This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier: NH7vxlDm5j2zmD7g+uQsx/i9OLCH3p7LBA+YihyAp4I=
Subject key identifier: 3D:27:82:4D:94:99:99:96:7C:3D:E2:E8:0F:ED:9E:EF:1C:CD:91:D8
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial: 5ACC2CC3075C830ABA8856296876F20D9FEAE134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number: D0
Signing time: Sat 20 Dec 2025 17:08:46 +0000
Manifest this update: Sat 20 Dec 2025 17:03:46 +0000
Manifest next update: Sun 21 Dec 2025 20:15:46 +0000
Files and hashes: 1: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
2: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
3: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
4: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: R53n9RVxFvBbzxwb3ksipbA3vVhCZrablC9X7Hx00W4=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cc:2c:c3:07:5c:83:0a:ba:88:56:29:68:76:f2:0d:9f:ea:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Validity
Not Before: Dec 20 17:03:46 2025 GMT
Not After : Dec 21 20:15:46 2025 GMT
Subject: CN=3D27824D949999967C3DE2E80FED9EEF1CCD91D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:ae:c2:7e:55:af:ec:a8:79:96:34:e3:65:
13:7d:a9:9e:45:e9:2c:3a:7a:7b:d0:f5:c9:55:21:
54:24:0d:31:8c:64:d8:cb:7b:8f:c6:f0:89:f0:00:
e1:53:88:7f:aa:d0:71:68:23:dc:d2:cb:af:79:85:
bb:06:bf:04:a5:d7:1f:43:d6:91:68:d7:f4:2c:b9:
3d:4b:54:1a:7f:02:d5:7b:0e:51:65:91:4e:9e:23:
af:c4:a2:51:2f:32:71:32:4e:a1:b4:b8:d1:64:94:
e3:db:8b:cf:65:d0:d3:a8:a2:d1:84:f9:4f:a0:aa:
d3:8d:9f:2c:66:44:ce:35:d2:59:c0:7c:4e:cc:98:
d0:15:02:b8:2a:b8:c9:bc:d5:10:94:4f:42:2f:32:
c6:bd:83:6e:02:3e:5c:22:26:3a:47:67:56:01:27:
53:4c:89:27:bf:89:58:e4:62:33:4a:01:d6:96:ae:
1e:60:31:36:36:35:74:83:f5:40:d1:21:0e:af:0e:
f2:c7:61:99:9a:96:32:af:91:1a:73:2f:3f:2c:62:
e3:d9:2e:87:14:46:ed:6d:df:e9:5c:58:ff:f0:58:
01:dd:5b:e0:24:ec:23:b0:d7:e8:77:e7:4b:a6:1e:
f5:dd:77:b6:80:d6:56:1a:4c:b9:3e:40:1c:22:9e:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:82:4D:94:99:99:96:7C:3D:E2:E8:0F:ED:9E:EF:1C:CD:91:D8
X509v3 Authority Key Identifier:
keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1e:56:93:bd:4c:b6:ac:5b:09:60:1b:6e:f9:39:6e:15:ec:
ee:89:74:59:cb:86:0c:14:59:21:90:48:db:1e:b1:bd:b6:8a:
65:e2:1d:99:d4:37:89:08:a9:68:79:a7:e1:b2:81:9b:dd:3f:
2f:48:9f:3b:d3:8f:09:6f:31:b7:10:95:b7:ce:22:f1:34:f0:
1c:15:b8:71:6b:2d:f8:cd:15:17:58:d4:84:c1:ea:7e:4b:95:
d6:3d:14:3d:dc:e9:e8:7a:f5:c9:35:ff:27:24:68:22:c9:31:
ae:1a:45:e5:c8:09:6e:74:e2:00:2c:1a:7c:60:5c:10:13:ee:
95:9f:c0:0d:d2:69:f7:8b:52:34:e9:4d:5b:e5:f7:63:37:8f:
ca:22:90:a3:60:0a:b4:4e:5d:60:91:fc:b8:52:4d:1c:af:23:
a0:54:89:7d:f3:9e:91:00:65:9c:0d:45:6d:27:13:36:e4:ec:
70:c4:5e:7b:ed:bd:a6:5e:33:b2:39:aa:54:19:4e:96:ab:f7:
9c:6c:eb:0b:0c:0b:9b:02:4f:3f:cb:8c:f7:35:57:ce:8e:21:
55:14:7d:7c:3c:1b:49:ad:23:6a:72:ee:87:fb:ca:f1:58:3d:
1e:78:cb:e4:94:aa:6d:3d:9a:d5:0a:ee:f7:d4:b8:d9:0f:63:
1c:03:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:10:19 2025 by rpki-client