This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          yPJmPFc/mgFnb0nJxCZuEKCA+GZBr4r6NLr+rD25nG4=
Subject key identifier:   FA:61:81:07:0B:EF:BC:7C:25:12:AB:98:E8:31:39:5B:97:24:7D:A1
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       2965A3F347C1C1C5358E452236CBDFC0F0C9D6A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          BC
Signing time:             Sat 06 Dec 2025 05:49:51 +0000
Manifest this update:     Sat 06 Dec 2025 05:44:51 +0000
Manifest next update:     Sun 07 Dec 2025 06:31:51 +0000
Files and hashes:         1: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
                          2: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: ner6gSQwnEdiDC07ZoKhyveLzTM+F+X0jU9S+baxpl0=)
                          3: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
                          4: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:65:a3:f3:47:c1:c1:c5:35:8e:45:22:36:cb:df:c0:f0:c9:d6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Dec  6 05:44:51 2025 GMT
            Not After : Dec  7 06:31:51 2025 GMT
        Subject: CN=FA6181070BEFBC7C2512AB98E831395B97247DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:1f:91:ce:df:b7:96:fe:b0:40:31:b1:69:
                    74:eb:54:e4:45:40:93:dd:30:4d:a3:80:dc:87:9b:
                    06:10:ac:cc:04:44:4f:02:27:8f:1b:aa:3f:66:74:
                    d7:f7:6d:e2:75:c0:16:6a:ab:8c:0c:5e:02:c4:39:
                    de:3b:2b:49:e6:cd:d3:e0:4f:41:34:7f:e0:f8:42:
                    f3:1f:0e:c9:a4:44:e7:c1:1b:97:69:96:a8:35:6e:
                    a0:d7:ff:3b:a7:07:ae:7d:59:f9:dd:d5:59:9f:c1:
                    2c:1f:14:6c:96:f7:14:59:89:31:58:a3:af:26:18:
                    62:c5:22:ff:fb:b6:90:39:68:4a:f1:0d:61:50:0d:
                    7f:86:f4:6f:0a:fd:3f:0f:2c:cb:b7:84:88:bb:e7:
                    e6:0e:b2:20:3b:20:84:6c:80:19:7b:ff:1e:dc:bb:
                    36:c0:7e:ab:32:b6:71:8d:6e:f6:9c:b2:b0:11:94:
                    33:58:87:10:cb:c9:3e:07:31:20:b9:ce:a4:e2:72:
                    6b:04:60:7f:62:16:d8:84:51:9b:5d:22:f4:21:5d:
                    aa:e1:3a:e2:13:64:02:9f:2b:fa:31:8f:59:9d:b5:
                    c0:49:ba:44:98:06:57:c1:de:92:ff:2f:b2:62:8f:
                    ce:40:a4:b8:1f:eb:50:79:7f:26:21:e6:7a:1e:1e:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:61:81:07:0B:EF:BC:7C:25:12:AB:98:E8:31:39:5B:97:24:7D:A1
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:31:98:9d:25:0e:be:69:88:d4:0c:a7:2a:ca:60:b0:c6:41:
         8c:08:c9:ca:e0:d9:26:d1:9f:f4:1d:11:59:2f:53:84:18:69:
         13:49:f0:6d:fc:ae:d4:7b:72:15:84:85:03:90:37:80:b3:4f:
         0e:77:6a:f3:5a:73:a7:d8:d0:41:f1:8b:a2:71:fd:38:26:88:
         98:53:6f:13:94:a4:61:47:6f:4b:41:51:f1:fc:43:f7:e1:5d:
         93:c1:29:ed:5a:b2:7a:4a:d1:ef:bf:2b:c0:33:55:f1:ad:f7:
         b2:65:b3:ca:cb:61:11:c1:c4:76:a6:b2:e7:69:de:10:c2:08:
         04:60:c2:03:9f:bf:f1:93:13:d8:ff:b1:e4:57:43:1b:ee:bb:
         27:e5:1b:f4:9a:fa:cc:93:0e:cc:87:a2:80:95:7d:21:6e:1c:
         cf:79:1b:e2:ae:7b:3b:69:0b:89:15:5d:ce:f7:5d:46:ff:9d:
         ce:1e:83:38:9f:c8:86:a9:19:49:13:98:12:91:e2:7c:16:66:
         c5:ad:47:c8:4d:aa:3c:26:5f:47:56:de:40:bf:42:f9:46:ed:
         4e:e7:5c:8c:83:09:10:bc:4f:80:68:5f:79:28:66:57:56:66:
         1e:99:ac:57:91:5e:fa:4b:24:79:c5:01:82:01:26:59:05:70:
         bc:59:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:43 2025 by rpki-client