This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
File:                     BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft (raw, json)
Hash identifier:          trVll4xkbyN4mvnNsmOsxoZdgg5qvub3tQEerNg8CkU=
Subject key identifier:   0F:78:60:A4:88:D0:F2:49:85:87:15:8B:CC:DE:E7:41:8C:6D:F8:D0
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Certificate issuer:       /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
Manifest number:          01CA
Signing time:             Sun 21 Dec 2025 02:18:03 +0000
Manifest this update:     Sun 21 Dec 2025 02:18:03 +0000
Manifest next update:     Sun 28 Dec 2025 02:18:03 +0000
Files and hashes:         1: BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl (hash: r3ry3Rq/rk9ToJef72gUB7JgkCjofEic5bawpARXyEI=)
                          2: EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (hash: MjUC58Jbut/RLQz7tFdLQRZzKyQ/nZJ7CMULIIsNiZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
        Validity
            Not Before: Dec 21 02:18:03 2025 GMT
            Not After : Dec 28 02:18:03 2025 GMT
        Subject: CN=694758db-b9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:a7:97:19:5a:77:d4:4f:2f:c7:03:5f:f9:
                    a0:f4:7b:ab:11:27:76:1f:39:c6:d8:ec:0d:aa:42:
                    7c:9a:e1:32:78:37:1b:43:85:22:40:e4:ca:1c:7f:
                    2c:90:3c:7f:ae:f0:99:bc:36:c7:83:ff:9f:46:22:
                    49:e6:b9:cf:75:98:60:25:25:78:58:5c:0e:33:83:
                    2c:78:7c:77:80:51:3d:27:86:54:0a:ab:9a:05:12:
                    6d:75:6d:c5:0e:17:41:43:18:a7:29:61:4e:c5:db:
                    01:bc:2a:92:93:80:fc:b1:3a:86:45:fb:23:02:d7:
                    0e:9c:01:d7:37:81:b2:41:35:f3:2e:0f:b0:f7:1d:
                    13:3e:7b:31:02:fc:eb:59:89:a9:78:d3:40:75:7d:
                    0f:3b:d5:d6:b7:ae:db:c6:06:18:b4:d5:84:ef:22:
                    8a:ee:d2:c5:bc:39:e5:a9:c9:00:5b:7f:74:02:98:
                    9e:03:8e:df:33:21:0f:84:75:05:84:a3:b7:09:50:
                    dc:2d:7b:59:3d:88:2a:d1:f5:6c:ef:98:e5:c7:30:
                    07:17:5c:c1:1e:72:55:7b:32:46:74:29:b3:3e:b6:
                    83:f6:03:f2:51:9f:2c:7b:6e:1f:d9:8b:10:60:70:
                    82:a4:ce:4f:a1:a7:f2:9b:d9:3a:1e:98:c3:97:b7:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:78:60:A4:88:D0:F2:49:85:87:15:8B:CC:DE:E7:41:8C:6D:F8:D0
            X509v3 Authority Key Identifier:
                keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:53:9b:de:14:03:ef:ec:5f:58:1b:9d:0d:88:2e:01:3d:
         8d:ab:c1:4a:07:e6:c2:c7:78:11:99:f3:39:c5:be:61:c8:02:
         dc:95:d2:1b:06:09:6f:da:cf:d5:73:ed:36:84:94:3c:8b:3c:
         85:9c:82:16:e7:35:85:e7:be:5f:29:a1:00:58:46:75:13:56:
         77:ad:59:2d:74:0c:a7:c2:ad:3a:d3:fe:a3:4e:7f:83:c2:85:
         00:eb:75:f9:9d:e6:a6:79:bd:ad:cc:df:fa:27:61:2d:0c:24:
         f8:5d:75:52:a5:d9:8d:85:bc:bb:a7:c7:2e:d8:68:d5:5c:19:
         a5:f8:3a:db:92:e1:22:93:e7:4e:e3:91:67:b7:e5:ac:d2:05:
         26:0e:7c:d4:69:91:7a:22:94:b1:7d:58:22:cb:8e:49:ad:30:
         2c:76:e6:b6:9f:33:0c:49:05:80:dc:d8:ef:6c:57:c9:e6:26:
         e2:7d:f5:d3:fc:c1:29:ee:93:96:7e:cf:67:38:e1:f0:b2:f6:
         4a:87:1d:2e:4e:15:9f:c3:25:28:5a:da:64:51:7b:95:85:d9:
         41:38:42:d1:63:85:a7:94:7f:14:5d:cd:bc:a3:b7:c2:3c:55:
         6c:46:28:8a:a5:0b:33:3e:b5:ab:08:1f:c1:be:a3:d5:de:23:
         5c:84:f9:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJGQUIxMTAvBgNVBAUTKDA1ODNBODVGRTMxM0ZDMEQ2MzY2RTIyQzQ0NjZCMjkz
RUFENDVBRTQwHhcNMjUxMjIxMDIxODAzWhcNMjUxMjI4MDIxODAzWjAYMRYwFAYD
VQQDDA02OTQ3NThkYi1iOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4enlxlad9RPL8cDX/mg9HurESd2HznG2OwNqkJ8muEyeDcbQ4UiQOTKHH8s
kDx/rvCZvDbHg/+fRiJJ5rnPdZhgJSV4WFwOM4MseHx3gFE9J4ZUCquaBRJtdW3F
DhdBQxinKWFOxdsBvCqSk4D8sTqGRfsjAtcOnAHXN4GyQTXzLg+w9x0TPnsxAvzr
WYmpeNNAdX0PO9XWt67bxgYYtNWE7yKK7tLFvDnlqckAW390ApieA47fMyEPhHUF
hKO3CVDcLXtZPYgq0fVs75jlxzAHF1zBHnJVezJGdCmzPraD9gPyUZ8se24f2YsQ
YHCCpM5Poafym9k6HpjDl7f9EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA94YKSI
0PJJhYcVi8ze50GMbfjQMB8GA1UdIwQYMBaAFAWDqF/jE/wNY2biLERmspPq1Frk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkZBQi8zM0E5Q0M5QzM2
ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9BMWpadUlzUkdheWstclVX
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkZBQi8zM0E5Q0M5QzM2ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9B
MWpadUlzUkdheWstclVXdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBopFOb3hQD7+xfWBudDYguAT2Nq8FKB+bCx3gRmfM5xb5hyALcldIb
Bglv2s/Vc+02hJQ8izyFnIIW5zWF575fKaEAWEZ1E1Z3rVktdAynwq060/6jTn+D
woUA63X5neameb2tzN/6J2EtDCT4XXVSpdmNhby7p8cu2GjVXBml+DrbkuEik+dO
45Fnt+Ws0gUmDnzUaZF6IpSxfVgiy45JrTAsdua2nzMMSQWA3NjvbFfJ5ibiffXT
/MEp7pOWfs9nOOHwsvZKhx0uThWfwyUoWtpkUXuVhdlBOELRY4WnlH8UXc28o7fC
PFVsRiiKpQszPrWrCB/BvqPV3iNchPkt
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:00:19 2025 by rpki-client