This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          B5UkbQGsCd6GD/Ljle2ca3CVwwnkuljrVryDTWH9Fok=
Subject key identifier:   76:1A:53:58:53:14:32:70:AF:4B:B0:8B:49:10:EF:18:10:C1:E7:1B
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          02CB
Signing time:             Thu 25 Dec 2025 00:30:13 +0000
Manifest this update:     Thu 25 Dec 2025 00:30:12 +0000
Manifest next update:     Thu 01 Jan 2026 00:30:12 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: ems967pa/pfzQndCiH1h1jWLm8dTR3gwtkTe5+6+3SQ=)
                          2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: O9ymfacP+OZcabsl8fxbvvy5N7dQXCOPYAVlvWvLLn8=)
                          3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: z8pbXbJr14ECKVj3xkwzf65QmQpSbNR3/vKtnnp7bo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 00:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Dec 25 00:30:12 2025 GMT
            Not After : Jan  1 00:30:12 2026 GMT
        Subject: CN=694c8595-a10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:f8:95:00:ef:cf:5d:e7:3b:30:9b:dd:c9:
                    af:e0:14:1e:23:28:34:42:bb:3f:8a:4b:ed:a0:bb:
                    38:89:68:27:c7:23:97:29:19:0a:4a:31:3b:17:f6:
                    08:5c:7a:7a:84:c7:4e:58:f3:66:0b:ca:86:08:ef:
                    ca:33:b9:02:b6:bb:08:c8:69:53:6c:88:47:d2:ef:
                    fa:b8:50:98:f2:14:8d:82:e2:90:69:19:8b:cd:54:
                    99:31:b9:9b:7f:1a:c4:c6:0c:07:a3:6b:7a:d7:55:
                    eb:8e:bb:29:e1:15:ca:c4:76:3a:e5:d4:a2:94:3d:
                    74:62:8d:4d:4d:75:e4:0f:20:c9:f0:ad:3f:89:9c:
                    3f:9f:59:52:69:2d:0d:83:07:0e:e1:eb:f2:88:14:
                    34:62:3b:ba:dc:22:ec:07:6f:41:b9:a5:ca:3a:0e:
                    f2:54:65:c7:86:ca:4f:56:97:e8:79:12:de:3f:3b:
                    16:cb:a8:75:cc:45:a2:ae:a1:2f:09:29:43:68:64:
                    28:c0:94:74:d8:44:b9:54:7c:c1:6f:14:3b:c9:48:
                    f5:76:9f:f9:c5:23:37:07:7e:7a:32:b9:e7:91:c7:
                    ba:fe:39:54:f9:71:a3:e8:1b:b6:e1:04:fe:41:f5:
                    96:50:37:75:d5:f1:9d:c7:ca:0c:4e:e2:a7:e3:32:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1A:53:58:53:14:32:70:AF:4B:B0:8B:49:10:EF:18:10:C1:E7:1B
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:97:d2:1f:c9:91:9a:57:d2:bf:10:58:92:48:6f:be:6d:f7:
         85:81:1d:ca:eb:e5:f4:0a:21:d5:20:81:a9:99:da:5c:e5:e0:
         c1:80:b6:37:58:26:f8:c7:cc:55:76:1e:70:36:ed:c8:d7:2a:
         f8:b2:48:06:3a:4b:71:da:b1:e8:e1:42:c1:e2:66:9d:85:14:
         89:73:d8:50:50:d6:1c:79:4e:ef:be:30:ec:bb:0f:5e:bf:6f:
         e8:24:25:56:b6:15:02:00:1f:43:13:e0:ce:32:62:ff:ba:e6:
         e2:f3:08:f1:ab:7b:7a:0d:92:dd:e2:df:40:ef:f3:d0:a3:39:
         04:fb:93:c3:a1:6a:4a:76:66:d0:6d:ea:24:31:f9:e0:c8:1b:
         f4:60:43:24:8a:80:9c:32:87:d1:54:d7:90:29:29:f2:fe:94:
         ac:69:cb:4a:53:11:50:fd:d3:28:56:80:9c:c5:9d:82:07:36:
         02:cf:81:08:c4:2a:b4:41:4a:e1:66:70:30:a4:77:9d:d1:d4:
         0d:ad:fb:b6:6d:d4:29:7a:9b:d6:a4:49:a9:9a:6f:61:4f:1a:
         49:1b:d7:26:29:4c:95:cf:dd:5e:36:64:f5:01:44:cf:96:f0:
         61:57:ed:39:a2:36:7c:1c:54:5c:08:da:22:f1:8f:a9:78:b3:
         d4:48:ed:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0
NEIyQ0M3RjQwHhcNMjUxMjI1MDAzMDEyWhcNMjYwMTAxMDAzMDEyWjAYMRYwFAYD
VQQDDA02OTRjODU5NS1hMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrb4lQDvz13nOzCb3cmv4BQeIyg0Qrs/ikvtoLs4iWgnxyOXKRkKSjE7F/YI
XHp6hMdOWPNmC8qGCO/KM7kCtrsIyGlTbIhH0u/6uFCY8hSNguKQaRmLzVSZMbmb
fxrExgwHo2t611Xrjrsp4RXKxHY65dSilD10Yo1NTXXkDyDJ8K0/iZw/n1lSaS0N
gwcO4evyiBQ0Yju63CLsB29BuaXKOg7yVGXHhspPVpfoeRLePzsWy6h1zEWirqEv
CSlDaGQowJR02ES5VHzBbxQ7yUj1dp/5xSM3B356Mrnnkce6/jlU+XGj6Bu24QT+
QfWWUDd11fGdx8oMTuKn4zIilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYaU1hT
FDJwr0uwi0kQ7xgQwecbMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4
M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm
UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTl9IfyZGaV9K/EFiSSG++bfeFgR3K6+X0CiHVIIGpmdpc5eDBgLY3
WCb4x8xVdh5wNu3I1yr4skgGOktx2rHo4ULB4madhRSJc9hQUNYceU7vvjDsuw9e
v2/oJCVWthUCAB9DE+DOMmL/uubi8wjxq3t6DZLd4t9A7/PQozkE+5PDoWpKdmbQ
beokMfngyBv0YEMkioCcMofRVNeQKSny/pSsactKUxFQ/dMoVoCcxZ2CBzYCz4EI
xCq0QUrhZnAwpHed0dQNrfu2bdQpepvWpEmpmm9hTxpJG9cmKUyVz91eNmT1AUTP
lvBhV+05ojZ8HFRcCNoi8Y+peLPUSO1q
-----END CERTIFICATE-----
Generated at Fri Dec 26 16:35:29 2025 by rpki-client