This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier: wCdiwv3SeV5wxpeL1oqutYyU6cfyERiBqFnpoLf9awk=
Subject key identifier: E4:D8:17:D6:C5:B2:10:4F:3D:0A:D6:39:D8:2F:A6:5E:16:1B:16:D2
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number: 02CA
Signing time: Tue 23 Dec 2025 00:24:53 +0000
Manifest this update: Tue 23 Dec 2025 00:24:53 +0000
Manifest next update: Tue 30 Dec 2025 00:24:53 +0000
Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: d6jsRKnexLWgvl0N1T404FdiFl2Nx/f0YlNrOnNk5zg=)
2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: O9ymfacP+OZcabsl8fxbvvy5N7dQXCOPYAVlvWvLLn8=)
3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: z8pbXbJr14ECKVj3xkwzf65QmQpSbNR3/vKtnnp7bo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Validity
Not Before: Dec 23 00:24:53 2025 GMT
Not After : Dec 30 00:24:53 2025 GMT
Subject: CN=6949e155-60b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:cf:86:04:a6:ad:76:f7:37:96:fa:78:5a:
ff:18:00:15:bb:e6:4c:f3:e1:82:2e:6e:09:dd:95:
57:c4:c1:5e:12:1d:a2:a5:1b:9e:36:64:00:ea:1e:
e4:58:dd:34:6a:2f:7f:46:45:43:5d:95:a9:8d:4d:
fc:5b:46:55:b0:21:86:4b:91:f3:2a:62:11:51:95:
ee:00:ce:89:82:4e:43:14:c1:75:53:5e:36:e3:08:
29:67:77:49:dd:ef:24:be:65:b9:69:5c:0e:d4:75:
5c:8f:89:b1:c1:d3:ce:3c:97:6d:1e:87:08:c3:18:
f3:81:78:a0:c3:e0:72:49:37:ff:89:6b:28:a8:e3:
ad:d5:07:14:d9:8d:cd:ba:1d:c6:3e:4c:39:17:12:
a4:c7:0d:72:33:c2:67:78:5c:24:d4:9b:24:a9:99:
70:52:e9:1c:ad:39:ff:44:b7:7a:bd:99:a9:be:ff:
2a:49:dd:b4:02:9f:cb:a5:c4:58:80:a1:7c:ba:61:
c8:be:46:e9:a8:eb:e9:17:83:d0:58:2e:f2:c1:ff:
56:0f:3c:58:1e:ac:cb:cc:5d:da:bd:93:94:15:7b:
67:e4:be:0a:b6:2b:e5:7b:4a:f4:1d:d4:f5:47:ec:
34:db:03:9b:e6:20:d5:64:90:fb:f9:d8:20:b0:be:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:17:D6:C5:B2:10:4F:3D:0A:D6:39:D8:2F:A6:5E:16:1B:16:D2
X509v3 Authority Key Identifier:
keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:97:4b:3a:b1:8f:c9:c0:e9:57:09:12:b8:f2:52:c1:6f:e9:
96:fd:37:05:56:e0:cf:d9:1e:d1:01:9e:97:cd:c4:a0:0c:fb:
58:e4:13:ce:b0:ae:b9:25:1a:08:5d:27:0e:10:63:4b:58:5e:
dc:d5:19:7c:1c:81:8d:55:bc:a2:f4:17:71:07:a9:47:81:f0:
f9:71:e4:d2:a3:46:bf:e9:62:c5:00:f5:0b:a0:6a:76:d0:0a:
63:73:06:09:f8:59:20:06:d0:5e:42:b3:47:f0:b1:d4:6d:33:
7d:2f:a3:a7:54:10:7a:3e:e4:39:31:69:1e:79:08:ef:cd:79:
b2:8d:9a:19:b2:a7:d3:cf:f4:ef:75:c0:bf:cd:be:47:25:7f:
55:62:97:9a:33:fe:47:87:57:1a:44:c7:7a:8e:50:da:37:21:
22:4f:10:2d:d0:b2:b6:ff:35:e6:c5:58:de:3d:c3:52:22:7c:
7e:b9:56:b5:50:68:62:9e:92:ef:33:7f:9e:1b:97:c3:ad:1a:
3d:c2:fc:bc:7b:5a:f3:58:42:5d:7f:0e:cd:00:c4:d2:20:a3:
61:6d:40:f3:26:39:c7:ee:54:10:bb:b5:52:94:bf:04:81:3a:
f9:82:80:8f:91:61:df:01:64:ac:62:b1:00:41:1c:c8:9a:62:
08:c4:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:40:51 2025 by rpki-client