This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
File: twc6HQnyOiR_zleFKqS4poDG2nA.mft (raw, json)
Hash identifier: fT+AbQ7nteICFFgFyYUVKJobROHW1FG6KDll1cOU5Do=
Subject key identifier: F2:5C:E2:CD:6F:9B:79:00:39:3A:14:2C:7F:B1:22:67:72:58:79:6A
Authority key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
Certificate issuer: /CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
Certificate serial: 33AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
Manifest number: 33AF
Signing time: Sat 06 Dec 2025 15:10:39 +0000
Manifest this update: Sat 06 Dec 2025 15:10:38 +0000
Manifest next update: Sat 13 Dec 2025 15:10:38 +0000
Files and hashes: 1: twc6HQnyOiR_zleFKqS4poDG2nA.crl (hash: T7UJqtdEmZnNhEtuRsxqKwYlHhnmD+mf2Bxe+/c30vc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl
rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13231 (0x33af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E75D, serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
Validity
Not Before: Dec 6 15:10:38 2025 GMT
Not After : Dec 13 15:10:38 2025 GMT
Subject: CN=6934476e-6810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:93:b9:0f:3c:c8:e8:c9:61:74:d0:ba:f0:
4a:0c:98:a9:db:d6:51:81:2f:08:0e:3b:d0:33:09:
1c:f6:41:42:b9:c1:70:f2:c6:56:fb:48:02:13:5d:
b8:98:57:54:b8:4d:13:7c:34:f5:08:c6:02:5c:00:
40:b3:94:f5:55:ee:0a:67:e1:e2:37:16:d1:61:cc:
cb:11:8f:e5:b8:21:0a:2b:32:07:35:90:e3:62:2b:
b9:40:2d:4f:79:3f:ce:1f:6e:c1:07:37:aa:8e:45:
b4:65:d2:a2:1b:fc:2d:f4:e0:09:01:b9:4b:46:54:
6a:5c:7d:f1:0c:8c:95:eb:92:8e:81:2c:19:a0:62:
ac:ea:78:03:e1:1a:b8:02:f1:d8:7b:8a:02:94:ac:
51:f4:24:f3:fc:b6:77:6f:a9:2b:50:75:06:fa:ac:
8a:5d:74:5f:dc:e0:a1:c3:8f:d5:87:26:ad:d4:7d:
d3:9a:68:39:8d:2a:c7:d7:09:ac:73:2b:72:b5:58:
f7:cb:c7:f9:21:0a:18:52:80:d8:1b:65:01:15:fb:
be:e4:84:42:00:64:3e:0b:1b:1c:0b:5f:ae:ca:c9:
ec:e2:6e:35:2b:9d:7c:f1:a6:49:ec:5e:0d:f6:05:
42:1b:77:62:d5:f0:84:e6:2e:89:5a:0a:03:29:8e:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:E2:CD:6F:9B:79:00:39:3A:14:2C:7F:B1:22:67:72:58:79:6A
X509v3 Authority Key Identifier:
keyid:B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:75:91:2e:02:83:6b:a8:9c:04:28:04:d8:71:79:9a:ca:
ab:54:22:54:23:63:81:94:de:08:1e:1e:ac:4f:f0:1d:40:8b:
45:a6:4e:61:5b:a4:df:0b:f3:33:af:66:2b:da:56:51:0c:61:
a0:52:36:9a:ab:de:6e:eb:e3:71:45:64:e7:17:e0:f5:5b:35:
4b:93:c3:61:87:de:ab:09:e9:9f:4f:c9:1a:c0:f1:ac:8d:2e:
e7:0d:42:cc:c1:21:19:ff:e1:8b:6c:bc:2b:a7:f3:40:99:a3:
c3:7a:b9:c4:a2:1a:b1:61:e2:b4:9c:67:7e:29:4e:a8:5d:f2:
ad:60:df:90:c2:d7:7c:5e:18:53:fc:1d:11:8d:f7:90:2d:9a:
d5:30:84:f9:a1:66:48:4e:36:e7:8f:6d:4f:18:d3:99:e3:76:
0e:51:99:8a:b4:69:c8:91:07:c7:4c:de:59:c4:4a:41:39:79:
82:48:7c:0f:c9:e7:a3:75:cb:b0:ab:62:1b:c4:d7:8a:d8:e3:
ad:00:93:8b:4b:ad:4c:4a:5b:22:53:8d:17:1b:7b:42:f7:b2:
4d:5f:d4:99:d6:4d:40:97:d0:9b:6e:aa:e6:74:38:41:9d:7e:
cd:a9:59:74:8a:8c:46:64:f1:59:b7:3a:c2:6d:52:ca:cb:05:
8f:d5:5f:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U3NUQxMTAvBgNVBAUTKEI3MDczQTFEMDlGMjNBMjQ3RkNFNTc4NTJBQTRCOEE2
ODBDNkRBNzAwHhcNMjUxMjA2MTUxMDM4WhcNMjUxMjEzMTUxMDM4WjAYMRYwFAYD
VQQDEw02OTM0NDc2ZS02ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2mTuQ88yOjJYXTQuvBKDJip29ZRgS8IDjvQMwkc9kFCucFw8sZW+0gCE124
mFdUuE0TfDT1CMYCXABAs5T1Ve4KZ+HiNxbRYczLEY/luCEKKzIHNZDjYiu5QC1P
eT/OH27BBzeqjkW0ZdKiG/wt9OAJAblLRlRqXH3xDIyV65KOgSwZoGKs6ngD4Rq4
AvHYe4oClKxR9CTz/LZ3b6krUHUG+qyKXXRf3OChw4/Vhyat1H3Tmmg5jSrH1wms
cytytVj3y8f5IQoYUoDYG2UBFfu+5IRCAGQ+CxscC1+uysns4m41K5188aZJ7F4N
9gVCG3di1fCE5i6JWgoDKY6MmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJc4s1v
m3kAOToULH+xImdyWHlqMB8GA1UdIwQYMBaAFLcHOh0J8jokf85XhSqkuKaAxtpw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1RC84NjAyMzAyMjU5
RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9pUl96bGVGS3FTNHBvREcy
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3R3YzZIUW55T2lSX3psZUZLcVM0cG9ERzJuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTc1RC84NjAyMzAyMjU5RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9p
Ul96bGVGS3FTNHBvREcybkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZAnWRLgKDa6icBCgE2HF5msqrVCJUI2OBlN4IHh6sT/AdQItFpk5h
W6TfC/Mzr2Yr2lZRDGGgUjaaq95u6+NxRWTnF+D1WzVLk8Nhh96rCemfT8kawPGs
jS7nDULMwSEZ/+GLbLwrp/NAmaPDernEohqxYeK0nGd+KU6oXfKtYN+Qwtd8XhhT
/B0RjfeQLZrVMIT5oWZITjbnj21PGNOZ43YOUZmKtGnIkQfHTN5ZxEpBOXmCSHwP
yeejdcuwq2IbxNeK2OOtAJOLS61MSlsiU40XG3tC97JNX9SZ1k1Al9CbbqrmdDhB
nX7NqVl0ioxGZPFZtzrCbVLKywWP1V+e
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:28 2025 by rpki-client