5:5e:
                    e5:25:9d:8c:67:eb:e1:a8:49:29:f4:ee:00:f0:d9:
                    c7:c5:b4:5f:2d:60:cf:88:5c:cb:32:ef:8e:79:f2:
                    13:d4:8f:0d:82:c9:dd:e0:6a:88:1f:44:27:d8:5f:
                    3d:df:66:37:d1:95:29:fe:22:89:39:b0:f2:e5:dd:
                    65:ee:88:b3:f8:54:d2:ff:5e:52:c9:d6:49:e0:0d:
                    f2:4e:94:34:2b:69:0b:53:c2:7c:7a:df:f5:98:59:
                    d0:ee:3d:7d:0a:bd:e5:56:36:a5:f3:b2:2b:1c:1d:
                    14:05:68:ec:0a:5f:15:5b:b2:78:ae:09:dd:ac:0d:
                    75:99:5a:5f:e9:e1:3e:30:a3:cd:3b:c7:9b:1f:ed:
                    fd:6a:ea:6a:76:67:7c:7c:e3:16:a5:13:66:22:44:
                    63:b6:39:c7:69:4e:18:b5:0a:ae:7b:79:92:71:1c:
                    da:6c:78:41:8a:c3:5d:06:22:54:20:df:13:fe:6e:
                    03:66:a8:c0:6d:05:5b:73:3f:a1:49:d0:e1:37:b9:
                    fc:ce:57:74:89:12:61:1a:fa:e6:46:b9:a3:10:3b:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:04:41:CB:F3:02:C2:EA:04:1B:4F:CD:0F:9F:A1:67:AD:36:1F
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:e8:03:ca:41:9b:30:97:f2:1f:35:08:87:97:bb:02:36:
         9e:e5:42:48:f6:51:0b:db:63:8c:0a:7c:f9:14:1d:bd:6e:60:
         0a:ad:f6:9f:1c:f3:c4:51:4b:b4:74:48:97:58:0d:ef:22:41:
         d9:06:49:b7:b0:f1:9e:af:75:da:ef:ea:62:e0:22:dd:55:26:
         8e:38:94:8d:8a:c0:db:60:0c:7d:58:1d:39:52:ed:c6:f5:37:
         f9:5b:4b:03:b6:3f:d2:3b:eb:90:63:2f:37:c5:60:22:ce:0a:
         dd:ed:6f:24:2c:ab:d7:a1:46:84:03:c7:44:17:f0:f5:b7:55:
         f7:37:78:c1:53:50:8a:34:17:fd:5a:a0:e7:55:cc:cf:24:0c:
         95:49:cb:0a:50:ef:b1:0e:03:e5:52:63:fa:13:1a:d3:4d:df:
         0f:51:80:67:75:a5:6d:60:9e:06:89:92:2f:77:2d:73:5f:cf:
         cd:77:23:65:e7:51:95:b6:65:aa:b2:50:07:ad:7a:9c:e4:85:
         81:6a:84:f2:4e:cb:7f:c4:b1:7b:2d:42:19:2e:6c:cd:db:56:
         43:78:95:a8:ac:6e:27:38:e4:32:76:73:da:28:83:31:51:34:
         e6:56:d2:c3:30:5f:f1:4a:16:36:bf:a8:5b:27:2c:e6:30:d2:
         2e:5d:b6:c0
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUS6Mh2dJQP6K9ZrF3aJayoLFsmoIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI1MTIyOTA3MDUzOFoX
DTI1MTIzMDA4NTczOFowMzExMC8GA1UEAxMoQkFEQzA0NDFDQkYzMDJDMkVBMDQx
QjRGQ0QwRjlGQTE2N0FEMzYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL33cKSv6xFEolyUKoHt/zocHeIa+OG6i1hSoJq0Sys7Js6Rpo4aGmVmN7Ve
5SWdjGfr4ahJKfTuAPDZx8W0Xy1gz4hcyzLvjnnyE9SPDYLJ3eBqiB9EJ9hfPd9m
N9GVKf4iiTmw8uXdZe6Is/hU0v9eUsnWSeAN8k6UNCtpC1PCfHrf9ZhZ0O49fQq9
5VY2pfOyKxwdFAVo7ApfFVuyeK4J3awNdZlaX+nhPjCjzTvHmx/t/WrqanZnfHzj
FqUTZiJEY7Y5x2lOGLUKrnt5knEc2mx4QYrDXQYiVCDfE/5uA2aowG0FW3M/oUnQ
4Te5/M5XdIkSYRr65ka5oxA7LekCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBS63ARB
y/MCwuoEG0/ND5+hZ602HzAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA256APKQZswl/IfNQiHl7sCNp7lQkj2UQvbY4wKfPkUHb1uYAqt9p8c
88RRS7R0SJdYDe8iQdkGSbew8Z6vddrv6mLgIt1VJo44lI2KwNtgDH1YHTlS7cb1
N/lbSwO2P9I765BjLzfFYCLOCt3tbyQsq9ehRoQDx0QX8PW3Vfc3eMFTUIo0F/1a
oOdVzM8kDJVJywpQ77EOA+VSY/oTGtNN3w9RgGd1pW1gngaJki93LXNfz813I2Xn
UZW2ZaqyUAetepzkhYFqhPJOy3/EsXstQhkubM3bVkN4laisbic45DJ2c9oogzFR
NOZW0sMwX/FKFja/qFsnLOYw0i5dtsA=
-----END CERTIFICATE-----
Generated at Mon Dec 29 16:26:46 2025 by rpki-client