This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          RQVMXz24mUe5LhxLN4l4sPlLiIxFnI+aRt8VVM9eVkU=
Subject key identifier:   F2:BA:BD:F3:D1:8B:34:CB:74:DA:01:41:FF:E6:FC:69:77:49:BC:0A
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       61311F1F73AFA269DA7856778D103AF84283B0B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          021D
Signing time:             Mon 08 Dec 2025 00:42:13 +0000
Manifest this update:     Mon 08 Dec 2025 00:37:13 +0000
Manifest next update:     Tue 09 Dec 2025 01:58:13 +0000
Files and hashes:         1: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
                          2: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
                          3: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
                          4: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
                          5: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
                          6: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: NZxiNfo3DrsUBzhOVoCf02hXVWTqYoxbuDCVj6FPU/U=)
                          7: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
                          8: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
                          9: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
                          10: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
                          11: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 01:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:1f:1f:73:af:a2:69:da:78:56:77:8d:10:3a:f8:42:83:b0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Dec  8 00:37:13 2025 GMT
            Not After : Dec  9 01:58:13 2025 GMT
        Subject: CN=F2BABDF3D18B34CB74DA0141FFE6FC697749BC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:66:8c:47:2b:5c:36:2c:02:61:28:e0:7b:
                    a2:57:9d:df:ec:ad:8f:0f:77:c9:66:00:24:73:5c:
                    f5:13:4f:01:c2:f9:17:e2:e3:fb:bf:f4:10:48:a5:
                    3e:39:85:06:e8:c7:4a:97:6f:cd:24:09:66:a9:d3:
                    39:46:e4:8f:dd:59:df:02:72:b1:c2:da:4d:f5:fd:
                    fd:0c:64:90:bb:93:9a:66:ee:29:3c:76:90:68:17:
                    02:23:6b:b3:91:b6:dd:2c:f4:08:e7:e8:8b:c7:47:
                    93:51:c5:c8:e8:2e:f5:6e:3b:f1:14:44:3e:40:e4:
                    11:66:5d:66:30:91:a4:23:66:f0:12:b7:34:a2:ac:
                    43:9e:79:c1:5e:03:20:6c:0e:78:90:b2:e4:90:19:
                    79:0f:98:a3:50:dc:f0:6a:ec:83:49:7b:b7:1b:3a:
                    46:83:5f:2d:0c:78:32:7c:fb:5b:67:5e:0c:ee:cc:
                    b6:48:30:79:b0:75:15:b0:9d:4c:6f:2e:e7:fd:7f:
                    25:fe:e2:cf:bf:14:5c:13:cf:1e:a3:40:e1:ac:58:
                    8a:20:ff:38:df:4b:11:e4:3c:ea:3b:2d:38:2e:15:
                    41:39:15:71:39:3c:77:b7:db:7d:da:8f:b3:ea:c0:
                    c5:02:14:7d:ee:1b:0a:a3:e3:d1:85:0e:31:41:8b:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BA:BD:F3:D1:8B:34:CB:74:DA:01:41:FF:E6:FC:69:77:49:BC:0A
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c4:4e:3e:c3:0b:9a:6f:a9:a4:de:86:c9:c8:79:05:58:94:
         d9:a5:74:88:6e:e7:6b:e0:37:53:55:7f:ce:7c:22:02:86:2f:
         af:c0:21:12:20:57:7d:ce:65:83:b1:08:5b:af:82:6a:b2:15:
         49:f5:c8:03:4a:97:8f:a7:3e:60:f6:45:ac:41:32:92:e5:ce:
         0a:ba:3a:51:f9:8c:2e:ba:22:a3:26:35:fb:77:d7:65:38:58:
         26:7f:3d:8c:41:76:d9:15:ec:fd:dd:97:0b:f6:02:0d:49:f3:
         99:1f:6e:ac:48:95:79:ec:5a:4d:52:ec:9a:f1:87:37:dd:4e:
         0c:bb:f5:df:ea:39:b4:dc:29:89:71:67:9c:ac:83:17:83:f0:
         59:5e:49:ab:d8:d2:a0:b1:3f:0a:45:6d:42:aa:dd:25:f3:ef:
         fa:eb:20:00:67:57:09:8a:3b:49:c0:8b:92:f5:8a:2f:d8:88:
         b0:d3:21:f9:52:0d:21:cd:72:91:37:f1:06:74:fa:c1:ec:24:
         9b:ca:30:7c:f8:de:0c:f0:ce:c0:fd:02:3f:df:ab:22:ef:39:
         14:ee:c8:c8:cd:3b:7b:e4:4e:fe:9b:ba:07:62:4d:cc:80:da:
         bd:39:2d:5a:cf:3b:19:72:7e:ff:e0:4e:d6:72:0c:dc:74:47:
         91:88:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:41 2025 by rpki-client