This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json)
Hash identifier: qbRyhfH7ZDV/URLs7jd1G/F8ji6kQBtHIVa6CGb+kdY=
Subject key identifier: 98:9E:96:AF:10:BD:B8:7E:47:7E:16:D5:58:EC:83:70:C0:8A:9C:70
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial: 333E86710594CAEA0B561CA22426120CD6619B15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
Manifest number: 0214
Signing time: Sat 06 Dec 2025 05:39:07 +0000
Manifest this update: Sat 06 Dec 2025 05:34:07 +0000
Manifest next update: Sun 07 Dec 2025 08:31:07 +0000
Files and hashes: 1: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=)
2: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=)
3: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=)
4: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=)
5: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: V94FJLFG78NRpeZIHBIUq0EZYlOgzNhV9p6qfhw4mCM=)
6: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 08:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3e:86:71:05:94:ca:ea:0b:56:1c:a2:24:26:12:0c:d6:61:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Validity
Not Before: Dec 6 05:34:07 2025 GMT
Not After : Dec 7 08:31:07 2025 GMT
Subject: CN=989E96AF10BDB87E477E16D558EC8370C08A9C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:64:8a:ee:93:99:2f:f5:a6:17:57:1d:05:
f0:21:6c:66:06:df:e8:42:e5:da:29:ee:b9:8e:3d:
e0:6d:b1:72:9f:a8:2d:a8:05:d7:83:b3:73:a0:1f:
1f:ad:bf:3e:b8:59:cd:68:4a:10:90:99:49:a2:f2:
47:84:6f:a9:65:ae:23:78:ea:c1:5a:91:cf:77:cc:
91:06:bc:a1:ea:cc:fe:6e:6a:3f:d6:24:b4:2d:2f:
dd:12:46:e2:ee:aa:c3:fd:8e:d1:51:81:b6:51:ce:
b9:a5:d1:60:ac:96:b8:39:08:19:0b:b2:d5:17:42:
96:57:f9:78:4a:6c:22:e9:86:2b:12:cb:47:de:3d:
37:60:9a:2a:03:bb:da:b9:f7:7a:83:41:10:89:52:
d5:92:02:e6:fc:77:4f:17:15:30:ef:aa:e7:ef:40:
34:80:a9:dd:d5:b2:26:2a:e3:89:d7:16:c8:64:b4:
75:97:ea:a4:40:5b:9e:e6:ff:97:6a:56:ce:47:cb:
f5:98:bf:5c:85:98:19:75:2f:77:76:8e:de:50:46:
ce:5d:e7:6e:1b:42:af:e4:dc:bd:0f:b0:82:12:ba:
83:5e:bf:69:18:cb:76:e0:a3:a7:c8:de:70:f0:3c:
22:88:0e:70:ca:d1:45:b4:de:00:0a:ff:b0:24:dd:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:96:AF:10:BD:B8:7E:47:7E:16:D5:58:EC:83:70:C0:8A:9C:70
X509v3 Authority Key Identifier:
keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9b:33:d2:7b:51:31:36:48:58:c5:b8:ea:3b:1b:b3:4c:00:
3f:ba:c3:4f:8f:f9:98:43:c8:26:f1:a4:fa:ec:d8:ec:df:a1:
c3:a9:00:99:e0:96:72:da:ce:4b:09:b7:b0:2b:ae:d8:b3:69:
b1:9d:82:cb:ac:8f:e2:fd:13:f2:c9:0f:6f:7c:da:9a:ae:fe:
12:ea:5a:51:9e:f6:6a:dc:74:31:95:4a:fb:97:8d:bc:24:be:
91:df:84:f5:71:d4:fb:93:d3:8f:91:13:83:1c:12:fa:4c:cb:
69:a6:af:9c:15:fd:bd:5a:39:52:1a:63:9b:26:e9:e0:78:5e:
19:82:d6:ed:0d:cb:2f:33:b8:cf:3c:28:5b:22:08:63:12:4d:
71:b9:ce:a7:b7:93:46:1f:c1:94:b8:24:55:6f:78:b1:c4:d6:
d0:51:d5:68:3a:54:3f:82:ee:5a:48:6b:31:b0:2c:8d:32:b0:
b9:73:a1:12:13:75:c4:61:4d:d1:71:f5:71:f7:2a:80:89:ed:
d7:5b:58:f5:c2:15:01:cb:4b:b4:d6:6f:fb:af:a6:d6:22:5e:
4d:8e:86:98:05:b2:3b:ba:26:71:ef:46:9f:6d:ff:7a:dc:a1:
a2:9f:62:1b:39:33:3f:99:57:be:61:09:a8:0c:ce:b9:12:ae:
06:2f:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:27:32 2025 by rpki-client