This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
File:                     9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json)
Hash identifier:          dXbnKvxrtshWjZHHl1ey+LPYU+4F0rth8I3eUhsNsqs=
Subject key identifier:   8C:70:5D:6A:FA:06:31:A0:4A:DD:20:CC:38:6B:FA:F7:54:9F:C8:44
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       2F4128CAF4FE0006647ECD93C02D79E96BF5A1BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
Manifest number:          0256
Signing time:             Sun 25 Jan 2026 03:46:50 +0000
Manifest this update:     Sun 25 Jan 2026 03:41:50 +0000
Manifest next update:     Mon 26 Jan 2026 07:06:50 +0000
Files and hashes:         1: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: BkpecP87G9za4ntZtlQjrdL7sYOW7EWGSg/jmIoI/wE=)
                          2: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=)
                          3: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=)
                          4: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=)
                          5: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=)
                          6: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:41:28:ca:f4:fe:00:06:64:7e:cd:93:c0:2d:79:e9:6b:f5:a1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jan 25 03:41:50 2026 GMT
            Not After : Jan 26 07:06:50 2026 GMT
        Subject: CN=8C705D6AFA0631A04ADD20CC386BFAF7549FC844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:87:23:02:b9:9d:80:43:6e:aa:c9:40:a4:
                    9a:41:72:b5:90:03:1e:d4:d5:ca:08:a4:86:87:be:
                    17:69:04:51:ca:0e:5d:be:14:e6:78:0b:ea:9e:4b:
                    26:b7:ef:1e:13:29:fa:e9:51:d8:76:7a:16:3f:8f:
                    58:57:1a:9a:30:38:35:91:8a:04:b8:ef:6b:bf:8d:
                    29:e4:d9:92:fa:a7:c8:1e:2b:a7:5e:81:58:6a:16:
                    e0:1f:95:67:db:43:72:35:9c:bf:bd:47:a8:ce:59:
                    1b:e6:df:b3:33:9e:46:ba:26:bb:7b:f0:c2:c7:5e:
                    2f:d7:c6:22:9b:1a:41:59:25:37:cc:49:00:f1:49:
                    92:89:13:f9:32:ba:0b:b0:0d:a7:aa:38:ff:9d:58:
                    58:31:0e:0b:72:28:2d:05:95:cd:9a:93:fb:b5:7c:
                    fc:ab:f3:ab:f3:fb:15:44:25:9b:0d:b5:b2:72:5b:
                    e6:33:e9:28:72:72:2b:55:41:4c:53:d9:a9:33:0e:
                    01:52:a7:98:64:85:d3:41:d3:21:0c:07:63:43:99:
                    7d:77:88:d5:df:db:cd:cd:c7:88:b8:6f:ec:5f:46:
                    b7:4a:6f:fd:39:2d:17:26:10:46:8d:3b:b0:e5:cb:
                    fc:af:5e:ae:28:4d:6d:f8:f9:4a:b7:c1:01:b4:20:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:70:5D:6A:FA:06:31:A0:4A:DD:20:CC:38:6B:FA:F7:54:9F:C8:44
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:2f:0b:1a:e8:b0:3f:6f:85:03:de:fe:fe:0b:4d:21:1d:
         cb:e7:7d:ab:7c:c4:a0:11:4c:ea:e5:0a:d4:6b:f2:7d:ed:5b:
         13:79:a9:81:24:ef:79:4d:91:f8:11:bc:7c:85:2b:19:3f:97:
         19:bd:54:d6:76:5c:b9:84:44:4c:44:07:d4:db:d8:e7:0c:77:
         21:55:5f:80:2e:0b:14:22:88:1a:00:63:31:86:cf:07:da:31:
         0f:b8:45:0b:53:6b:50:07:6f:de:52:7e:65:26:ea:9e:56:c3:
         78:7c:11:aa:ae:e4:01:de:81:88:67:00:73:b2:9d:8a:a5:57:
         81:f3:d5:7b:f6:ea:90:8a:3d:c0:3c:86:33:ae:cd:95:00:80:
         13:ee:14:ec:c7:38:47:d1:02:27:46:6a:a6:f5:3f:dd:cc:a5:
         e0:b1:40:01:88:dc:4b:42:3b:d4:b4:1d:ba:c8:54:d0:53:17:
         d9:a8:df:6a:72:8e:ef:4d:a0:d4:8a:c9:8d:e7:d0:24:5d:a8:
         63:48:4c:9c:4a:e2:d7:77:89:b5:c4:d7:88:97:68:cd:2d:f5:
         fe:db:65:48:31:6d:d6:c1:c8:ee:2b:c6:16:54:ae:6b:83:ed:
         94:b6:2f:e8:88:bb:53:c9:3e:81:49:f3:26:6a:f4:32:44:69:
         c1:eb:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:14 2026 by rpki-client