This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
File:                     23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json)
Hash identifier:          SeJNjd3g0+BnbxLNOX6qmpAqKqHvOfaEDoVu3kaKl9I=
Subject key identifier:   88:91:DC:22:D8:4C:FF:D6:DA:54:11:FE:DF:0B:D7:73:3F:A1:C7:46
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Certificate issuer:       /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial:       4A650C1D7C7CDE65B698880D172EE8BDF30099CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
Manifest number:          0906
Signing time:             Sun 25 Jan 2026 13:32:12 +0000
Manifest this update:     Sun 25 Jan 2026 13:27:12 +0000
Manifest next update:     Mon 26 Jan 2026 15:09:12 +0000
Files and hashes:         1: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: UxSlV/6Knvl4tpv7hh5F+gAJvImv7NpKT6QEuJ9sJmo=)
                          2: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: STtANPVeMV702+YAKdbzifPm1SzEYt2m3qNx2cLNEjA=)
                          3: 3136302e32322e3136382e302f32332d3332203d3e20313439333031.roa (hash: AHRW5blq6or1lZiTurf+biHje3bwxw8gHPaYSscchAY=)
                          4: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 15:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:65:0c:1d:7c:7c:de:65:b6:98:88:0d:17:2e:e8:bd:f3:00:99:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
        Validity
            Not Before: Jan 25 13:27:12 2026 GMT
            Not After : Jan 26 15:09:12 2026 GMT
        Subject: CN=8891DC22D84CFFD6DA5411FEDF0BD7733FA1C746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:c2:67:32:57:2a:8e:50:31:22:d3:d3:78:
                    75:5d:b6:3e:3c:6c:b2:aa:be:a8:a0:16:46:60:79:
                    13:ab:e8:00:df:cc:aa:d8:20:27:89:42:b1:1a:32:
                    9f:2e:08:c0:49:7d:d0:14:60:eb:98:f8:65:04:54:
                    c7:e0:89:ef:66:6d:04:f3:c6:0e:98:13:9b:35:a8:
                    c9:4c:73:30:1e:5c:34:44:8b:f6:c5:94:76:4d:c7:
                    65:bb:89:84:9c:77:c9:6e:06:31:63:ec:de:40:0f:
                    8d:1c:35:a8:80:f3:28:7b:2b:ce:0a:31:b5:55:e5:
                    4d:80:6f:40:dc:8d:b5:23:fd:83:cb:63:cf:42:0f:
                    66:4c:f4:ba:b6:38:f8:07:28:a7:14:a9:c3:b8:7d:
                    f7:43:d2:de:f7:2e:3e:7e:13:07:d3:e2:01:c7:7c:
                    e4:17:cd:9a:58:d6:3a:33:3c:d1:38:61:e4:29:64:
                    f5:fb:f6:85:31:5e:37:0f:41:4a:b1:03:2d:d3:ea:
                    83:c5:e6:14:06:1f:c4:c6:d4:33:43:48:3e:50:39:
                    6c:1d:59:3c:6f:48:de:e3:03:5c:03:ed:d6:8d:3e:
                    24:20:0a:eb:59:eb:99:92:d1:01:72:2a:19:3c:4c:
                    cc:60:6f:3f:3a:ed:26:36:67:14:86:89:ea:5c:e0:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:91:DC:22:D8:4C:FF:D6:DA:54:11:FE:DF:0B:D7:73:3F:A1:C7:46
            X509v3 Authority Key Identifier:
                keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:4b:1c:99:86:b5:2f:a9:1a:4a:8b:ae:de:68:75:2e:87:
         63:ea:18:fa:8e:54:86:49:b6:a0:ec:db:94:bb:b9:f5:f5:45:
         db:0f:a3:22:b2:e0:12:93:2e:dc:2b:0c:89:4d:34:aa:3f:63:
         dc:b5:cf:dd:96:65:18:88:2f:f4:9e:12:84:01:bd:4f:96:e4:
         94:18:28:0f:6b:fd:6b:d3:6c:c2:b3:47:c1:0a:bf:e9:13:44:
         b9:91:78:e3:1c:02:2e:56:f0:1a:56:cc:cf:62:d1:66:25:d0:
         68:b4:f3:94:60:12:e2:36:5a:ee:a2:09:4b:25:28:d5:a6:20:
         6a:ff:d9:b6:af:62:c4:a2:c0:d3:58:55:dc:b7:ef:db:51:f8:
         70:ef:d8:b7:84:42:70:6b:df:80:3f:29:3c:b8:c6:73:48:6a:
         e3:a3:04:55:18:ee:96:21:c6:e1:fd:72:cd:f9:e2:f4:26:b9:
         80:dc:63:02:fe:98:d7:81:bc:1b:ad:2f:3a:6a:4e:9b:d7:10:
         fd:1b:93:a3:56:46:7e:8b:09:aa:a6:ea:79:9d:d7:bb:f5:8e:
         e6:1e:5f:7f:d4:e4:0a:37:63:7a:92:5f:80:76:61:bd:30:e4:
         7e:c1:b8:b2:d2:d1:f0:15:1c:5b:57:cc:ca:99:7a:af:dc:09:
         f3:90:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:38:10 2026 by rpki-client