This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
File:                     BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json)
Hash identifier:          0ReGYksVRxKhc26OF45Py2gYCj2h1LRkcR1W7Glqs4g=
Subject key identifier:   AB:8F:92:DD:78:C3:BD:63:0B:0B:7D:82:7B:0A:96:18:8B:A6:16:DF
Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
Certificate issuer:       /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Certificate serial:       19FB64088F350CE947FB5F11D8EB79EC3EADDA95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
Manifest number:          CF
Signing time:             Sun 21 Dec 2025 03:43:46 +0000
Manifest this update:     Sun 21 Dec 2025 03:38:46 +0000
Manifest next update:     Mon 22 Dec 2025 04:41:46 +0000
Files and hashes:         1: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=)
                          2: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: 6zBZT1pVGk5jUBjRRMmBzPoo6Tlw7lYziqGBn6eBcLM=)
                          3: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 04:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fb:64:08:8f:35:0c:e9:47:fb:5f:11:d8:eb:79:ec:3e:ad:da:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697
        Validity
            Not Before: Dec 21 03:38:46 2025 GMT
            Not After : Dec 22 04:41:46 2025 GMT
        Subject: CN=AB8F92DD78C3BD630B0B7D827B0A96188BA616DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:7f:81:ca:60:d0:e6:c8:b9:e7:18:73:bc:
                    b3:08:ef:88:be:3b:71:bd:b1:6d:4c:67:cb:aa:0f:
                    20:94:d8:44:de:f5:a1:7f:7c:bc:6f:ae:eb:c5:ef:
                    1c:cd:e9:bd:0c:c3:70:2b:93:82:45:97:36:bf:46:
                    7f:4a:e9:55:0c:13:e9:dd:91:8e:82:9d:1f:f9:4a:
                    77:0f:09:89:71:28:e5:dd:9d:9e:f2:17:7f:33:1c:
                    a9:0f:18:7a:27:d9:d3:37:71:88:30:64:38:43:31:
                    37:32:57:90:b5:4a:f4:d3:1d:37:cb:84:75:73:d2:
                    90:78:50:47:32:67:cd:df:ab:c4:ad:e4:82:87:48:
                    b1:40:6a:bb:5f:3e:14:d0:17:a2:6b:44:74:b5:ee:
                    f9:b8:9a:c5:02:42:e6:1f:1a:0e:6b:93:d2:5a:8e:
                    0e:6b:97:5b:ba:c4:1d:82:42:fd:fd:85:f2:c1:30:
                    6c:05:11:90:e9:ba:2e:1b:2a:70:9b:6c:e9:05:d0:
                    4b:46:70:5e:aa:f5:8a:b4:ba:19:d7:c6:e8:4e:35:
                    55:cb:6b:e9:24:0a:df:2c:ca:de:24:2f:e9:48:88:
                    02:a1:3c:7c:18:23:df:cd:58:2b:ae:88:27:28:65:
                    4f:56:34:7a:af:19:8e:a6:e7:34:cb:f7:7f:ef:9f:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:92:DD:78:C3:BD:63:0B:0B:7D:82:7B:0A:96:18:8B:A6:16:DF
            X509v3 Authority Key Identifier:
                keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:f7:b6:da:1e:bd:83:d5:00:38:0d:54:f2:07:37:26:85:
         8a:0c:b5:51:af:c3:50:f6:95:a8:98:d9:64:20:c4:4d:96:da:
         5e:e3:d3:68:e8:e9:1d:81:63:74:10:81:dd:39:4a:e6:2b:30:
         f6:99:d6:6c:c8:8f:ed:6f:a3:d0:b1:e0:fe:32:95:72:0f:fb:
         42:18:8f:36:a3:de:3e:16:b1:ff:82:fa:bc:f6:14:e2:76:77:
         55:e5:5d:9b:71:63:a3:57:c7:cd:83:23:48:aa:b0:9f:28:11:
         97:4a:eb:4a:fe:fa:40:61:5a:5e:fc:51:95:5a:fa:2c:b6:8a:
         c9:16:80:d0:18:21:6c:47:46:8d:95:48:cf:4d:97:c8:94:89:
         fa:e2:5c:8b:82:14:b9:a1:66:60:1a:51:94:c7:47:1e:29:f6:
         7c:ec:a3:ed:35:14:fa:a9:ad:52:a9:29:f6:29:3d:72:28:09:
         1a:2b:45:6b:c0:42:9e:65:e1:7b:5f:7c:1a:59:06:75:2c:16:
         50:93:5f:e9:52:e0:12:2b:41:5e:22:92:76:ba:20:4e:49:6f:
         e6:48:b0:2c:56:e1:06:f4:8a:e2:e0:27:22:6c:a8:a3:0b:bf:
         d1:6b:71:b6:23:c5:8b:d6:5e:2b:99:13:eb:12:9a:bd:bf:86:
         12:4c:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:10:40 2025 by rpki-client