This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          WFjx9RfNZZA7T/SLtrsZ40rXa2cSl0t5F3ya9aS1cCc=
Subject key identifier:   57:2B:74:C5:07:16:42:C2:E8:8E:60:4D:47:45:96:F7:16:0B:64:24
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       4257E8F5EE54A701E8CEA0D89D633A98C657231D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0909
Signing time:             Mon 26 Jan 2026 04:22:52 +0000
Manifest this update:     Mon 26 Jan 2026 04:17:52 +0000
Manifest next update:     Tue 27 Jan 2026 06:26:52 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: Ihays3h2jJgwr/2ikpCXXooQ9izZozTq9EZtn/Fjip0=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:57:e8:f5:ee:54:a7:01:e8:ce:a0:d8:9d:63:3a:98:c6:57:23:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Jan 26 04:17:52 2026 GMT
            Not After : Jan 27 06:26:52 2026 GMT
        Subject: CN=572B74C5071642C2E88E604D474596F7160B6424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:fe:8b:47:21:c3:fb:52:6a:fc:71:86:b9:
                    c2:c7:69:a2:ba:97:66:8e:57:13:1f:d2:e4:8f:09:
                    2e:34:34:e1:32:f4:00:17:a8:a9:ef:dc:d2:41:93:
                    3e:dd:04:42:5b:5d:40:4e:d4:6e:6a:70:de:aa:f1:
                    9d:07:10:61:f8:8a:f4:2d:2c:d3:9f:9f:67:96:26:
                    36:dc:0c:53:4e:6c:b3:85:67:f8:47:66:32:b4:7a:
                    54:2b:06:1f:d7:87:9e:6b:e6:d9:88:31:b9:e0:e9:
                    64:ba:cd:db:49:cc:c0:3b:e1:aa:15:a6:fa:83:ed:
                    3f:95:63:d2:10:e1:76:22:5f:dc:f8:1c:c6:e7:79:
                    4b:fd:8e:39:82:9b:fc:54:0e:7f:eb:02:ad:df:a5:
                    c9:79:f8:21:ab:25:cb:be:15:b7:fd:f9:0c:38:59:
                    23:4b:f9:32:6e:de:f2:e4:bf:a7:28:61:d0:bc:e5:
                    98:ac:79:91:41:4b:70:2e:a6:80:51:94:0b:ed:fc:
                    b5:e7:9b:6d:20:0e:cd:7a:09:87:2b:4a:92:49:5d:
                    f4:59:86:5a:69:b7:9c:86:63:c2:09:2a:8a:ee:2c:
                    4f:6e:fc:63:85:91:0c:d2:cc:73:ca:74:4f:41:c8:
                    de:81:c2:74:04:6b:48:34:61:b1:25:9b:a8:1e:8b:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2B:74:C5:07:16:42:C2:E8:8E:60:4D:47:45:96:F7:16:0B:64:24
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:91:00:77:a9:2c:30:e7:db:f2:53:50:65:c5:96:c6:73:89:
         4e:5c:6b:fc:14:df:a3:a5:c1:e2:ca:7e:93:9a:d0:a1:b3:09:
         2b:e4:41:6d:93:6a:2c:a0:57:c6:e8:67:31:f8:fb:92:00:6b:
         21:44:41:7a:65:c3:e2:8b:a0:c7:be:6e:bb:5c:4d:ed:a8:14:
         4c:77:4d:85:b2:f6:be:f7:91:c9:5c:c3:58:1a:7b:75:0c:56:
         bc:d1:e4:c5:34:ae:dc:c6:f8:8b:ce:7a:e7:2a:43:8b:26:cf:
         36:71:d8:e4:9c:80:64:8d:8e:4d:b6:9f:97:3f:97:11:27:25:
         ec:b3:ca:c8:90:fa:58:42:8c:64:20:4f:13:13:0f:49:d6:06:
         28:60:93:26:14:38:ec:70:18:3e:70:68:44:76:f0:ad:ab:ab:
         a5:19:74:25:64:02:d8:e0:a9:e8:bf:db:ee:a4:43:fa:b9:7c:
         b9:ba:41:2a:6e:ab:2a:b4:5f:cd:26:57:ef:b3:51:e2:95:50:
         c8:b2:2f:0b:cf:87:0b:b4:7f:38:f2:09:95:76:77:d8:e2:15:
         ce:c6:b4:b5:40:92:ff:ca:1d:2a:84:52:45:1a:e6:3c:bf:98:
         71:96:b6:b3:de:c3:e3:40:fe:91:fa:6e:ea:56:e9:b9:37:38:
         54:4b:90:fe
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUQlfo9e5UpwHozqDYnWM6mMZXIx0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI2MDEyNjA0MTc1MloX
DTI2MDEyNzA2MjY1MlowMzExMC8GA1UEAxMoNTcyQjc0QzUwNzE2NDJDMkU4OEU2
MDRENDc0NTk2RjcxNjBCNjQyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrz/otHIcP7Umr8cYa5wsdporqXZo5XEx/S5I8JLjQ04TL0ABeoqe/c0kGT
Pt0EQltdQE7Ubmpw3qrxnQcQYfiK9C0s05+fZ5YmNtwMU05ss4Vn+EdmMrR6VCsG
H9eHnmvm2YgxueDpZLrN20nMwDvhqhWm+oPtP5Vj0hDhdiJf3Pgcxud5S/2OOYKb
/FQOf+sCrd+lyXn4Iasly74Vt/35DDhZI0v5Mm7e8uS/pyhh0LzlmKx5kUFLcC6m
gFGUC+38teebbSAOzXoJhytKkkld9FmGWmm3nIZjwgkqiu4sT278Y4WRDNLMc8p0
T0HI3oHCdARrSDRhsSWbqB6L5N8CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBRXK3TF
BxZCwuiOYE1HRZb3FgtkJDAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEmRAHepLDDn2/JTUGXFlsZziU5ca/wU36OlweLKfpOa0KGzCSvkQW2T
aiygV8boZzH4+5IAayFEQXplw+KLoMe+brtcTe2oFEx3TYWy9r73kclcw1gae3UM
VrzR5MU0rtzG+IvOeucqQ4smzzZx2OScgGSNjk22n5c/lxEnJeyzysiQ+lhCjGQg
TxMTD0nWBihgkyYUOOxwGD5waER28K2rq6UZdCVkAtjgqei/2+6kQ/q5fLm6QSpu
qyq0X80mV++zUeKVUMiyLwvPhwu0fzjyCZV2d9jiFc7GtLVAkv/KHSqEUkUa5jy/
mHGWtrPew+NA/pH6bupW6bk3OFRLkP4=
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:32:45 2026 by rpki-client