This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          IwSZcul+iBfoT/LblYMnPOmyeCmo8yaq28guxgNLRGw=
Subject key identifier:   1C:FA:94:DF:F2:71:7D:EA:8A:24:95:ED:6C:80:49:95:A6:E5:37:B5
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       3EA4FD212DD7AE84D9F7133066F5F6A6F471B09A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          07F2
Signing time:             Thu 18 Dec 2025 11:29:04 +0000
Manifest this update:     Thu 18 Dec 2025 11:24:04 +0000
Manifest next update:     Fri 19 Dec 2025 14:15:04 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: KGQ3DYPWkCaaiu9/qIx5L4eR+5jjV3q28tSlt4HdPsU=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 14:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a4:fd:21:2d:d7:ae:84:d9:f7:13:30:66:f5:f6:a6:f4:71:b0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Dec 18 11:24:04 2025 GMT
            Not After : Dec 19 14:15:04 2025 GMT
        Subject: CN=1CFA94DFF2717DEA8A2495ED6C804995A6E537B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:c8:bc:99:88:6b:b7:be:83:a9:2d:72:44:
                    5e:2d:ab:f3:a3:9a:ad:79:60:a3:53:94:da:80:02:
                    4b:23:d5:99:3b:b6:85:78:85:be:33:55:a8:a1:15:
                    89:a0:43:d4:55:97:91:54:83:af:2e:9a:6b:ea:39:
                    01:18:aa:a8:56:6a:a5:dd:0a:81:1d:e7:e5:28:02:
                    05:19:5d:30:24:2d:5d:58:cc:72:a3:3d:9e:cc:72:
                    f9:85:cf:32:07:a3:d3:b8:52:13:dc:5b:f8:b5:dd:
                    f4:8a:60:2e:a4:11:0a:eb:fe:c9:8d:57:2e:82:0b:
                    f4:38:59:4b:f2:17:0b:43:7f:ce:77:91:2d:8f:ec:
                    78:cb:8d:e0:00:9b:5c:61:a9:5c:47:31:8b:78:f9:
                    78:5c:e2:78:b4:32:3d:99:be:21:9d:cf:2c:79:8f:
                    3f:ae:b4:37:8a:62:48:68:bd:d7:5a:78:81:55:40:
                    0c:8f:c0:c7:f6:1d:5d:ac:d5:e3:1d:d8:4b:10:55:
                    26:91:17:f5:b7:20:fc:f5:ac:d0:63:1e:7b:e8:a1:
                    3c:38:dd:49:07:c5:6a:07:68:c6:6c:2b:24:c2:69:
                    38:89:f3:92:25:ac:78:e4:41:44:5c:bb:15:ce:be:
                    f7:bc:ec:f3:46:05:84:1c:b4:7e:2a:38:7f:b3:fe:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FA:94:DF:F2:71:7D:EA:8A:24:95:ED:6C:80:49:95:A6:E5:37:B5
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:ce:fe:d6:3b:b4:5e:dd:83:e4:d5:0d:3f:db:da:67:29:
         53:86:c7:e2:07:8c:26:39:64:81:bb:b0:f4:7d:ca:53:45:5f:
         ab:8a:ce:b1:88:b1:08:87:f0:b3:71:04:78:da:f0:e3:01:1d:
         e3:84:39:58:62:5b:ee:55:05:9a:42:83:f7:8d:a2:b4:4b:a8:
         cc:e9:29:c2:1e:92:53:43:c4:82:d1:a0:cb:03:cc:f1:66:b4:
         de:c6:ab:7c:3b:d9:57:33:35:ac:a4:f7:6e:f0:2c:13:a0:2c:
         bf:d1:db:bc:f0:74:62:c4:20:ab:2c:de:46:ca:b1:5a:03:aa:
         1b:3c:c0:95:05:0b:00:4b:1c:93:1d:b1:35:24:3d:dd:02:bd:
         da:07:e2:f7:15:b0:58:a4:43:73:8b:c6:d9:4e:b8:4c:95:b0:
         ac:6f:3c:48:f7:b6:99:f6:61:72:c8:1a:e8:ce:b7:af:e5:4a:
         8e:1a:aa:26:4d:5e:c0:18:05:70:cb:10:d1:7b:2b:a2:6e:ef:
         e1:0c:90:67:88:88:c7:cd:25:14:39:66:2f:92:2e:5e:ec:0f:
         d7:53:17:d5:56:75:57:4d:9b:73:dc:24:b8:dd:da:70:4e:4e:
         61:c3:52:61:3c:bb:0b:f1:c0:48:50:bd:1e:11:aa:0a:00:1f:
         f5:33:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:21:35 2025 by rpki-client