This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier: 9TEsYJyVrCQ0jkqzj+OLMDmcBebbi9S5HbnpTM9guO4=
Subject key identifier: 3F:73:66:A9:20:5B:F2:F6:93:DA:41:16:87:C5:8B:68:AE:76:69:3E
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number: 02C1
Signing time: Thu 04 Dec 2025 23:48:39 +0000
Manifest this update: Thu 04 Dec 2025 23:48:39 +0000
Manifest next update: Thu 11 Dec 2025 23:48:39 +0000
Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: Dp80PQkKtMo1Y2r2M1R6jp7i5psUb/uTGBB5sHHhD7c=)
2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: O9ymfacP+OZcabsl8fxbvvy5N7dQXCOPYAVlvWvLLn8=)
3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: z8pbXbJr14ECKVj3xkwzf65QmQpSbNR3/vKtnnp7bo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Validity
Not Before: Dec 4 23:48:39 2025 GMT
Not After : Dec 11 23:48:39 2025 GMT
Subject: CN=69321dd7-6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:be:b2:9e:76:76:4b:0c:04:33:bd:ca:2c:
ad:59:79:3d:c6:83:07:2b:26:1c:cd:42:a1:ed:8c:
fd:1e:4d:97:bd:56:ea:d5:b9:59:f9:cb:72:bb:3c:
3d:7a:72:92:80:39:9a:5a:f9:47:ea:14:1c:00:32:
d3:3f:89:d7:23:f4:fd:a5:3c:12:e2:cc:66:ef:b9:
43:37:31:bb:d0:33:ef:b0:dc:66:eb:8d:4e:50:4e:
22:3d:57:98:98:db:fd:2d:43:92:64:b0:80:96:8e:
c7:0b:cd:11:2e:08:b9:75:76:a5:4f:20:a5:87:0e:
ce:a2:23:78:7c:d5:7d:cb:db:62:5a:25:7a:b3:7d:
67:12:fc:6b:ae:10:7c:48:0f:e1:7e:0f:5c:68:95:
3d:26:75:09:b8:e9:ca:78:d5:4b:06:c5:44:fe:72:
d1:cb:ea:31:6d:97:bf:b5:ba:98:01:32:ea:a2:f1:
f9:21:02:be:80:09:82:dd:d7:b0:58:fb:b9:8e:e7:
3e:fa:01:86:d8:fc:e3:0d:9a:e2:82:13:50:9c:22:
10:59:0c:d2:f7:03:e4:e3:fe:c5:36:07:90:ae:da:
2f:26:bd:3d:0b:f7:86:20:7b:3c:95:68:b7:94:ec:
6f:56:ef:1e:86:8b:37:9d:57:99:2d:5e:4f:4a:c4:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:66:A9:20:5B:F2:F6:93:DA:41:16:87:C5:8B:68:AE:76:69:3E
X509v3 Authority Key Identifier:
keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:60:b2:56:f2:50:37:f0:9c:ed:06:d2:3b:69:5a:43:57:d0:
52:dc:42:e7:b9:a9:ed:36:ae:c6:94:e2:c5:9c:5d:bc:6c:bb:
47:17:a0:0b:6e:66:34:11:05:6b:2b:47:fb:03:8c:ec:e2:6c:
e2:e1:e0:3d:ec:25:26:6c:8c:3b:4f:a9:a3:89:b1:ff:3e:56:
33:3c:7e:94:54:46:4f:c5:7c:76:b8:f9:a2:bd:03:21:33:68:
d3:58:e8:a5:fa:20:8c:cd:dc:87:90:6c:9f:55:7e:10:1b:81:
36:a4:15:41:bd:a6:07:83:e8:96:ed:be:d0:9a:f2:83:75:4e:
a3:96:71:76:40:e0:0d:bb:a2:55:fa:cc:1e:41:56:69:98:fd:
e3:d2:c5:b6:43:83:0d:3d:3d:bb:52:fb:83:3f:c3:60:95:70:
46:c3:6c:8f:97:48:cb:84:6d:0b:0e:e0:f9:14:ff:6a:d6:e5:
c2:cd:ec:d0:ee:59:55:35:0e:72:18:8c:88:42:96:9c:80:95:
2e:61:b2:f8:18:31:64:6f:73:bf:ca:20:6e:f1:b9:6e:cb:ae:
47:fb:97:07:47:75:f3:c0:e1:fb:ca:fa:6a:8f:4f:4f:b1:e1:
aa:b6:5b:05:dd:53:e4:4b:a6:ee:cc:27:4f:e2:62:8b:b2:b1:
b0:b6:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:51 2025 by rpki-client