This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier: 4HVDu4D1eDLJAZN9asa18tT9nJtJs5+u6yPi8eYutHo=
Subject key identifier: 43:58:86:CB:94:75:1F:8F:D1:A3:D0:36:80:CC:85:EB:49:36:DB:7B
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial: 23AEE2C47B37FBEB08507C1E30D371DA3031C2C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number: 0459
Signing time: Sun 25 Jan 2026 06:57:57 +0000
Manifest this update: Sun 25 Jan 2026 06:52:57 +0000
Manifest next update: Mon 26 Jan 2026 07:29:57 +0000
Files and hashes: 1: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
2: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
3: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: RsSU0dsRyvTcEdesV1ncil2O5FEs72k0cYVnV7HAiS0=)
4: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
5: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=)
6: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ae:e2:c4:7b:37:fb:eb:08:50:7c:1e:30:d3:71:da:30:31:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Validity
Not Before: Jan 25 06:52:57 2026 GMT
Not After : Jan 26 07:29:57 2026 GMT
Subject: CN=435886CB94751F8FD1A3D03680CC85EB4936DB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:b8:99:bf:8c:96:b7:54:b5:1f:51:09:d0:
a1:dd:07:05:62:47:a7:d8:04:43:6d:b2:fc:ae:e9:
8c:51:9b:f8:33:9f:b0:0b:67:f9:30:92:29:a9:a7:
89:d0:a7:23:44:a0:ca:5f:b7:64:11:7e:45:5b:b6:
b9:4f:34:4e:81:ee:96:e8:83:69:41:ad:95:02:c7:
59:62:b6:5b:b1:61:28:92:8c:ea:5f:1b:d6:b1:aa:
50:ea:c0:b3:f0:1b:91:50:51:48:df:8d:78:84:9a:
73:d2:25:82:9e:f2:1e:36:37:c4:9a:d8:b5:88:54:
cd:a8:c7:53:dd:37:79:22:f2:ba:1f:6f:f5:f2:be:
e6:8f:d4:70:b6:8d:bf:19:dd:97:74:16:4d:a1:e6:
aa:40:9b:61:1e:73:d3:71:e5:18:13:7d:79:2e:57:
d9:b9:c6:2f:2c:33:c2:76:88:bc:ce:93:9d:3f:10:
12:a4:18:0d:16:55:84:28:06:6e:44:c8:86:47:45:
c6:40:36:6a:ae:b6:a8:1f:5d:3d:48:5d:80:05:6d:
85:a0:55:60:44:d3:fc:fb:cd:fb:26:08:9c:90:9c:
38:c1:b9:aa:7f:5b:bc:61:ec:fc:d1:a7:ad:f3:ba:
b6:4d:7d:89:73:f4:5a:cc:20:28:75:7d:05:f1:31:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:86:CB:94:75:1F:8F:D1:A3:D0:36:80:CC:85:EB:49:36:DB:7B
X509v3 Authority Key Identifier:
keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a7:d1:1b:e0:71:2d:fb:ff:db:55:3b:dc:46:d1:3b:55:aa:
d0:56:92:af:bd:66:8f:c0:9f:08:bb:a1:fc:7a:e3:40:49:7d:
35:e4:5a:2f:e8:89:bd:ed:17:63:de:e5:39:e9:b2:73:6e:a7:
8d:57:6f:f9:41:07:40:c0:7b:6e:d5:f7:b1:d6:e9:04:78:d7:
e4:df:b8:6d:95:28:84:ec:fd:21:cc:6d:89:71:95:bc:21:d0:
3c:94:29:ee:6f:60:4c:2f:20:6e:9e:20:6b:59:6f:cd:4d:b4:
ab:3c:f4:59:10:ec:de:2b:33:02:d0:9d:53:15:5b:95:09:28:
f3:ea:d3:52:30:a1:d6:12:63:f9:52:a3:cd:f8:86:d6:db:93:
2b:1c:b6:30:4c:c7:8b:f0:e2:4c:47:91:cc:8e:85:1d:d1:2c:
7e:a0:c9:6c:8a:ba:f7:30:d5:86:b2:3e:8f:80:15:8c:3c:e3:
ef:a5:74:54:c6:be:fd:74:1d:6b:9e:a5:1d:44:da:c2:c1:df:
84:10:b9:b2:62:c0:25:82:ec:09:c9:2b:c4:31:f3:07:00:3a:
c9:be:60:ac:62:9a:a9:c7:91:7b:29:3f:e6:20:5f:d1:8e:2f:
16:f4:5b:f3:2a:2c:ea:91:0f:88:df:9c:98:43:cd:11:31:18:
a4:b8:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:02 2026 by rpki-client