This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier: RQVMXz24mUe5LhxLN4l4sPlLiIxFnI+aRt8VVM9eVkU=
Subject key identifier: F2:BA:BD:F3:D1:8B:34:CB:74:DA:01:41:FF:E6:FC:69:77:49:BC:0A
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial: 61311F1F73AFA269DA7856778D103AF84283B0B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number: 021D
Signing time: Mon 08 Dec 2025 00:42:13 +0000
Manifest this update: Mon 08 Dec 2025 00:37:13 +0000
Manifest next update: Tue 09 Dec 2025 01:58:13 +0000
Files and hashes: 1: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
2: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
3: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
4: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
5: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
6: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: NZxiNfo3DrsUBzhOVoCf02hXVWTqYoxbuDCVj6FPU/U=)
7: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
8: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
9: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
10: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
11: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 01:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:31:1f:1f:73:af:a2:69:da:78:56:77:8d:10:3a:f8:42:83:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Validity
Not Before: Dec 8 00:37:13 2025 GMT
Not After : Dec 9 01:58:13 2025 GMT
Subject: CN=F2BABDF3D18B34CB74DA0141FFE6FC697749BC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:66:8c:47:2b:5c:36:2c:02:61:28:e0:7b:
a2:57:9d:df:ec:ad:8f:0f:77:c9:66:00:24:73:5c:
f5:13:4f:01:c2:f9:17:e2:e3:fb:bf:f4:10:48:a5:
3e:39:85:06:e8:c7:4a:97:6f:cd:24:09:66:a9:d3:
39:46:e4:8f:dd:59:df:02:72:b1:c2:da:4d:f5:fd:
fd:0c:64:90:bb:93:9a:66:ee:29:3c:76:90:68:17:
02:23:6b:b3:91:b6:dd:2c:f4:08:e7:e8:8b:c7:47:
93:51:c5:c8:e8:2e:f5:6e:3b:f1:14:44:3e:40:e4:
11:66:5d:66:30:91:a4:23:66:f0:12:b7:34:a2:ac:
43:9e:79:c1:5e:03:20:6c:0e:78:90:b2:e4:90:19:
79:0f:98:a3:50:dc:f0:6a:ec:83:49:7b:b7:1b:3a:
46:83:5f:2d:0c:78:32:7c:fb:5b:67:5e:0c:ee:cc:
b6:48:30:79:b0:75:15:b0:9d:4c:6f:2e:e7:fd:7f:
25:fe:e2:cf:bf:14:5c:13:cf:1e:a3:40:e1:ac:58:
8a:20:ff:38:df:4b:11:e4:3c:ea:3b:2d:38:2e:15:
41:39:15:71:39:3c:77:b7:db:7d:da:8f:b3:ea:c0:
c5:02:14:7d:ee:1b:0a:a3:e3:d1:85:0e:31:41:8b:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:BD:F3:D1:8B:34:CB:74:DA:01:41:FF:E6:FC:69:77:49:BC:0A
X509v3 Authority Key Identifier:
keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c4:4e:3e:c3:0b:9a:6f:a9:a4:de:86:c9:c8:79:05:58:94:
d9:a5:74:88:6e:e7:6b:e0:37:53:55:7f:ce:7c:22:02:86:2f:
af:c0:21:12:20:57:7d:ce:65:83:b1:08:5b:af:82:6a:b2:15:
49:f5:c8:03:4a:97:8f:a7:3e:60:f6:45:ac:41:32:92:e5:ce:
0a:ba:3a:51:f9:8c:2e:ba:22:a3:26:35:fb:77:d7:65:38:58:
26:7f:3d:8c:41:76:d9:15:ec:fd:dd:97:0b:f6:02:0d:49:f3:
99:1f:6e:ac:48:95:79:ec:5a:4d:52:ec:9a:f1:87:37:dd:4e:
0c:bb:f5:df:ea:39:b4:dc:29:89:71:67:9c:ac:83:17:83:f0:
59:5e:49:ab:d8:d2:a0:b1:3f:0a:45:6d:42:aa:dd:25:f3:ef:
fa:eb:20:00:67:57:09:8a:3b:49:c0:8b:92:f5:8a:2f:d8:88:
b0:d3:21:f9:52:0d:21:cd:72:91:37:f1:06:74:fa:c1:ec:24:
9b:ca:30:7c:f8:de:0c:f0:ce:c0:fd:02:3f:df:ab:22:ef:39:
14:ee:c8:c8:cd:3b:7b:e4:4e:fe:9b:ba:07:62:4d:cc:80:da:
bd:39:2d:5a:cf:3b:19:72:7e:ff:e0:4e:d6:72:0c:dc:74:47:
91:88:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:41 2025 by rpki-client