This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
File:                     BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json)
Hash identifier:          X3D1xURKsuk3gKXoLVLTRf4fcnzeCk2VgaZumoScmdQ=
Subject key identifier:   4D:9C:B4:E3:00:0F:31:EE:66:DE:AE:28:38:0B:04:A9:75:38:06:34
Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
Certificate issuer:       /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Certificate serial:       6717D62C3204D2CEA908A7E9595BEFE5286A2A2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
Manifest number:          BC
Signing time:             Sat 06 Dec 2025 20:24:51 +0000
Manifest this update:     Sat 06 Dec 2025 20:19:51 +0000
Manifest next update:     Sun 07 Dec 2025 23:19:51 +0000
Files and hashes:         1: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=)
                          2: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=)
                          3: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: bIIYlXhml8JoRv7e8CfF3Ibs+6eG8UuwCWUKshpUO5Y=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 23:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:d6:2c:32:04:d2:ce:a9:08:a7:e9:59:5b:ef:e5:28:6a:2a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697
        Validity
            Not Before: Dec  6 20:19:51 2025 GMT
            Not After : Dec  7 23:19:51 2025 GMT
        Subject: CN=4D9CB4E3000F31EE66DEAE28380B04A975380634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fc:7d:77:35:09:ba:9c:8b:bf:a2:0c:ca:d4:
                    d2:27:51:ae:22:1c:01:f7:17:d2:43:0b:50:96:76:
                    c5:b4:3a:9a:22:68:53:56:9f:c0:39:39:03:b9:96:
                    c5:61:ff:a8:9c:84:49:ea:fb:aa:e9:b8:6f:52:4d:
                    d8:05:5c:88:e4:c5:ca:ff:23:00:45:63:e6:bb:61:
                    01:2e:46:96:b1:ee:0a:ba:9a:20:a6:cb:52:ce:eb:
                    fd:8e:e5:42:bd:44:c2:24:f3:b6:82:91:92:1e:d7:
                    53:de:eb:f5:03:40:a1:31:91:c9:4d:29:74:8d:a6:
                    01:7f:7f:e3:7d:20:f8:af:e5:c8:74:6b:2d:e8:3e:
                    7b:1b:7a:aa:87:07:01:9d:0c:ad:56:da:68:5d:51:
                    6e:7c:fc:10:76:48:56:13:09:83:e8:9e:ea:30:0f:
                    a9:ff:19:1e:8d:8f:4d:07:3a:91:9e:21:09:53:f6:
                    d6:ef:40:02:45:47:3e:2e:b6:4f:d7:e4:a3:ae:aa:
                    39:25:36:35:c0:ae:5b:dd:c6:70:6d:ec:1c:fc:c4:
                    69:d7:cd:98:ef:cf:bc:f2:56:8f:6c:42:09:b4:08:
                    0b:52:3b:1d:6c:ff:39:91:5c:98:42:9e:bb:62:0a:
                    be:55:40:bc:09:24:ee:5b:05:b0:fb:c0:35:6c:3b:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9C:B4:E3:00:0F:31:EE:66:DE:AE:28:38:0B:04:A9:75:38:06:34
            X509v3 Authority Key Identifier:
                keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:4f:c9:1c:1e:eb:e1:fd:f1:93:05:7f:12:e5:cd:5c:d5:
         38:e5:90:b5:23:7e:0b:f9:e7:2f:bf:0d:e4:71:75:39:ce:e8:
         f2:86:b3:90:29:c2:d2:5f:cc:65:6b:bd:e3:57:52:00:60:ed:
         07:e4:7d:29:60:a0:6c:53:21:c1:dc:cc:3e:d0:ce:32:38:d2:
         f7:c6:68:64:2d:bb:27:38:aa:d0:42:5c:a5:a2:f8:82:2c:b3:
         e4:c2:1a:04:fe:13:d8:86:29:36:a5:e6:c2:7c:0c:25:7f:ec:
         7d:84:77:9c:13:9b:a0:a5:7f:0a:e8:28:4b:ba:01:89:21:c3:
         f7:db:29:9b:e3:6b:e2:fb:e3:1e:ce:a0:8b:1f:28:d7:38:a9:
         d3:47:40:82:82:aa:21:2b:11:d8:5f:18:12:05:47:71:fb:4a:
         56:27:29:9b:a7:50:89:19:fd:4c:0c:e5:38:f3:3d:db:07:ff:
         b1:08:1c:0d:cc:da:81:40:0d:27:22:95:16:69:26:11:b1:f9:
         17:07:ae:e8:a3:b6:ab:1b:4d:11:a9:b0:b1:cb:f6:eb:47:be:
         0e:56:bf:ad:24:d9:95:ed:35:11:ad:fd:d1:94:30:91:d9:de:
         f6:e9:d7:ea:dd:a3:0a:b5:f7:4a:bf:81:32:f5:e8:42:e1:7f:
         38:33:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:22 2025 by rpki-client