This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier: U8iXSj/WwO9qrVlWED9p8rtq7tS2eOHjB02dS02UUQk=
Subject key identifier: 67:4B:DD:2F:A8:9B:07:3A:00:23:A9:97:A4:40:4E:37:A4:6E:22:55
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial: 06824C7B9D9781025A5EA75C5A965868E40BF26C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number: 0356
Signing time: Sat 20 Dec 2025 05:11:15 +0000
Manifest this update: Sat 20 Dec 2025 05:06:15 +0000
Manifest next update: Sun 21 Dec 2025 06:46:15 +0000
Files and hashes: 1: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: EsRJbOGhmygUrNaLE9V2/UTDqQ67xRyPQSF4SzuEVzo=)
2: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=)
3: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
4: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=)
5: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
6: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 06:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:82:4c:7b:9d:97:81:02:5a:5e:a7:5c:5a:96:58:68:e4:0b:f2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Validity
Not Before: Dec 20 05:06:15 2025 GMT
Not After : Dec 21 06:46:15 2025 GMT
Subject: CN=674BDD2FA89B073A0023A997A4404E37A46E2255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:4e:36:95:10:e8:b3:c6:e1:2b:1c:e2:9b:
88:d2:4f:79:2b:d6:48:7c:04:be:ab:32:51:de:16:
7d:72:f0:70:70:1c:d8:3e:fc:3c:ab:f6:ce:75:4a:
cb:ac:9a:c2:4c:0b:2d:c2:44:57:0c:07:b7:99:57:
f2:e3:0e:a2:3a:15:be:3e:c7:f0:7d:8f:85:a4:c2:
e0:13:2a:ca:f3:9d:95:ae:d5:2c:12:b2:e9:c3:2d:
ed:cc:68:82:61:72:0d:59:6e:07:5e:23:47:93:4b:
cc:eb:01:14:3a:11:36:65:4c:d0:4e:7a:33:c1:89:
43:b2:d5:bf:64:bf:8f:bc:6f:f6:03:6d:9d:f4:f7:
56:a5:bd:76:28:73:0e:7b:b4:3a:4f:f0:91:3e:0f:
6f:96:29:06:37:b0:09:a3:4c:d2:f2:8c:74:00:4a:
84:4a:f0:95:ac:2e:4b:80:fb:61:ef:07:ca:a0:dc:
51:9b:f5:70:a6:d7:35:a4:50:f2:90:80:fc:70:4e:
c1:f1:d0:44:e2:ac:de:9e:28:58:fb:1f:28:44:4e:
95:33:91:c9:59:a0:78:ca:78:77:f9:5b:3c:20:c6:
98:98:e3:0c:2c:07:f8:aa:2b:6d:65:dc:20:48:b2:
28:ae:31:45:84:e1:0d:1f:08:26:43:85:29:8b:3d:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:DD:2F:A8:9B:07:3A:00:23:A9:97:A4:40:4E:37:A4:6E:22:55
X509v3 Authority Key Identifier:
keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:34:37:e0:ad:90:9e:83:40:80:36:bd:3e:2d:79:d5:26:
87:23:32:72:f7:04:46:a5:03:0d:3f:59:96:35:2e:dd:e2:ad:
93:d5:2f:e3:6b:87:47:d4:40:6e:25:1d:80:63:ff:c3:46:61:
be:24:a6:64:13:ae:6b:69:92:71:8c:23:98:d2:36:5b:f4:ce:
1d:bf:fe:72:d6:57:7c:00:40:e2:4d:a5:a9:98:3c:08:58:a8:
52:48:b0:d6:0d:37:11:0b:82:18:19:6b:98:b2:83:c0:59:26:
dc:b5:c9:8b:be:7b:cd:1d:c8:04:57:d5:cc:3f:fd:55:70:58:
57:d4:6e:e2:bf:ba:a7:2a:d5:e2:20:ea:2c:a9:b1:65:1f:7a:
81:25:3d:dc:07:40:12:10:c9:a7:9d:51:da:6a:c4:fe:e5:2f:
4a:f2:e4:6f:48:5b:f1:d2:de:14:95:19:49:e4:2f:78:dd:9c:
b0:fc:c2:61:09:91:f6:67:16:c3:f7:cf:2e:f1:90:e7:13:8d:
40:a9:20:27:e9:aa:e3:aa:51:5c:00:68:f6:a8:fe:df:02:99:
33:05:4d:a1:0e:44:5e:7a:43:42:cc:f6:c1:f7:85:c0:c0:5f:
5c:0d:f7:4a:42:a4:b0:05:ef:1a:b5:8f:d3:fb:a1:0a:46:80:
18:df:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:03:33 2025 by rpki-client