This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier: Gb6BSYhh0Hspt4E5sHrvGeWtNj3LQ6rpPour2WfIFew=
Subject key identifier: 0A:FC:66:AC:D8:17:E8:E6:BC:93:D0:5D:AC:DC:EB:75:02:88:71:D1
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number: 02DB
Signing time: Sun 25 Jan 2026 00:32:39 +0000
Manifest this update: Sun 25 Jan 2026 00:32:39 +0000
Manifest next update: Sun 01 Feb 2026 00:32:39 +0000
Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: gMc9+h3DqOmrS3fPAuucj39zJ+uoMJ95qGdqtBQD/yw=)
2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: z8pbXbJr14ECKVj3xkwzf65QmQpSbNR3/vKtnnp7bo4=)
3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: O9ymfacP+OZcabsl8fxbvvy5N7dQXCOPYAVlvWvLLn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Validity
Not Before: Jan 25 00:32:39 2026 GMT
Not After : Feb 1 00:32:39 2026 GMT
Subject: CN=697564a7-0441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:87:38:aa:28:a0:3d:52:7b:a3:36:12:b1:
82:22:77:f2:ae:fa:59:78:5f:26:12:e7:f8:eb:e2:
03:e4:24:f8:8c:5a:6c:55:9f:8e:00:34:28:54:2b:
1d:e5:c0:ac:e1:cf:07:e5:2d:0e:42:ac:c3:33:c1:
1f:aa:e9:c8:2e:2f:40:5d:bb:5b:2d:b6:61:8a:51:
59:4b:ba:7d:7d:9c:35:dd:78:28:0e:d9:ea:ab:8a:
07:e4:90:60:ce:5f:4e:b5:03:15:98:67:c8:aa:ef:
37:6e:ff:8e:d5:5b:17:a2:e4:14:d0:94:ae:f0:a9:
e5:00:b0:ad:8b:2b:d9:ef:26:25:39:6a:47:66:2b:
9c:71:df:d9:dc:8d:fe:86:02:77:fd:57:f9:f8:1b:
c3:87:03:e2:e6:a3:35:f3:08:26:c4:0d:a2:a4:f1:
d7:e7:65:89:a4:9b:73:2a:35:86:ea:81:fe:df:f1:
fa:4c:6d:99:67:7c:c7:41:28:4e:d6:8b:92:82:a4:
a0:65:13:cf:c5:fb:6b:08:cb:54:fe:26:53:0e:32:
0e:6c:96:1b:a8:79:f1:a1:0c:ca:56:af:00:0c:08:
b8:bd:fb:2c:76:93:d9:05:3b:82:8e:5b:e9:23:f5:
3a:70:c7:b0:e9:7c:24:bb:ab:4e:9d:bf:42:3b:8e:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FC:66:AC:D8:17:E8:E6:BC:93:D0:5D:AC:DC:EB:75:02:88:71:D1
X509v3 Authority Key Identifier:
keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:e9:3b:aa:ea:28:dc:b7:e4:09:fa:99:89:c2:1d:0e:ae:
53:ba:88:27:06:bf:53:76:92:36:73:46:33:8c:f6:74:68:e4:
8e:ae:68:21:e5:7c:f5:1b:20:bc:8b:b6:7b:8a:15:97:2b:5d:
34:de:41:5d:5e:2c:2f:15:33:69:aa:01:b6:26:5b:45:f1:f6:
95:c9:b3:e3:d8:97:f7:28:c0:38:99:d2:83:99:01:6f:4b:85:
c6:15:bd:b1:a1:a3:2d:90:61:47:2d:be:6a:d8:33:6d:2f:cb:
51:c2:21:f7:b6:18:3d:1b:f2:97:71:9b:e2:82:6d:7b:c9:76:
78:dc:d0:c1:9a:35:e2:8a:94:c7:01:a7:fa:da:b6:58:72:b0:
22:6f:3a:9e:bc:1b:5a:ca:09:9d:a4:f6:f8:db:b2:8c:df:9f:
49:ba:11:9b:75:39:f2:fe:49:85:09:10:fb:49:89:41:a9:df:
a4:d5:19:e2:cc:3b:72:61:77:58:e0:78:d6:1f:35:4e:32:2a:
51:da:28:f8:2f:28:46:30:13:b9:7b:d0:50:e2:f5:da:3d:41:
6c:af:bf:fe:9a:a0:78:2a:56:d1:fd:b6:39:d2:9c:e5:47:ea:
8a:48:6e:be:18:a0:b6:ff:95:12:6e:df:08:c3:fa:57:6c:84:
72:af:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:15 2026 by rpki-client