This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
File:                     fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json)
Hash identifier:          HNS0hDYPJPKNBkxcBsoQvvrkCEWSvE/23pgtgbDGy/g=
Subject key identifier:   95:CF:21:D9:5D:69:17:DF:24:54:E1:BD:03:E5:64:4A:B4:09:2C:C8
Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
Certificate issuer:       /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
Manifest number:          9A
Signing time:             Tue 23 Dec 2025 05:19:41 +0000
Manifest this update:     Tue 23 Dec 2025 05:19:40 +0000
Manifest next update:     Tue 30 Dec 2025 05:19:40 +0000
Files and hashes:         1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: VfLUilPqs8+JFnSTqL8tvBdVFsxWcAfetaOBj80Yu2E=)
                          2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
        Validity
            Not Before: Dec 23 05:19:40 2025 GMT
            Not After : Dec 30 05:19:40 2025 GMT
        Subject: CN=694a266c-1294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:7a:85:58:4f:68:00:de:c7:9c:d5:59:dc:
                    5d:8a:64:8c:7b:36:69:6c:7b:0f:0f:78:a8:64:f4:
                    bd:f4:e0:a9:cf:0f:a7:c2:e4:3f:ca:15:60:ab:89:
                    d8:51:d0:89:5c:e4:34:be:9b:b8:45:4c:e6:aa:65:
                    84:f6:a7:1c:76:63:e5:79:4e:38:43:fc:0f:58:f9:
                    4c:fe:56:85:0b:67:7d:3d:e9:4a:d9:e8:6c:bd:87:
                    0c:60:21:23:03:d6:7a:05:f2:55:7f:70:1d:5f:52:
                    b0:16:35:a8:ad:fb:4c:dd:d6:67:3d:97:7b:97:35:
                    24:41:76:73:84:a4:34:f9:55:73:c7:44:4a:d3:68:
                    1c:88:89:9e:41:91:2b:18:33:5b:cf:3d:d6:1c:ba:
                    00:bf:45:fa:ed:50:3e:85:72:0e:83:2b:17:b7:b0:
                    7f:f1:8c:1f:37:8a:b0:99:c0:8f:ee:1f:e2:0a:7b:
                    28:e2:1e:18:70:75:98:08:fc:31:c3:82:94:60:e6:
                    1f:d4:dc:48:89:f7:2d:c3:bb:42:a8:ae:bb:82:6b:
                    ba:d7:94:b1:8c:97:10:54:3a:eb:8f:9f:ab:81:38:
                    56:c1:96:21:8b:b3:1b:db:64:dd:4a:fe:7f:68:0e:
                    d3:54:27:18:fb:8f:33:63:c8:84:38:78:e6:a0:f1:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CF:21:D9:5D:69:17:DF:24:54:E1:BD:03:E5:64:4A:B4:09:2C:C8
            X509v3 Authority Key Identifier:
                keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:31:fd:33:77:3c:ce:33:d0:72:6c:80:c2:24:d1:26:4d:f4:
         81:c0:f8:e5:5d:ae:28:21:2a:56:f5:b8:f9:1c:cf:d6:b8:86:
         b3:e9:9b:43:a2:ae:a6:df:4f:1f:fe:45:38:e0:f6:31:d4:f2:
         e9:1a:39:85:8b:b1:61:2f:67:35:81:28:29:22:81:37:0d:00:
         78:3e:63:74:aa:17:51:71:97:f9:b8:4a:16:07:9f:9e:9f:a4:
         4f:25:17:aa:8c:55:23:5f:6d:e9:b4:8b:9a:ba:27:3e:2a:4e:
         4a:d2:98:6e:4a:76:48:33:75:84:d7:85:35:a5:cf:ed:ef:52:
         21:f1:50:f2:a9:ff:3b:b5:2e:bd:a5:0c:96:d7:f9:a4:f3:a8:
         48:56:07:07:54:93:e1:8b:24:05:cd:b9:e1:bb:a4:5b:10:dc:
         d0:61:3f:08:80:59:6f:d7:71:ee:4f:32:72:e6:1c:01:2e:7c:
         25:c2:85:3d:d5:89:a0:de:09:11:ad:59:d2:26:1c:fa:b7:c6:
         46:4e:e1:63:92:a3:59:2a:0a:7a:7d:1b:1f:6d:94:49:9b:2a:
         6f:b2:9c:66:19:8f:63:6e:34:a9:71:5b:73:42:5d:0a:a4:ee:
         3e:03:7b:92:64:56:3d:9a:94:46:7f:4a:1c:8f:d2:f2:49:82:
         30:dd:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:42 2025 by rpki-client