This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          6ALd+7NaUzDJ05/p81CECucEGUHj5mpMZkVWx8hTMx4=
Subject key identifier:   56:7A:65:F9:E1:FD:1C:73:98:D2:4A:D8:15:9F:BD:AF:1F:B8:58:BA
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       26DC3C398DD082F943620C908AE4570B239BBD9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          EC
Signing time:             Sat 10 Jan 2026 21:01:08 +0000
Manifest this update:     Sat 10 Jan 2026 20:56:08 +0000
Manifest next update:     Sun 11 Jan 2026 22:59:08 +0000
Files and hashes:         1: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: C5rwANfm4wWAJ6sWpmRjNrvRkY1lhss/ov0HnOmq8L4=)
                          2: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
                          3: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
                          4: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dc:3c:39:8d:d0:82:f9:43:62:0c:90:8a:e4:57:0b:23:9b:bd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Jan 10 20:56:08 2026 GMT
            Not After : Jan 11 22:59:08 2026 GMT
        Subject: CN=567A65F9E1FD1C7398D24AD8159FBDAF1FB858BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:57:d5:53:93:43:0f:95:a1:53:61:e9:16:
                    50:b8:40:49:be:7f:2d:2c:74:ae:9c:29:d2:fd:6c:
                    0b:68:c9:24:19:e7:f9:a3:89:04:6d:26:b7:08:9d:
                    34:e0:37:9a:d1:0e:ad:e1:c4:c4:f6:f4:27:1c:5f:
                    b7:c1:d2:fa:66:45:75:ec:2a:21:00:ab:a7:45:54:
                    21:16:ad:40:99:8e:ad:a6:00:c7:8a:b5:0f:5f:c8:
                    bf:2a:1d:26:07:aa:56:19:70:c0:8f:db:7e:af:c5:
                    fd:3c:91:0d:b0:2c:bb:13:9b:48:2c:88:c3:0f:aa:
                    4c:0c:df:4d:39:38:4a:f8:4b:92:a1:2c:43:24:3a:
                    c9:7b:45:4e:7e:cd:01:ed:25:d1:8c:33:4f:e8:6c:
                    f6:d1:7c:9a:2a:14:f3:4e:f2:8e:63:b5:bc:0d:3f:
                    c5:12:b4:bc:c7:66:bf:1f:7d:6a:fb:40:f3:73:cc:
                    8c:10:70:7c:94:dc:06:88:04:3a:ff:eb:d2:de:0a:
                    86:ca:e9:a6:bf:bf:38:f9:0c:d1:d1:f5:fb:67:6f:
                    62:06:62:b2:9b:2b:78:1f:7c:b9:1a:74:92:db:43:
                    ae:9d:d7:ed:cd:a3:53:10:63:35:a6:c5:aa:f9:41:
                    13:42:e5:2a:e6:8f:1e:5a:19:ca:63:31:04:d5:b0:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7A:65:F9:E1:FD:1C:73:98:D2:4A:D8:15:9F:BD:AF:1F:B8:58:BA
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:4d:30:e5:01:16:cd:0f:9c:2e:81:b7:2f:2c:43:8d:b3:f8:
         89:5d:0e:11:bc:58:24:13:33:e9:a1:b5:b0:78:fd:c4:73:51:
         d4:82:99:6e:eb:15:b8:d1:67:7f:aa:e4:52:aa:d9:95:b3:46:
         5c:b8:92:32:ce:b6:3c:7f:fb:e3:f6:5b:79:0c:53:d5:ce:78:
         2d:35:68:52:66:3a:03:3c:9d:16:4a:3c:5e:0e:c2:b7:aa:ef:
         da:96:0a:a7:7e:53:ed:dc:f0:0f:3e:4b:e1:bc:56:79:05:4a:
         87:5d:e5:73:42:d8:5c:d5:98:c8:9d:0d:2f:63:60:b9:5d:2b:
         99:fb:5b:a2:74:e3:6e:b0:dc:70:75:e9:9d:0d:fe:e8:b1:30:
         75:f4:84:6b:46:eb:20:26:3f:d2:3c:c1:60:d6:46:56:1a:78:
         b6:62:ab:73:d6:8b:a3:9b:32:cd:a6:00:8c:c6:ee:44:43:28:
         61:52:da:5d:ff:6b:16:35:ac:44:09:50:cd:05:12:29:03:c1:
         6f:60:78:1a:a8:b9:9f:bb:4f:a7:06:ec:7b:80:31:e0:8c:91:
         c8:09:2a:4d:89:a6:f6:36:af:50:84:b5:06:82:d6:e7:28:61:
         b0:c6:21:5e:a5:d4:61:2b:72:67:58:0d:2f:9f:b7:e4:23:24:
         ba:be:b4:b4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJtw8OY3QgvlDYgyQiuRXCyObvZowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD
RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDExMDIwNTYwOFoX
DTI2MDExMTIyNTkwOFowMzExMC8GA1UEAxMoNTY3QTY1RjlFMUZEMUM3Mzk4RDI0
QUQ4MTU5RkJEQUYxRkI4NThCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPLDV9VTk0MPlaFTYekWULhASb5/LSx0rpwp0v1sC2jJJBnn+aOJBG0mtwid
NOA3mtEOreHExPb0Jxxft8HS+mZFdewqIQCrp0VUIRatQJmOraYAx4q1D1/Ivyod
JgeqVhlwwI/bfq/F/TyRDbAsuxObSCyIww+qTAzfTTk4SvhLkqEsQyQ6yXtFTn7N
Ae0l0YwzT+hs9tF8mioU807yjmO1vA0/xRK0vMdmvx99avtA83PMjBBwfJTcBogE
Ov/r0t4Khsrppr+/OPkM0dH1+2dvYgZispsreB98uRp0kttDrp3X7c2jUxBjNabF
qvlBE0LlKuaPHloZymMxBNWwBsMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRWemX5
4f0cc5jSStgVn72vH7hYujAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT
+jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky
QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV
OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEA2E0w5QEWzQ+cLoG3LyxDjbP4iV0OEbxYJBMz6aG1sHj9xHNR
1IKZbusVuNFnf6rkUqrZlbNGXLiSMs62PH/74/ZbeQxT1c54LTVoUmY6AzydFko8
Xg7Ct6rv2pYKp35T7dzwDz5L4bxWeQVKh13lc0LYXNWYyJ0NL2NguV0rmftbonTj
brDccHXpnQ3+6LEwdfSEa0brICY/0jzBYNZGVhp4tmKrc9aLo5syzaYAjMbuREMo
YVLaXf9rFjWsRAlQzQUSKQPBb2B4Gqi5n7tPpwbse4Ax4IyRyAkqTYmm9javUIS1
BoLW5yhhsMYhXqXUYStyZ1gNL5+35CMkur60tA==
-----END CERTIFICATE-----