This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          9TEsYJyVrCQ0jkqzj+OLMDmcBebbi9S5HbnpTM9guO4=
Subject key identifier:   3F:73:66:A9:20:5B:F2:F6:93:DA:41:16:87:C5:8B:68:AE:76:69:3E
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          02C1
Signing time:             Thu 04 Dec 2025 23:48:39 +0000
Manifest this update:     Thu 04 Dec 2025 23:48:39 +0000
Manifest next update:     Thu 11 Dec 2025 23:48:39 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: Dp80PQkKtMo1Y2r2M1R6jp7i5psUb/uTGBB5sHHhD7c=)
                          2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: O9ymfacP+OZcabsl8fxbvvy5N7dQXCOPYAVlvWvLLn8=)
                          3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: z8pbXbJr14ECKVj3xkwzf65QmQpSbNR3/vKtnnp7bo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Dec  4 23:48:39 2025 GMT
            Not After : Dec 11 23:48:39 2025 GMT
        Subject: CN=69321dd7-6004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:be:b2:9e:76:76:4b:0c:04:33:bd:ca:2c:
                    ad:59:79:3d:c6:83:07:2b:26:1c:cd:42:a1:ed:8c:
                    fd:1e:4d:97:bd:56:ea:d5:b9:59:f9:cb:72:bb:3c:
                    3d:7a:72:92:80:39:9a:5a:f9:47:ea:14:1c:00:32:
                    d3:3f:89:d7:23:f4:fd:a5:3c:12:e2:cc:66:ef:b9:
                    43:37:31:bb:d0:33:ef:b0:dc:66:eb:8d:4e:50:4e:
                    22:3d:57:98:98:db:fd:2d:43:92:64:b0:80:96:8e:
                    c7:0b:cd:11:2e:08:b9:75:76:a5:4f:20:a5:87:0e:
                    ce:a2:23:78:7c:d5:7d:cb:db:62:5a:25:7a:b3:7d:
                    67:12:fc:6b:ae:10:7c:48:0f:e1:7e:0f:5c:68:95:
                    3d:26:75:09:b8:e9:ca:78:d5:4b:06:c5:44:fe:72:
                    d1:cb:ea:31:6d:97:bf:b5:ba:98:01:32:ea:a2:f1:
                    f9:21:02:be:80:09:82:dd:d7:b0:58:fb:b9:8e:e7:
                    3e:fa:01:86:d8:fc:e3:0d:9a:e2:82:13:50:9c:22:
                    10:59:0c:d2:f7:03:e4:e3:fe:c5:36:07:90:ae:da:
                    2f:26:bd:3d:0b:f7:86:20:7b:3c:95:68:b7:94:ec:
                    6f:56:ef:1e:86:8b:37:9d:57:99:2d:5e:4f:4a:c4:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:73:66:A9:20:5B:F2:F6:93:DA:41:16:87:C5:8B:68:AE:76:69:3E
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:60:b2:56:f2:50:37:f0:9c:ed:06:d2:3b:69:5a:43:57:d0:
         52:dc:42:e7:b9:a9:ed:36:ae:c6:94:e2:c5:9c:5d:bc:6c:bb:
         47:17:a0:0b:6e:66:34:11:05:6b:2b:47:fb:03:8c:ec:e2:6c:
         e2:e1:e0:3d:ec:25:26:6c:8c:3b:4f:a9:a3:89:b1:ff:3e:56:
         33:3c:7e:94:54:46:4f:c5:7c:76:b8:f9:a2:bd:03:21:33:68:
         d3:58:e8:a5:fa:20:8c:cd:dc:87:90:6c:9f:55:7e:10:1b:81:
         36:a4:15:41:bd:a6:07:83:e8:96:ed:be:d0:9a:f2:83:75:4e:
         a3:96:71:76:40:e0:0d:bb:a2:55:fa:cc:1e:41:56:69:98:fd:
         e3:d2:c5:b6:43:83:0d:3d:3d:bb:52:fb:83:3f:c3:60:95:70:
         46:c3:6c:8f:97:48:cb:84:6d:0b:0e:e0:f9:14:ff:6a:d6:e5:
         c2:cd:ec:d0:ee:59:55:35:0e:72:18:8c:88:42:96:9c:80:95:
         2e:61:b2:f8:18:31:64:6f:73:bf:ca:20:6e:f1:b9:6e:cb:ae:
         47:fb:97:07:47:75:f3:c0:e1:fb:ca:fa:6a:8f:4f:4f:b1:e1:
         aa:b6:5b:05:dd:53:e4:4b:a6:ee:cc:27:4f:e2:62:8b:b2:b1:
         b0:b6:85:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0
NEIyQ0M3RjQwHhcNMjUxMjA0MjM0ODM5WhcNMjUxMjExMjM0ODM5WjAYMRYwFAYD
VQQDEw02OTMyMWRkNy02MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEu+sp52dksMBDO9yiytWXk9xoMHKyYczUKh7Yz9Hk2XvVbq1blZ+ctyuzw9
enKSgDmaWvlH6hQcADLTP4nXI/T9pTwS4sxm77lDNzG70DPvsNxm641OUE4iPVeY
mNv9LUOSZLCAlo7HC80RLgi5dXalTyClhw7OoiN4fNV9y9tiWiV6s31nEvxrrhB8
SA/hfg9caJU9JnUJuOnKeNVLBsVE/nLRy+oxbZe/tbqYATLqovH5IQK+gAmC3dew
WPu5juc++gGG2PzjDZrighNQnCIQWQzS9wPk4/7FNgeQrtovJr09C/eGIHs8lWi3
lOxvVu8ehos3nVeZLV5PSsRWPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9zZqkg
W/L2k9pBFofFi2iudmk+MB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4
M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm
UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYYLJW8lA38JztBtI7aVpDV9BS3ELnuantNq7GlOLFnF28bLtHF6AL
bmY0EQVrK0f7A4zs4mzi4eA97CUmbIw7T6mjibH/PlYzPH6UVEZPxXx2uPmivQMh
M2jTWOil+iCMzdyHkGyfVX4QG4E2pBVBvaYHg+iW7b7QmvKDdU6jlnF2QOANu6JV
+sweQVZpmP3j0sW2Q4MNPT27UvuDP8NglXBGw2yPl0jLhG0LDuD5FP9q1uXCzezQ
7llVNQ5yGIyIQpacgJUuYbL4GDFkb3O/yiBu8bluy65H+5cHR3XzwOH7yvpqj09P
seGqtlsF3VPkS6buzCdP4mKLsrGwtoVD
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:51 2025 by rpki-client