This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
File:                     fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json)
Hash identifier:          kvgM6UTrksUUCG9d7YqdtZXCDnxkt/DZcJauSGwmNzI=
Subject key identifier:   17:A1:DB:73:EC:26:09:76:31:C8:C6:55:AB:E6:6C:CD:6E:B6:F8:3B
Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
Certificate issuer:       /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
Manifest number:          AB
Signing time:             Sun 25 Jan 2026 05:21:42 +0000
Manifest this update:     Sun 25 Jan 2026 05:21:41 +0000
Manifest next update:     Sun 01 Feb 2026 05:21:41 +0000
Files and hashes:         1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: BtfjbK/zPLJKaNeAM+x4Q16pkIMiPo1oNSctaRSXsxk=)
                          2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
        Validity
            Not Before: Jan 25 05:21:41 2026 GMT
            Not After : Feb  1 05:21:41 2026 GMT
        Subject: CN=6975a866-ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:8c:ac:29:09:5d:20:95:e7:46:6b:ec:46:
                    8a:24:b6:d7:41:bb:13:9e:a5:db:19:a0:40:ae:99:
                    8b:bc:6e:51:c1:c4:83:a0:2d:f4:24:da:2e:ca:26:
                    c6:d6:7c:52:0f:eb:70:df:a6:f7:43:65:30:80:c4:
                    97:ab:bf:62:4a:13:1d:07:ec:66:f6:86:dc:2c:01:
                    24:e7:1c:c4:0a:c3:5e:cb:6d:34:3a:a9:d2:22:cf:
                    ff:c7:18:16:3e:db:bb:df:d8:26:24:3e:3b:98:84:
                    d9:d6:29:9b:f8:a9:13:45:4a:6d:a2:e3:49:36:a0:
                    fa:ff:6f:69:97:53:58:fd:53:a9:b0:db:43:f8:40:
                    28:ab:12:19:35:23:a0:9b:d4:80:e5:0c:8b:04:e7:
                    d2:b7:fa:b6:5b:c2:da:8e:40:c4:27:8a:8c:e1:c2:
                    8f:ff:00:b4:db:ce:56:68:9b:e4:21:55:15:1c:8b:
                    2c:51:5d:64:3e:e2:2f:d2:ce:de:5d:a5:f2:15:ec:
                    93:53:d1:50:cd:b5:f3:cd:07:f0:2a:f4:d0:5e:d4:
                    d9:46:fd:5f:f6:98:2a:52:0b:57:fc:55:16:3e:14:
                    5a:4d:cd:db:b5:69:74:e9:0f:61:fb:f0:5c:06:45:
                    ac:42:12:1a:90:7e:60:8a:bc:88:5d:01:9a:23:2e:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:DB:73:EC:26:09:76:31:C8:C6:55:AB:E6:6C:CD:6E:B6:F8:3B
            X509v3 Authority Key Identifier:
                keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8a:66:3f:a7:39:54:c1:50:78:00:bd:b0:e3:01:9c:ea:87:
         11:7c:e0:5a:9d:f8:14:23:c7:cc:b6:5a:18:f8:ee:43:08:ec:
         b5:95:99:0f:90:9b:f2:56:f7:22:82:c3:d4:07:bc:db:d6:d0:
         bd:e7:c5:62:4a:14:78:ea:ec:0e:b0:76:2d:b6:f9:65:a2:5d:
         66:76:be:9f:d0:11:5b:95:6c:ff:1f:be:08:07:2c:3f:20:81:
         fe:1b:f2:ea:3c:63:6d:ae:7a:03:e8:78:f8:4f:11:39:60:fe:
         04:d3:49:a1:0d:28:ba:f6:b6:39:7d:06:97:2e:b6:53:de:66:
         a0:9f:83:4d:ee:55:27:8b:f3:c0:db:e9:d1:82:3b:53:68:1c:
         58:85:17:c3:7b:47:ad:71:e8:d0:37:0b:08:01:5e:08:77:8e:
         db:e0:fd:81:39:3d:83:75:61:4a:75:90:ee:38:ed:8b:d2:dc:
         72:a7:70:8a:dc:7b:ca:9f:8c:13:05:68:b9:45:79:a4:a2:2f:
         2f:df:24:1f:97:2f:74:12:be:d1:6a:eb:bc:e3:5d:5e:52:e9:
         f1:91:68:94:1f:dc:47:9c:5f:e3:4e:88:cb:34:6e:32:ac:ba:
         e9:b8:6a:62:4d:71:04:1d:3b:08:48:85:1f:0a:6b:00:58:79:
         92:eb:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:09 2026 by rpki-client