This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
File:                     bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json)
Hash identifier:          hxIGLmrxyGiu1HIoCpFRmKVuuMn++wnmcBfcmyiVxuY=
Subject key identifier:   9A:E3:FE:08:5A:46:26:65:EE:FE:DD:F8:1F:60:12:52:2F:99:47:28
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Certificate issuer:       /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
Manifest number:          038C
Signing time:             Sat 24 Jan 2026 23:59:15 +0000
Manifest this update:     Sat 24 Jan 2026 23:59:14 +0000
Manifest next update:     Sat 31 Jan 2026 23:59:14 +0000
Files and hashes:         1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: /h76Ct6xEM6suuOpaopHxuhMmL/1zZqYM07ZL0adVE8=)
                          2: 57883938B4E411F0AEF0381FC4F9AE02.roa (hash: R/0WxMD8Q6vIMFXXnsYNu7dECptwTIT57sR8jvzLLpQ=)
                          3: 58699F5EB4E411F0AEF0381FC4F9AE02.roa (hash: h2ID8hdDjbhE6AZgWr8n/8IjjT8UJR98H8a09uyii/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl
                          rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917624C, serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
        Validity
            Not Before: Jan 24 23:59:14 2026 GMT
            Not After : Jan 31 23:59:14 2026 GMT
        Subject: CN=69755cd2-35d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:41:13:23:ce:75:50:f6:7c:d6:a9:08:38:
                    ea:37:d8:39:76:05:ed:b7:a3:52:0b:9f:9b:4f:56:
                    e7:54:2d:2f:83:e7:f8:d7:e9:f5:78:ab:e9:70:d7:
                    c5:82:b3:23:91:62:bc:d4:08:e5:cb:58:e4:ef:51:
                    3b:81:75:3e:88:98:5b:ec:a9:42:40:49:a7:84:d1:
                    29:cb:cc:6c:99:00:41:a1:bc:22:52:96:97:e7:9b:
                    bd:43:30:c6:3c:79:17:c6:e7:e9:e9:71:c3:db:39:
                    3b:82:20:bb:45:c9:e3:79:9b:11:01:b4:3e:08:85:
                    35:a2:9e:06:8c:c2:4e:4f:72:36:52:72:d8:05:40:
                    83:fd:0c:95:49:8d:8f:c2:21:a1:0a:5f:6e:47:2e:
                    37:dd:fd:5d:71:07:7e:f4:09:3d:10:61:0f:c7:1d:
                    a7:7d:11:d8:a3:c0:ff:70:87:cb:bb:9e:15:e5:ee:
                    54:3d:d5:55:8d:08:59:cc:86:f4:99:6b:d9:24:1c:
                    b0:69:71:42:4f:ad:be:9e:d1:f2:a9:7f:dc:d8:9d:
                    79:36:63:17:68:c8:05:c2:c5:b2:9a:72:f7:f4:19:
                    d7:4e:1b:3f:56:1e:2a:e6:fd:0b:cc:b2:a3:73:d9:
                    5a:a5:dd:5f:32:79:0f:a2:55:f3:3c:64:46:39:26:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:FE:08:5A:46:26:65:EE:FE:DD:F8:1F:60:12:52:2F:99:47:28
            X509v3 Authority Key Identifier:
                keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:93:a8:d2:c9:47:59:01:82:49:66:ae:fa:09:6e:e0:67:37:
         f4:e2:d2:5e:7f:97:67:aa:bc:6a:60:73:c6:50:3f:d5:9b:38:
         2b:5c:02:d9:08:aa:dd:d9:7f:74:6b:e5:0d:60:0d:86:f3:01:
         ce:2a:45:5f:b2:61:2e:b1:34:a4:ff:28:79:0f:06:d8:79:2b:
         ac:1e:d5:cc:b6:36:28:cb:bf:66:45:99:5c:08:59:06:8a:a1:
         4c:57:6b:89:09:54:41:18:b3:87:cd:50:28:64:20:67:c1:06:
         4e:aa:bc:b6:60:f8:38:61:4e:c0:74:ca:de:f1:be:b2:0f:8f:
         f9:3b:cc:bb:d3:60:6c:42:84:e7:9e:12:56:67:81:5e:2e:89:
         ce:1c:1d:bc:08:a9:24:22:1d:6c:c1:ba:86:c5:6f:47:fe:a9:
         02:b5:35:8d:59:9e:60:72:04:cb:9f:d4:a5:cf:1b:ce:e9:fc:
         c9:38:7e:5d:cb:9b:5b:c5:34:74:0a:7b:29:41:41:44:4a:17:
         66:35:cf:9c:22:aa:db:e1:7f:1a:75:55:f8:21:0a:f0:50:13:
         cc:54:9d:8e:f9:c4:2a:1d:f4:83:35:30:65:82:0d:c5:7a:a4:
         1b:12:09:96:2f:03:e5:8d:87:19:a3:69:98:e0:f7:cd:0e:24:
         c0:19:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:10 2026 by rpki-client