This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File:                     47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier:          QLp8FIGNZpXNFcrklqDomP4qi5xixNNuBTE3hFERHfU=
Subject key identifier:   7F:4C:84:A1:09:38:CC:23:BB:5C:47:18:0D:5B:39:9F:EE:BD:C6:60
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       5D72D291D2C63601474D3ED6F3A2A49DF8134833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number:          D5
Signing time:             Fri 19 Dec 2025 03:11:44 +0000
Manifest this update:     Fri 19 Dec 2025 03:06:44 +0000
Manifest next update:     Sat 20 Dec 2025 04:32:44 +0000
Files and hashes:         1: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 00xbHOexyB/QDEyU0P1ebdVXb6o4Z1pV0l8ZKgIxcoc=)
                          2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=)
                          3: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
                          4: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
                          5: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=)
                          6: 3130332e3234382e35312e302f32342d3234203d3e203234333831.roa (hash: mK+CiJu2fRW9UshXNfyJvPqrTJ0tAJI76myoSISKnh4=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 04:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:72:d2:91:d2:c6:36:01:47:4d:3e:d6:f3:a2:a4:9d:f8:13:48:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Dec 19 03:06:44 2025 GMT
            Not After : Dec 20 04:32:44 2025 GMT
        Subject: CN=7F4C84A10938CC23BB5C47180D5B399FEEBDC660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:0f:57:1e:d5:89:ea:90:8f:ed:c7:1b:cf:
                    f8:9a:44:eb:1f:47:40:70:5d:db:8b:3c:07:a8:85:
                    57:d6:af:ae:66:33:cc:7d:d0:ab:85:57:52:ee:f1:
                    62:9a:b5:03:75:84:2b:3a:3a:36:3d:a5:c2:8f:a5:
                    23:17:cc:12:11:1d:3f:6b:7e:fb:99:68:95:0a:cc:
                    27:60:d1:58:11:f8:4f:cd:d6:68:01:80:b9:30:1a:
                    5f:ad:4c:fb:9a:68:46:35:4d:39:7f:68:a9:5a:1c:
                    81:93:19:43:60:d0:56:43:f0:ab:a6:d2:04:82:0c:
                    ae:b1:66:0c:01:f2:07:1e:04:98:b3:dc:d3:bf:97:
                    92:29:ab:70:9c:0c:3f:4e:5a:b0:7c:f4:b4:44:c8:
                    7a:93:f0:59:93:c1:06:52:15:af:92:f0:5d:8d:ce:
                    be:4d:da:5d:58:19:54:e9:39:8e:6d:4d:b1:5a:24:
                    78:8c:92:56:95:64:1b:c4:83:5a:40:7d:b1:de:6f:
                    67:fa:20:c2:64:31:81:00:30:ee:32:83:66:a0:71:
                    13:88:73:e5:c9:fd:fc:c4:e0:b8:3f:8c:cf:9e:fa:
                    84:5a:b2:67:74:4b:7f:cf:5f:f8:3a:17:fc:f1:3a:
                    0a:05:42:4e:6d:da:fe:8a:57:c8:17:93:cc:8a:eb:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:84:A1:09:38:CC:23:BB:5C:47:18:0D:5B:39:9F:EE:BD:C6:60
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:97:12:b7:bf:fa:06:67:4d:9c:bc:32:47:d4:f3:d3:9a:
         50:dc:6c:bd:87:01:da:30:fe:83:76:61:ac:32:20:ab:a1:e4:
         15:2d:28:d0:90:b9:a5:ea:e2:c2:48:a8:0e:1c:de:e9:66:bd:
         a8:cc:f3:b4:d2:f2:f5:91:2e:77:13:51:dd:8a:9d:02:61:c3:
         78:a3:c1:f3:5e:63:4d:f0:f6:a4:32:24:51:bd:75:75:ba:7a:
         97:d1:f5:4b:0a:ee:d3:97:19:4c:9d:7b:86:bc:e5:76:02:92:
         a2:3f:3a:61:8a:1f:bc:47:dd:af:8d:17:65:9e:66:54:72:db:
         0c:9c:d4:e8:2c:54:07:11:e6:3e:2e:fe:04:5b:84:82:b2:5f:
         97:b4:7e:e1:41:66:d1:e6:2b:f4:d6:27:46:20:d6:a0:f5:c5:
         15:f6:c7:ab:8f:ce:43:d2:c4:f5:d4:a8:16:7e:2c:32:25:00:
         c9:d6:d5:11:29:ec:58:fd:e6:71:58:43:58:50:44:23:f5:52:
         7e:dc:01:5e:46:4b:dd:81:5f:7a:62:ca:f7:ff:d2:8f:d7:22:
         4f:2d:9f:21:63:60:38:7d:cc:2e:17:19:a0:98:96:08:ad:e3:
         8a:a5:93:d0:79:ad:08:21:c8:f2:cc:16:3d:e0:f6:ac:ad:67:
         73:3a:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:11:46 2025 by rpki-client