This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
File:                     6ED84CFF4976B923E315096476DD6623E49C8B79.mft (raw, json)
Hash identifier:          XZd9nreJnegtjEmM/ml4WPAF9bfRKTJXGZqJl6cHfUI=
Subject key identifier:   91:21:5C:46:84:8E:5F:B7:F8:BD:DD:55:E0:39:A3:FB:60:6F:77:12
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial:       17018AFD4D6DD18A4DEDFC14A95A28AA40B457AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
Manifest number:          0457
Signing time:             Sat 24 Jan 2026 23:00:30 +0000
Manifest this update:     Sat 24 Jan 2026 22:55:30 +0000
Manifest next update:     Mon 26 Jan 2026 00:44:30 +0000
Files and hashes:         1: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: 5zyjZiHzfKFVIj8CROIKBwN4OHeQ+uy/14mqZgTNhgE=)
                          2: AS151642.asa (hash: J9zBC4ZQBQ+VcoWk+4SKjXBib2AzPbqeLZhs6syiHfY=)
                          3: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: 2AjQ6oK0mFOk0c9CpaTvICyD2JdGT4R5dFs1mBr73rQ=)
                          4: 6ED84CFF4976B923E315096476DD6623E49C8B79.crl (hash: IwkN0nlBZqJrCW72jRfdQUVypMkkTV2m2JptukVkIwg=)
                          5: 3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa (hash: sPyoKorLiK9ByXmoMSNg668zU3RSvi8DBiCLDQzzk34=)
                          6: 3130332e3234342e3232362e302f32342d3234203d3e20323033333633.roa (hash: gKJ6KRXwSkLEScK/Pnq8ckZ0+aVLIbaF6Yt51de+geY=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 00:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:01:8a:fd:4d:6d:d1:8a:4d:ed:fc:14:a9:5a:28:aa:40:b4:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
        Validity
            Not Before: Jan 24 22:55:30 2026 GMT
            Not After : Jan 26 00:44:30 2026 GMT
        Subject: CN=91215C46848E5FB7F8BDDD55E039A3FB606F7712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:e0:7b:fb:dc:0d:7b:f4:08:3c:09:94:87:
                    84:c8:20:bc:a3:b2:12:50:9e:f4:29:89:9f:bd:1b:
                    5d:11:7b:4b:0a:9d:4a:f9:d7:ad:49:73:c6:a1:f7:
                    b6:74:49:1e:7c:34:48:87:76:ca:8a:7b:e5:7d:eb:
                    3b:15:73:e5:32:ff:ac:2d:f4:63:06:c4:93:e2:ce:
                    7e:2b:6e:1d:18:90:35:49:34:c2:9c:80:0e:1a:28:
                    63:04:37:c6:61:a3:92:80:45:d7:0c:82:7c:d8:2e:
                    61:ec:46:6b:8a:73:92:bf:ec:be:3b:a4:72:3b:44:
                    78:1a:c3:da:83:e9:ab:64:0f:d3:de:a7:d4:84:fa:
                    45:74:d0:e9:f2:7b:c9:f8:33:36:4e:42:9b:6c:b4:
                    ce:5d:9c:5c:37:0d:a5:32:b4:2b:f6:48:f6:d4:9e:
                    26:e0:d1:19:90:a5:9f:fc:66:95:a2:3e:b6:c5:3f:
                    72:c7:ab:14:44:f1:75:5f:d1:6c:71:9a:66:96:e1:
                    4c:61:71:c8:5a:3e:0d:d0:72:f9:30:ce:30:6d:3f:
                    1a:9b:89:75:8c:1d:ab:85:c2:c2:10:7c:ed:42:6e:
                    f1:b6:5c:51:e1:80:a1:e7:f7:11:c8:ab:7a:df:82:
                    a9:2f:b6:2f:7c:e6:20:68:37:f0:ff:b2:78:a2:95:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:5C:46:84:8E:5F:B7:F8:BD:DD:55:E0:39:A3:FB:60:6F:77:12
            X509v3 Authority Key Identifier:
                keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:d3:ed:f6:f9:e5:e1:d7:a9:9d:f6:d7:62:1d:ac:33:f4:
         a7:46:82:58:f0:07:33:42:ea:50:63:93:da:70:28:36:0e:49:
         6f:8e:6a:ee:2b:89:43:8d:04:a4:02:c6:43:d9:9e:b6:43:cc:
         33:e7:3b:71:a5:63:df:6d:fd:a4:31:0e:76:04:70:cf:89:98:
         aa:39:bf:0c:eb:cc:d2:c3:eb:a8:0c:92:ce:96:a4:91:8b:79:
         e7:a8:bc:7f:b1:b2:7d:8c:a5:91:19:8e:e8:8c:d4:c5:36:78:
         59:e2:45:67:d4:d7:c0:d7:4a:46:a9:7e:06:08:ed:41:39:bc:
         a5:eb:d2:5c:f0:12:75:a9:cd:6b:98:d1:59:32:05:3d:f4:e1:
         46:a0:73:78:1a:e0:2c:97:61:f4:79:a7:01:88:ed:af:3a:72:
         47:fc:2e:da:1f:b2:41:db:20:b2:d1:9d:d2:13:4c:3d:86:08:
         25:19:fb:3b:84:ef:2a:b4:05:4e:88:b7:97:61:47:98:f4:65:
         19:2f:1d:b1:0a:5a:9f:f5:24:a0:91:50:8d:0c:cb:ce:c5:91:
         ec:d5:d8:db:ce:05:08:e1:f9:d1:2b:aa:8a:1f:41:ad:c9:21:
         b1:9a:eb:72:d0:90:3d:35:31:af:68:12:78:47:79:bf:e2:c8:
         e4:2e:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:33 2026 by rpki-client