This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier: SeJNjd3g0+BnbxLNOX6qmpAqKqHvOfaEDoVu3kaKl9I=
Subject key identifier: 88:91:DC:22:D8:4C:FF:D6:DA:54:11:FE:DF:0B:D7:73:3F:A1:C7:46
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial: 4A650C1D7C7CDE65B698880D172EE8BDF30099CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number: 0906
Signing time: Sun 25 Jan 2026 13:32:12 +0000
Manifest this update: Sun 25 Jan 2026 13:27:12 +0000
Manifest next update: Mon 26 Jan 2026 15:09:12 +0000
Files and hashes: 1: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: UxSlV/6Knvl4tpv7hh5F+gAJvImv7NpKT6QEuJ9sJmo=)
2: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: STtANPVeMV702+YAKdbzifPm1SzEYt2m3qNx2cLNEjA=)
3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
4: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 15:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:65:0c:1d:7c:7c:de:65:b6:98:88:0d:17:2e:e8:bd:f3:00:99:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Validity
Not Before: Jan 25 13:27:12 2026 GMT
Not After : Jan 26 15:09:12 2026 GMT
Subject: CN=8891DC22D84CFFD6DA5411FEDF0BD7733FA1C746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:c2:67:32:57:2a:8e:50:31:22:d3:d3:78:
75:5d:b6:3e:3c:6c:b2:aa:be:a8:a0:16:46:60:79:
13:ab:e8:00:df:cc:aa:d8:20:27:89:42:b1:1a:32:
9f:2e:08:c0:49:7d:d0:14:60:eb:98:f8:65:04:54:
c7:e0:89:ef:66:6d:04:f3:c6:0e:98:13:9b:35:a8:
c9:4c:73:30:1e:5c:34:44:8b:f6:c5:94:76:4d:c7:
65:bb:89:84:9c:77:c9:6e:06:31:63:ec:de:40:0f:
8d:1c:35:a8:80:f3:28:7b:2b:ce:0a:31:b5:55:e5:
4d:80:6f:40:dc:8d:b5:23:fd:83:cb:63:cf:42:0f:
66:4c:f4:ba:b6:38:f8:07:28:a7:14:a9:c3:b8:7d:
f7:43:d2:de:f7:2e:3e:7e:13:07:d3:e2:01:c7:7c:
e4:17:cd:9a:58:d6:3a:33:3c:d1:38:61:e4:29:64:
f5:fb:f6:85:31:5e:37:0f:41:4a:b1:03:2d:d3:ea:
83:c5:e6:14:06:1f:c4:c6:d4:33:43:48:3e:50:39:
6c:1d:59:3c:6f:48:de:e3:03:5c:03:ed:d6:8d:3e:
24:20:0a:eb:59:eb:99:92:d1:01:72:2a:19:3c:4c:
cc:60:6f:3f:3a:ed:26:36:67:14:86:89:ea:5c:e0:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:DC:22:D8:4C:FF:D6:DA:54:11:FE:DF:0B:D7:73:3F:A1:C7:46
X509v3 Authority Key Identifier:
keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a1:4b:1c:99:86:b5:2f:a9:1a:4a:8b:ae:de:68:75:2e:87:
63:ea:18:fa:8e:54:86:49:b6:a0:ec:db:94:bb:b9:f5:f5:45:
db:0f:a3:22:b2:e0:12:93:2e:dc:2b:0c:89:4d:34:aa:3f:63:
dc:b5:cf:dd:96:65:18:88:2f:f4:9e:12:84:01:bd:4f:96:e4:
94:18:28:0f:6b:fd:6b:d3:6c:c2:b3:47:c1:0a:bf:e9:13:44:
b9:91:78:e3:1c:02:2e:56:f0:1a:56:cc:cf:62:d1:66:25:d0:
68:b4:f3:94:60:12:e2:36:5a:ee:a2:09:4b:25:28:d5:a6:20:
6a:ff:d9:b6:af:62:c4:a2:c0:d3:58:55:dc:b7:ef:db:51:f8:
70:ef:d8:b7:84:42:70:6b:df:80:3f:29:3c:b8:c6:73:48:6a:
e3:a3:04:55:18:ee:96:21:c6:e1:fd:72:cd:f9:e2:f4:26:b9:
80:dc:63:02:fe:98:d7:81:bc:1b:ad:2f:3a:6a:4e:9b:d7:10:
fd:1b:93:a3:56:46:7e:8b:09:aa:a6:ea:79:9d:d7:bb:f5:8e:
e6:1e:5f:7f:d4:e4:0a:37:63:7a:92:5f:80:76:61:bd:30:e4:
7e:c1:b8:b2:d2:d1:f0:15:1c:5b:57:cc:ca:99:7a:af:dc:09:
f3:90:1d:65
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUSmUMHXx83mW2mIgNFy7ovfMAmc0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI2MDEyNTEzMjcxMloX
DTI2MDEyNjE1MDkxMlowMzExMC8GA1UEAxMoODg5MURDMjJEODRDRkZENkRBNTQx
MUZFREYwQkQ3NzMzRkExQzc0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALPSwmcyVyqOUDEi09N4dV22Pjxssqq+qKAWRmB5E6voAN/MqtggJ4lCsRoy
ny4IwEl90BRg65j4ZQRUx+CJ72ZtBPPGDpgTmzWoyUxzMB5cNESL9sWUdk3HZbuJ
hJx3yW4GMWPs3kAPjRw1qIDzKHsrzgoxtVXlTYBvQNyNtSP9g8tjz0IPZkz0urY4
+AcopxSpw7h990PS3vcuPn4TB9PiAcd85BfNmljWOjM80Thh5Clk9fv2hTFeNw9B
SrEDLdPqg8XmFAYfxMbUM0NIPlA5bB1ZPG9I3uMDXAPt1o0+JCAK61nrmZLRAXIq
GTxMzGBvPzrtJjZnFIaJ6lzgNIkCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSIkdwi
2Ez/1tpUEf7fC9dzP6HHRjAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzUvMjNCMTAzMEYzQ0NBQzk5OUYyQjU3NzQ1RkM5RERBMUNDREZBMzYzMC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAB2hSxyZhrUvqRpKi67eaHUuh2PqGPqOVIZJtqDs25S7ufX1RdsPoyKy
4BKTLtwrDIlNNKo/Y9y1z92WZRiIL/SeEoQBvU+W5JQYKA9r/WvTbMKzR8EKv+kT
RLmReOMcAi5W8BpWzM9i0WYl0Gi085RgEuI2Wu6iCUslKNWmIGr/2bavYsSiwNNY
Vdy379tR+HDv2LeEQnBr34A/KTy4xnNIauOjBFUY7pYhxuH9cs354vQmuYDcYwL+
mNeBvButLzpqTpvXEP0bk6NWRn6LCaqm6nmd17v1juYeX3/U5Ao3Y3qSX4B2Yb0w
5H7BuLLS0fAVHFtXzMqZeq/cCfOQHWU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:38:10 2026 by rpki-client