This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          kUkOYlIKwnkRgxbASlBGmYAQ/PHvn/wjfYbyHQAvSmM=
Subject key identifier:   9D:66:10:00:E0:00:8E:DB:C0:ED:E0:79:9B:BE:B4:50:CF:52:57:A9
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          74
Signing time:             Sun 25 Jan 2026 05:59:00 +0000
Manifest this update:     Sun 25 Jan 2026 05:58:59 +0000
Manifest next update:     Sun 01 Feb 2026 05:58:59 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: bWpwzJ3eQAZLLdXX+vuVQ55lTZr98nVJnL2E0KhEecM=)
                          2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: BRO70xst4iX7U+BsAkMQkxP1DSIFJqspyvz/A47AIrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Jan 25 05:58:59 2026 GMT
            Not After : Feb  1 05:58:59 2026 GMT
        Subject: CN=6975b123-7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:c5:e8:24:11:42:60:b2:a2:68:6b:c6:3b:
                    0e:97:d1:42:e9:8d:30:dd:95:9f:9d:10:27:7d:de:
                    f3:60:fd:b7:65:e1:0e:9f:c0:b6:db:df:a4:7a:69:
                    67:62:31:f1:d8:a2:fa:ef:ee:22:1f:99:aa:76:b5:
                    af:37:be:f0:5f:83:2d:b1:18:55:02:0a:d5:ae:b6:
                    3c:2d:d0:64:37:63:7b:e6:71:8e:19:de:3a:aa:68:
                    30:94:df:ef:59:1b:ca:01:7e:dc:fa:a1:fc:fe:a8:
                    27:76:04:a0:c6:0a:24:22:0c:2c:f7:5e:29:3d:8d:
                    83:2d:15:a1:86:cb:8b:32:e5:ea:29:a6:af:80:d3:
                    1e:3a:ee:a9:39:d8:c9:cb:96:9a:22:a0:67:04:4f:
                    3e:19:7f:82:a6:93:8f:48:da:e8:eb:58:b7:84:f3:
                    58:40:f9:65:b8:7f:7e:af:e9:bd:5c:f4:fb:16:0d:
                    48:a7:1e:58:50:8b:c5:65:ac:90:71:77:ab:6b:65:
                    af:71:95:58:94:b4:d4:c5:5f:b8:61:88:76:86:09:
                    be:dc:45:b2:92:91:f3:83:11:ba:3b:19:36:0d:cc:
                    f2:54:d2:93:e0:cf:17:a7:b9:db:d1:8a:01:c7:6e:
                    70:60:69:7e:f5:ba:3c:40:49:e5:bb:96:d1:0a:1c:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:10:00:E0:00:8E:DB:C0:ED:E0:79:9B:BE:B4:50:CF:52:57:A9
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:67:7f:ec:99:3b:ca:2d:b1:df:bd:0e:46:ec:8a:af:a0:a0:
         6a:58:65:8a:9f:96:bc:53:48:2b:79:b5:de:ba:02:6d:7a:8a:
         2e:21:45:08:f4:60:af:0f:cc:9d:d7:03:69:ce:d2:0e:0c:82:
         c1:de:0f:da:8e:00:7c:5e:dd:12:7f:e2:4a:75:fb:ed:e3:ea:
         c6:53:b5:7e:9d:dd:da:f9:d8:ec:c3:71:8f:b5:8b:33:7b:11:
         3c:77:87:7a:e1:30:d4:af:e1:ab:a8:aa:a4:9c:d8:8a:3e:3f:
         97:53:a4:bd:56:26:76:50:13:e0:53:ec:e4:7b:80:49:ff:76:
         83:ff:4c:2d:80:ec:de:92:37:e4:d8:5a:e4:8f:01:a8:af:18:
         e7:42:ac:fd:75:36:97:11:69:7d:6a:0b:5d:2d:a9:e9:6a:07:
         c4:6f:dc:00:95:2c:f4:2d:9a:7b:c0:6d:56:57:5c:51:df:49:
         c0:4d:4b:13:8e:48:9f:3d:c6:98:ed:f2:52:b8:0f:6a:86:94:
         71:d3:87:03:69:20:f7:a5:af:3c:22:68:b6:1f:b9:05:b4:2d:
         1b:9b:3c:73:fe:cb:e5:5a:a4:30:07:d3:42:d9:d0:e8:80:4e:
         24:17:91:ff:54:2d:b9:af:23:a8:d8:84:31:b0:dc:40:90:a5:
         de:aa:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:18 2026 by rpki-client