This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          XIKDmRlRHP5JaYdHp0idrxiHEE/pXWjDS+ZU91/pPUk=
Subject key identifier:   82:CF:0C:11:01:68:03:55:A3:1E:4B:3D:0F:FC:82:D3:10:76:07:51
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       3471860154311FBAC0E3636B6BFC118D86FCB71A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          046B
Signing time:             Wed 28 Jan 2026 19:59:17 +0000
Manifest this update:     Wed 28 Jan 2026 19:54:17 +0000
Manifest next update:     Thu 29 Jan 2026 23:22:17 +0000
Files and hashes:         1: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=)
                          2: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
                          3: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=)
                          4: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
                          5: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: 9AbBmU6MRGI1mWoz9PQyB7tpXC4TJXWQ5XKxFxHQ3tY=)
                          6: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Jan 2026 23:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:71:86:01:54:31:1f:ba:c0:e3:63:6b:6b:fc:11:8d:86:fc:b7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jan 28 19:54:17 2026 GMT
            Not After : Jan 29 23:22:17 2026 GMT
        Subject: CN=82CF0C1101680355A31E4B3D0FFC82D310760751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:8e:69:7f:10:ba:37:cf:f2:e1:6c:19:b5:
                    6d:5d:53:a1:90:4f:d8:ce:f2:47:26:e1:d9:d5:e2:
                    3d:0f:82:94:07:e7:93:c7:45:2e:f0:ba:d5:c4:1c:
                    6d:3c:02:8f:13:40:c7:8a:b7:10:63:4a:b4:94:8d:
                    d8:bd:bd:de:aa:c0:27:83:e3:27:94:00:2f:73:46:
                    69:64:25:6e:9e:58:b1:fc:10:80:d5:fa:e4:70:bf:
                    68:3b:4c:dd:4f:19:aa:9f:6c:9b:c4:34:fb:fd:e3:
                    51:c8:00:84:0b:84:a6:1a:28:fb:d1:9e:6e:81:2f:
                    5e:53:79:25:8b:4a:83:e4:7a:11:76:03:c8:7f:92:
                    50:13:8b:e2:a7:57:30:11:71:9a:55:76:10:69:06:
                    3e:c2:18:d6:d3:d7:dd:a1:cb:af:68:0e:5c:43:e3:
                    31:81:93:a9:21:fd:08:20:49:55:b0:da:d0:94:17:
                    93:a1:c3:f5:e5:90:78:89:e1:23:2e:00:9a:21:0f:
                    e6:5e:4e:fb:f0:57:c7:d6:5f:fb:b6:26:b6:bf:b3:
                    8b:cb:3c:1c:05:ba:b8:0e:70:6b:8b:13:f4:4e:93:
                    6c:5f:5d:23:93:8c:b9:78:ad:21:5a:4e:ab:6f:1d:
                    1a:a4:fd:05:03:fd:06:9b:01:d8:e0:e7:6b:4b:e1:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:0C:11:01:68:03:55:A3:1E:4B:3D:0F:FC:82:D3:10:76:07:51
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:bc:54:81:cd:c5:a0:bb:3d:51:98:14:de:b3:2e:28:06:
         a9:4f:5f:72:76:d4:90:a1:66:f9:82:53:36:4b:70:d2:7e:eb:
         92:2d:60:1a:d4:da:0a:82:cb:88:aa:15:63:3d:50:48:5e:ac:
         09:c2:4b:5a:5e:89:e9:b2:0c:c9:00:d3:13:14:4c:4f:dd:c6:
         32:a0:cb:f4:d6:5e:08:3a:47:76:23:d4:e6:5a:e8:a3:25:5a:
         63:7e:c8:4f:ce:43:f4:46:c3:73:4d:5c:5e:2f:1b:11:58:97:
         f9:3d:45:a4:d2:2a:65:5b:c0:18:04:aa:61:a7:63:ec:6c:f1:
         52:3e:10:71:6c:1d:39:47:b5:4b:c5:c7:bc:da:b8:5f:1c:bb:
         8b:8c:b1:90:7c:17:e4:00:be:db:95:ef:aa:31:78:bb:55:ac:
         06:82:88:75:74:99:ab:6c:fd:db:01:4a:39:36:8a:2e:4c:4b:
         e9:1d:14:45:f3:d9:53:e4:b5:ae:c8:dc:c2:68:fe:93:1b:4a:
         e2:5a:dc:b5:93:78:ab:51:69:10:71:83:14:03:59:05:69:a3:
         44:4b:68:bb:99:4a:69:c9:ac:5e:fa:95:f7:c3:46:80:33:87:
         60:78:e6:17:aa:df:84:d9:c8:77:ef:de:28:15:22:68:1c:8c:
         20:a0:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:23:29 2026 by rpki-client