This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          Gb6BSYhh0Hspt4E5sHrvGeWtNj3LQ6rpPour2WfIFew=
Subject key identifier:   0A:FC:66:AC:D8:17:E8:E6:BC:93:D0:5D:AC:DC:EB:75:02:88:71:D1
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       02E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          02DB
Signing time:             Sun 25 Jan 2026 00:32:39 +0000
Manifest this update:     Sun 25 Jan 2026 00:32:39 +0000
Manifest next update:     Sun 01 Feb 2026 00:32:39 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: gMc9+h3DqOmrS3fPAuucj39zJ+uoMJ95qGdqtBQD/yw=)
                          2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: z8pbXbJr14ECKVj3xkwzf65QmQpSbNR3/vKtnnp7bo4=)
                          3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: O9ymfacP+OZcabsl8fxbvvy5N7dQXCOPYAVlvWvLLn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Jan 25 00:32:39 2026 GMT
            Not After : Feb  1 00:32:39 2026 GMT
        Subject: CN=697564a7-0441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:87:38:aa:28:a0:3d:52:7b:a3:36:12:b1:
                    82:22:77:f2:ae:fa:59:78:5f:26:12:e7:f8:eb:e2:
                    03:e4:24:f8:8c:5a:6c:55:9f:8e:00:34:28:54:2b:
                    1d:e5:c0:ac:e1:cf:07:e5:2d:0e:42:ac:c3:33:c1:
                    1f:aa:e9:c8:2e:2f:40:5d:bb:5b:2d:b6:61:8a:51:
                    59:4b:ba:7d:7d:9c:35:dd:78:28:0e:d9:ea:ab:8a:
                    07:e4:90:60:ce:5f:4e:b5:03:15:98:67:c8:aa:ef:
                    37:6e:ff:8e:d5:5b:17:a2:e4:14:d0:94:ae:f0:a9:
                    e5:00:b0:ad:8b:2b:d9:ef:26:25:39:6a:47:66:2b:
                    9c:71:df:d9:dc:8d:fe:86:02:77:fd:57:f9:f8:1b:
                    c3:87:03:e2:e6:a3:35:f3:08:26:c4:0d:a2:a4:f1:
                    d7:e7:65:89:a4:9b:73:2a:35:86:ea:81:fe:df:f1:
                    fa:4c:6d:99:67:7c:c7:41:28:4e:d6:8b:92:82:a4:
                    a0:65:13:cf:c5:fb:6b:08:cb:54:fe:26:53:0e:32:
                    0e:6c:96:1b:a8:79:f1:a1:0c:ca:56:af:00:0c:08:
                    b8:bd:fb:2c:76:93:d9:05:3b:82:8e:5b:e9:23:f5:
                    3a:70:c7:b0:e9:7c:24:bb:ab:4e:9d:bf:42:3b:8e:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FC:66:AC:D8:17:E8:E6:BC:93:D0:5D:AC:DC:EB:75:02:88:71:D1
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:21:e9:3b:aa:ea:28:dc:b7:e4:09:fa:99:89:c2:1d:0e:ae:
         53:ba:88:27:06:bf:53:76:92:36:73:46:33:8c:f6:74:68:e4:
         8e:ae:68:21:e5:7c:f5:1b:20:bc:8b:b6:7b:8a:15:97:2b:5d:
         34:de:41:5d:5e:2c:2f:15:33:69:aa:01:b6:26:5b:45:f1:f6:
         95:c9:b3:e3:d8:97:f7:28:c0:38:99:d2:83:99:01:6f:4b:85:
         c6:15:bd:b1:a1:a3:2d:90:61:47:2d:be:6a:d8:33:6d:2f:cb:
         51:c2:21:f7:b6:18:3d:1b:f2:97:71:9b:e2:82:6d:7b:c9:76:
         78:dc:d0:c1:9a:35:e2:8a:94:c7:01:a7:fa:da:b6:58:72:b0:
         22:6f:3a:9e:bc:1b:5a:ca:09:9d:a4:f6:f8:db:b2:8c:df:9f:
         49:ba:11:9b:75:39:f2:fe:49:85:09:10:fb:49:89:41:a9:df:
         a4:d5:19:e2:cc:3b:72:61:77:58:e0:78:d6:1f:35:4e:32:2a:
         51:da:28:f8:2f:28:46:30:13:b9:7b:d0:50:e2:f5:da:3d:41:
         6c:af:bf:fe:9a:a0:78:2a:56:d1:fd:b6:39:d2:9c:e5:47:ea:
         8a:48:6e:be:18:a0:b6:ff:95:12:6e:df:08:c3:fa:57:6c:84:
         72:af:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:15 2026 by rpki-client