This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json) Hash identifier: 2RDALxK2untGy/AuEaYeB6MAQopTrPgSSJgW5k9Or2w= Subject key identifier: 88:6C:27:1A:28:E8:29:99:4D:96:27:38:8A:EE:2A:6D:F6:74:81:76 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft Manifest number: 0A38 Signing time: Mon 08 Dec 2025 19:03:29 +0000 Manifest this update: Mon 08 Dec 2025 19:03:29 +0000 Manifest next update: Mon 15 Dec 2025 19:03:29 +0000 Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: nsT6QxEMcQSuwY/rEMLXAm5TCEDeKnYDDTz3PVkpzuc=) 2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: ySqzG3zuhFyXYAB2Xvo/Kh6V5F+Kgf+Nm0xewmIwrC0=) 3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: +4sh+kkJlvofIvhDoAc4FYEyHszuJnLGQWpeb3RoKWE=) 4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 2q8AYDfxOWLoT2+AfymL8bwLlmcQOfxdk8eBjQ1Y2sU=) 5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: oieioWnzirmBWxUqlI6Ul54vXPOVVivDpWtM1tLxmFQ=) 6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: s2nUxCRuLuGEazR6JBSUwlKRD9YIJ5lbB/8C9TPhUEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Dec 8 19:03:29 2025 GMT Not After : Dec 15 19:03:29 2025 GMT Subject: CN=69372101-1c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:dd:f4:2f:a7:0a:00:ac:4e:c7:ff:45:1d: f5:3c:c6:56:13:de:ce:f5:af:d5:70:dd:66:a3:8d: 90:44:74:1d:44:ed:96:8c:ce:da:6d:ef:23:89:c3: 2d:94:44:44:7f:50:62:91:07:9b:7b:ed:6a:d4:d4: 2e:fa:38:b7:cf:53:99:d2:72:b3:da:8d:a8:2c:3c: 67:aa:b5:e4:a6:2e:2a:a3:3b:9c:5c:33:59:da:c4: 4e:ba:b6:a8:44:7c:e7:46:b5:27:18:3e:53:ff:00: 5a:9b:41:d3:78:d8:01:1d:60:d9:3e:e7:86:7f:97: ea:5c:a6:3a:87:5b:f4:ea:f7:9a:ac:fd:16:65:8b: c6:ea:4e:e0:a8:50:11:02:20:2f:e2:06:4d:32:d9: b3:52:39:73:2e:d1:04:99:9b:3a:6f:85:2e:53:60: ef:58:f3:e8:a7:f6:f0:35:3d:94:78:3c:2c:01:70: 37:85:ee:6e:1d:00:b8:bd:81:20:44:ef:28:6d:e4: b7:91:19:c3:08:62:96:59:d3:be:6b:c9:80:06:06: 7a:d7:23:20:ae:62:a6:5e:bf:ae:d3:85:92:fc:4c: 95:73:98:38:de:0f:dd:d1:ff:31:ab:4b:ea:87:72: 91:04:b6:1d:50:5a:dd:7e:1b:ab:bf:72:cb:4e:15: 6a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6C:27:1A:28:E8:29:99:4D:96:27:38:8A:EE:2A:6D:F6:74:81:76 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:00:ac:c2:c5:27:08:2f:9b:43:e6:09:9e:29:c5:a9:5c:19: d0:32:05:45:72:9d:bd:fb:c0:40:76:49:86:2f:f0:57:2c:c5: ec:66:2b:83:3c:41:7f:d4:58:a2:9c:00:35:14:44:96:72:bb: d6:46:d8:9c:2b:4c:d4:ca:44:02:a5:3d:70:43:0b:70:a9:06: 98:95:8b:5c:83:d1:02:d3:ff:2f:a6:cc:63:89:ec:ea:c1:f7: d9:d6:69:6b:4a:d6:5b:5a:d9:f5:cf:ba:b8:e5:1c:ee:b6:85: 67:46:3d:ef:0e:e8:6b:fd:bc:40:74:24:17:6a:e6:e7:03:63: 0a:55:8a:8d:a3:54:9b:54:19:97:76:91:d4:2a:34:a7:c8:0d: 72:28:ea:c2:ea:aa:e5:a9:eb:78:98:3a:07:c8:5e:28:55:93: 34:70:54:07:c4:2a:35:31:26:4d:91:9f:11:a9:ff:55:78:60: 48:a5:18:20:d7:74:0c:fc:0c:50:c3:83:d2:aa:93:09:11:bd: c3:5e:97:94:96:9a:7e:e2:14:58:33:71:9e:2d:66:8b:af:00: d6:a2:93:f4:12:ce:43:fc:2a:18:50:cb:d8:f5:81:1c:d2:b6: 49:1d:5b:66:07:b6:ca:f0:8a:0e:26:f9:32:2b:02:f7:3b:e3: d2:43:49:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjUxMjA4MTkwMzI5WhcNMjUxMjE1MTkwMzI5WjAYMRYwFAYD VQQDEw02OTM3MjEwMS0xYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ivd9C+nCgCsTsf/RR31PMZWE97O9a/VcN1mo42QRHQdRO2WjM7abe8jicMt lEREf1BikQebe+1q1NQu+ji3z1OZ0nKz2o2oLDxnqrXkpi4qozucXDNZ2sROurao RHznRrUnGD5T/wBam0HTeNgBHWDZPueGf5fqXKY6h1v06vearP0WZYvG6k7gqFAR AiAv4gZNMtmzUjlzLtEEmZs6b4UuU2DvWPPop/bwNT2UeDwsAXA3he5uHQC4vYEg RO8obeS3kRnDCGKWWdO+a8mABgZ61yMgrmKmXr+u04WS/EyVc5g43g/d0f8xq0vq h3KRBLYdUFrdfhurv3LLThVqrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhsJxoo 6CmZTZYnOIruKm32dIF2MB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXAKzCxScIL5tD5gmeKcWpXBnQMgVFcp29+8BAdkmGL/BXLMXsZiuD PEF/1FiinAA1FESWcrvWRticK0zUykQCpT1wQwtwqQaYlYtcg9EC0/8vpsxjiezq wffZ1mlrStZbWtn1z7q45RzutoVnRj3vDuhr/bxAdCQXaubnA2MKVYqNo1SbVBmX dpHUKjSnyA1yKOrC6qrlqet4mDoHyF4oVZM0cFQHxCo1MSZNkZ8Rqf9VeGBIpRgg 13QM/AxQw4PSqpMJEb3DXpeUlpp+4hRYM3GeLWaLrwDWopP0Es5D/CoYUMvY9YEc 0rZJHVtmB7bK8IoOJvkyKwL3O+PSQ0n3 -----END CERTIFICATE-----Generated at Wed Dec 10 05:08:06 2025 by rpki-client