This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json)
Hash identifier: /F6gEHTnN2WCazjUZmDp9+7FAsui1AeP8Avujg1JWW4=
Subject key identifier: B3:76:AB:9B:41:65:AD:61:41:76:61:C1:22:03:FD:45:07:A5:93:C2
Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
Manifest number: 01A0
Signing time: Tue 23 Dec 2025 02:23:12 +0000
Manifest this update: Tue 23 Dec 2025 02:23:12 +0000
Manifest next update: Tue 30 Dec 2025 02:23:12 +0000
Files and hashes: 1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: +zLoXp0q7a46NovdelYbqxTWJB2RJGZSt4CO5j3MVls=)
2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl
rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Validity
Not Before: Dec 23 02:23:12 2025 GMT
Not After : Dec 30 02:23:12 2025 GMT
Subject: CN=6949fd10-62ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:e5:b0:05:5f:cf:39:a4:15:a6:83:bf:f7:
65:56:7c:51:0a:dd:10:14:24:92:96:83:4e:c5:5f:
77:5a:9d:19:e4:f1:7e:63:f0:15:03:d8:ce:41:65:
7e:35:4e:76:6c:13:97:2b:c7:a0:2e:80:b4:82:4b:
7c:c6:32:20:72:1e:78:55:bc:53:b4:ac:20:68:3c:
9d:59:8a:0b:ac:8c:91:01:43:46:97:45:7f:6b:bd:
a0:8e:4d:24:24:31:79:19:d4:f2:88:22:6a:bd:a0:
c0:44:04:6f:0b:e6:78:cb:59:58:ee:54:e5:37:4d:
c5:1e:9a:c8:34:0a:4d:ec:9c:f3:1e:ea:b0:5d:22:
ad:d6:84:45:41:a6:7d:e7:34:d8:5d:31:09:ed:14:
ec:57:2b:0f:08:a1:7c:09:ad:78:54:ef:2e:02:17:
56:7d:11:2d:25:cb:33:e9:a6:3d:08:ff:72:6f:7b:
5c:8a:41:56:68:35:48:50:fe:d0:4e:0f:d9:e2:fa:
c2:36:51:ab:26:85:28:47:86:e7:ee:e3:a0:f1:51:
ba:84:d7:f3:19:de:ef:bd:09:e7:67:e3:39:33:58:
ba:8a:f6:a6:72:10:29:49:9f:d7:d8:b2:1d:e7:b8:
e7:ea:8f:0b:56:90:ab:59:ce:0a:a2:d5:e0:5d:79:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:AB:9B:41:65:AD:61:41:76:61:C1:22:03:FD:45:07:A5:93:C2
X509v3 Authority Key Identifier:
keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:e6:6a:25:66:d8:e0:5f:76:48:b4:cf:f3:74:8a:77:ca:
73:24:85:53:fe:16:b3:2c:82:91:12:49:cf:6f:21:15:38:82:
0b:14:4f:2e:50:72:55:de:b1:9c:ca:81:78:06:90:aa:c4:20:
c2:f1:4a:a9:f8:8b:57:a8:36:9b:73:54:b8:6e:64:00:81:6b:
f9:d7:cc:b6:d1:01:4b:67:b3:a2:68:ae:40:ea:67:3d:97:04:
15:6c:81:dc:7b:8e:fa:56:59:50:65:e6:14:8f:0a:21:1b:6b:
bc:92:eb:13:f6:a5:51:2b:0e:0e:59:45:74:97:f7:fb:5d:b7:
37:ce:c8:28:c8:6d:c2:5a:39:f6:65:f8:66:91:24:e5:0e:49:
55:2c:70:86:97:2a:be:65:5a:09:8c:af:dd:07:b6:6a:f7:17:
9a:2b:89:aa:72:49:35:7b:37:66:c0:cf:1d:ac:17:a1:e1:7a:
1e:52:2f:52:a9:19:0d:96:71:6f:fb:1e:33:8c:09:82:ce:90:
b2:c2:0b:87:07:fe:cf:66:fb:94:00:c1:4d:a5:c5:c4:16:d0:
22:bd:c8:3d:48:27:94:fa:62:5e:c6:20:0a:cc:99:e6:a4:71:
3e:9e:ee:73:d8:ea:c3:4c:2a:f0:01:82:53:43:dc:28:eb:70:
ae:84:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:43 2025 by rpki-client