This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft File: twc6HQnyOiR_zleFKqS4poDG2nA.mft (raw, json) Hash identifier: cOeTYGqQ4jNHozih6UTjm6UDV/TGsjPLMHcobeEZ1xg= Subject key identifier: 7B:1B:B7:65:6E:F6:33:08:3B:F4:70:FB:60:C3:AF:86:A6:5C:B8:6C Authority key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70 Certificate issuer: /CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70 Certificate serial: 33B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft Manifest number: 33B8 Signing time: Wed 24 Dec 2025 15:13:32 +0000 Manifest this update: Wed 24 Dec 2025 15:13:31 +0000 Manifest next update: Wed 31 Dec 2025 15:13:31 +0000 Files and hashes: 1: twc6HQnyOiR_zleFKqS4poDG2nA.crl (hash: WljHPGZ4KQMs5CW5uIFCqaJTiR99SaVsWuld2gsq5pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13240 (0x33b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E75D, serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70 Validity Not Before: Dec 24 15:13:31 2025 GMT Not After : Dec 31 15:13:31 2025 GMT Subject: CN=694c031c-96a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:8f:70:a4:6f:a7:29:a6:e8:de:b9:46:4f: 6c:2e:b8:6e:d3:b5:3e:1d:98:64:cc:1d:be:a0:1a: 40:1f:05:35:be:e3:33:df:4c:da:ab:11:31:89:a0: 91:22:90:f1:e2:04:ff:e7:9b:06:29:c4:76:3e:33: 3f:f3:c2:b9:47:12:93:79:3a:1c:4b:95:95:c2:d9: b2:34:36:1d:86:95:36:1f:bb:c9:6a:c6:b6:37:de: 27:67:53:0c:5e:81:cd:2a:7f:62:86:30:05:cc:7a: 33:d1:95:90:27:7c:90:a5:96:a6:ba:fb:5c:b2:b4: ae:e4:d0:84:d2:d6:d5:1c:78:b9:d8:90:37:2f:93: 44:cf:ac:bc:6a:5b:59:06:b1:73:ff:b3:2b:6d:6b: e0:c0:1a:03:e5:bc:c4:9b:79:60:a6:49:43:cb:25: 7b:4c:63:27:8b:15:2b:c8:98:7f:c3:6e:9a:dd:4a: 3d:17:36:d0:65:a9:2d:d7:78:ee:b4:bb:74:27:2b: 81:1d:c2:a8:3e:ac:36:c3:ef:08:16:ee:d8:ef:f3: 92:f0:cd:8c:e1:87:02:db:04:72:40:eb:a5:53:aa: 30:1d:d3:38:e6:4d:8b:5c:81:69:d7:a4:cf:13:dc: 62:e7:aa:4d:47:63:21:0f:54:43:43:e1:ab:fc:21: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:B7:65:6E:F6:33:08:3B:F4:70:FB:60:C3:AF:86:A6:5C:B8:6C X509v3 Authority Key Identifier: keyid:B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2a:54:b0:bd:87:f0:9e:71:2b:63:9f:66:c7:d0:92:7f:93: 13:e9:bd:e6:8d:52:72:da:9d:32:5b:5e:79:79:d0:d7:b2:b1: cc:6e:a6:fc:a2:37:f5:38:fa:59:13:0d:7b:0c:d2:70:9b:32: c6:3e:73:0d:3b:31:c1:04:8f:2d:7f:8e:68:6b:71:a0:d4:51: d8:e6:2c:45:8e:88:74:20:38:e6:56:4a:16:a7:cd:a8:18:87: d3:8e:dd:30:71:0f:d9:0d:ca:23:29:d7:4d:86:06:82:1e:8c: a0:c1:20:6c:6c:7e:cc:ed:1c:04:1f:3a:58:ca:06:83:57:e5: 96:a2:61:1e:78:b0:91:75:54:18:20:6d:71:87:b4:02:13:d5: 14:04:fd:a1:68:22:c0:be:f6:29:6a:da:81:b5:52:85:65:67: a5:6d:0b:32:24:f0:96:23:e7:f6:1c:9b:5a:7c:1e:f3:49:bc: 21:b9:3d:9d:46:ca:92:aa:b4:81:df:98:01:f7:bc:32:af:06: 63:e3:27:8b:7b:73:c1:08:91:61:49:83:f2:9e:67:88:62:98: fe:90:a8:d9:29:e4:f2:3d:d8:e8:e9:c1:f1:24:07:84:ca:4b: 4c:07:a9:38:3d:d7:cd:bf:62:fe:6f:f5:22:bd:38:91:79:5c: 34:d2:d3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NUQxMTAvBgNVBAUTKEI3MDczQTFEMDlGMjNBMjQ3RkNFNTc4NTJBQTRCOEE2 ODBDNkRBNzAwHhcNMjUxMjI0MTUxMzMxWhcNMjUxMjMxMTUxMzMxWjAYMRYwFAYD VQQDDA02OTRjMDMxYy05NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM+PcKRvpymm6N65Rk9sLrhu07U+HZhkzB2+oBpAHwU1vuMz30zaqxExiaCR IpDx4gT/55sGKcR2PjM/88K5RxKTeTocS5WVwtmyNDYdhpU2H7vJasa2N94nZ1MM XoHNKn9ihjAFzHoz0ZWQJ3yQpZamuvtcsrSu5NCE0tbVHHi52JA3L5NEz6y8altZ BrFz/7MrbWvgwBoD5bzEm3lgpklDyyV7TGMnixUryJh/w26a3Uo9FzbQZakt13ju tLt0JyuBHcKoPqw2w+8IFu7Y7/OS8M2M4YcC2wRyQOulU6owHdM45k2LXIFp16TP E9xi56pNR2MhD1RDQ+Gr/CEVEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsbt2Vu 9jMIO/Rw+2DDr4amXLhsMB8GA1UdIwQYMBaAFLcHOh0J8jokf85XhSqkuKaAxtpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1RC84NjAyMzAyMjU5 RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9pUl96bGVGS3FTNHBvREcy bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3YzZIUW55T2lSX3psZUZLcVM0cG9ERzJuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTc1RC84NjAyMzAyMjU5RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9p Ul96bGVGS3FTNHBvREcybkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9KlSwvYfwnnErY59mx9CSf5MT6b3mjVJy2p0yW155edDXsrHMbqb8 ojf1OPpZEw17DNJwmzLGPnMNOzHBBI8tf45oa3Gg1FHY5ixFjoh0IDjmVkoWp82o GIfTjt0wcQ/ZDcojKddNhgaCHoygwSBsbH7M7RwEHzpYygaDV+WWomEeeLCRdVQY IG1xh7QCE9UUBP2haCLAvvYpatqBtVKFZWelbQsyJPCWI+f2HJtafB7zSbwhuT2d RsqSqrSB35gB97wyrwZj4yeLe3PBCJFhSYPynmeIYpj+kKjZKeTyPdjo6cHxJAeE yktMB6k4PdfNv2L+b/UivTiReVw00tMd -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:54 2025 by rpki-client