This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
File:                     BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json)
Hash identifier:          NVpDbe6MMc1M0citEymvauevgoWGynJGhkcDqjc0olQ=
Subject key identifier:   BA:1B:7B:0A:53:24:B9:D5:3F:B0:EB:57:FC:E9:78:3F:B3:D7:64:E6
Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
Certificate issuer:       /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Certificate serial:       056F08CEA9C1FC40E88FFAC41B95DF11312BD2F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
Manifest number:          BB
Signing time:             Sat 06 Dec 2025 04:09:51 +0000
Manifest this update:     Sat 06 Dec 2025 04:04:51 +0000
Manifest next update:     Sun 07 Dec 2025 04:19:51 +0000
Files and hashes:         1: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=)
                          2: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: 1TMY7Rk6XLrlGh/H4F42enFg+rrYAMNBQLASgv6iv9M=)
                          3: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 04:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6f:08:ce:a9:c1:fc:40:e8:8f:fa:c4:1b:95:df:11:31:2b:d2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697
        Validity
            Not Before: Dec  6 04:04:51 2025 GMT
            Not After : Dec  7 04:19:51 2025 GMT
        Subject: CN=BA1B7B0A5324B9D53FB0EB57FCE9783FB3D764E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:0e:6c:25:60:cb:ef:01:fa:29:90:2d:b1:
                    29:25:fd:94:9d:f7:a2:9e:a6:4c:0e:f8:45:5d:cf:
                    88:5d:88:0a:57:36:61:66:a0:48:1b:8e:d0:f1:7b:
                    a7:19:e4:e9:a9:3e:86:d6:3a:0d:f2:0a:90:2b:32:
                    8d:2c:a0:ac:b8:ed:36:66:e0:9f:4c:27:52:69:cc:
                    93:ad:b3:e4:d8:33:b6:89:55:08:3f:b9:9e:53:c4:
                    4c:ac:91:87:f9:a7:5e:28:1e:fc:42:ca:0b:0b:6e:
                    f3:4b:74:6e:17:4f:87:54:e5:76:14:b4:cc:52:60:
                    d5:52:5f:01:65:46:3b:a3:bd:91:6f:fe:c9:e5:87:
                    3e:40:c0:61:6e:0f:4d:91:f8:a1:43:92:36:c8:36:
                    11:ec:60:a0:5b:1c:7d:06:e9:0f:46:b7:36:bd:3b:
                    54:62:20:04:cf:0c:2f:d4:00:b0:86:81:60:61:f1:
                    b4:0d:76:6b:47:25:a6:9a:09:7d:80:97:a5:42:19:
                    10:d3:07:a1:df:4e:7e:1b:26:e4:ba:87:85:ae:51:
                    f9:a3:5c:dd:5a:2d:c6:8c:13:67:9f:82:37:58:2e:
                    60:d3:9e:16:a4:d6:ff:86:25:3c:8f:1d:1d:49:db:
                    8b:81:a2:34:60:83:7f:1e:32:9c:0e:7a:da:63:e6:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:7B:0A:53:24:B9:D5:3F:B0:EB:57:FC:E9:78:3F:B3:D7:64:E6
            X509v3 Authority Key Identifier:
                keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e2:7e:ac:1b:22:14:37:f1:2a:f5:9e:24:80:7b:65:4e:7c:
         50:a2:83:0f:e8:79:d0:52:5a:6e:b7:23:9b:8a:d4:07:31:ce:
         34:1c:af:72:3c:98:7b:2e:09:8a:59:67:e3:5e:2b:56:6a:ce:
         25:26:94:01:4d:d4:15:f5:d5:1e:42:d5:5d:ff:37:6b:57:99:
         4f:9b:b6:53:a3:86:d4:88:10:da:bc:82:09:06:5a:d6:c0:8c:
         1b:f8:ce:38:39:3d:19:4d:b7:46:42:24:37:89:3a:c7:90:23:
         5e:9e:17:8e:8e:11:3f:01:50:39:e7:f1:a2:e0:93:b2:a0:42:
         4c:fd:e8:aa:d5:bb:fd:79:c4:d4:cf:1d:e4:76:93:30:33:b8:
         2f:81:bf:e3:1d:05:25:3a:3b:0f:eb:63:71:e3:18:f4:60:16:
         6b:c8:47:aa:bf:f6:12:ee:8e:18:76:e5:f3:b3:51:11:12:b1:
         f2:0d:c4:5e:76:41:ac:52:22:0f:6d:5b:d3:f8:0b:4b:85:45:
         f8:65:cd:22:fa:f6:9d:45:10:88:c0:5b:52:b9:ad:ae:12:fb:
         98:cc:11:4f:ca:ff:56:be:45:72:a5:bc:fd:2c:21:56:67:be:
         08:a2:c8:93:db:ba:69:61:f9:98:fa:fa:6c:b2:2b:ff:14:ee:
         a8:8b:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:28:32 2025 by rpki-client