This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json)
Hash identifier: 18eLdqIuwm6jlsV25PPRM/wn8+TqsJItctqxvD64UU8=
Subject key identifier: 8F:7D:49:19:F1:B7:D0:DA:D4:43:A8:F1:7B:F8:7C:8C:CD:FC:B3:8E
Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
Manifest number: 0197
Signing time: Fri 05 Dec 2025 01:41:11 +0000
Manifest this update: Fri 05 Dec 2025 01:41:10 +0000
Manifest next update: Fri 12 Dec 2025 01:41:10 +0000
Files and hashes: 1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: Oo8JdrW9ds3ex7EhebnHbmV5D/h3cXGCjF/rYnMAytY=)
2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl
rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Validity
Not Before: Dec 5 01:41:10 2025 GMT
Not After : Dec 12 01:41:10 2025 GMT
Subject: CN=69323837-0b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:d6:14:da:3d:bb:55:d4:24:26:9f:6d:80:
38:2d:cb:7e:b2:d1:58:e1:93:23:04:d7:9d:4c:a0:
7a:3d:51:5f:92:14:5c:10:f3:57:e9:14:d5:30:99:
26:28:24:b5:7a:66:98:18:8c:80:bd:61:03:0b:8b:
de:8d:30:da:69:f7:56:dc:7c:b6:de:c5:05:cc:58:
fe:be:37:40:da:10:c9:10:15:a0:49:a5:a9:e9:ce:
ba:a6:ee:a1:17:5c:45:c2:96:09:a6:c7:a5:9d:21:
33:ef:36:20:d5:b3:0a:b8:c4:cb:d8:47:ae:d2:64:
84:c2:99:e4:38:3a:8b:25:ba:3b:8d:21:31:8f:e5:
07:11:d0:0c:90:39:f7:58:d1:af:8d:7b:16:ea:16:
85:0a:2b:39:8d:17:c3:03:12:af:ee:21:99:60:84:
45:09:17:87:c6:a5:0b:68:e8:d2:76:40:07:67:30:
07:11:23:e7:e7:62:6f:4a:32:bc:94:3d:9d:65:26:
48:a0:58:58:39:2e:e4:04:c0:1a:53:4b:98:73:23:
49:09:2b:43:17:8a:36:37:d4:9b:e0:20:57:e6:e0:
28:65:a9:bf:f1:68:6b:f6:22:68:15:92:a7:db:68:
f9:3f:98:8e:31:56:73:d4:17:ea:94:86:50:62:74:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:49:19:F1:B7:D0:DA:D4:43:A8:F1:7B:F8:7C:8C:CD:FC:B3:8E
X509v3 Authority Key Identifier:
keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:57:71:7c:83:dc:22:1b:58:e3:b6:5a:33:1b:01:b8:fc:
25:fa:d1:5f:02:73:52:07:a6:b3:14:fb:f0:3a:b9:70:99:e2:
aa:2e:81:c1:46:68:2b:9a:50:f1:2f:64:da:b4:98:63:fa:19:
f9:0c:84:02:44:9d:6d:14:4f:9f:fb:5d:e8:85:ac:86:d3:d6:
c0:e9:25:37:e3:56:d3:58:74:a1:7c:a5:ff:50:d6:cf:af:ba:
73:f6:76:ad:95:58:2a:f9:63:5d:d3:80:84:33:09:fa:0b:0d:
f1:af:af:03:e2:82:70:e1:10:fb:03:44:c5:9e:31:40:80:4b:
55:59:9e:2f:47:02:22:1f:db:9b:ea:4a:40:29:8c:0f:21:6d:
21:6e:52:49:36:11:07:21:3a:f2:c0:70:08:fc:33:70:89:ac:
5d:14:31:a6:98:a8:9a:b3:1b:42:d0:32:d7:b8:a3:36:3e:cb:
a7:48:1b:6a:77:44:04:0a:0b:84:58:b7:36:66:5e:a5:6d:df:
88:11:10:ab:cf:81:a3:fc:55:7f:b8:c8:60:a6:90:2f:a3:15:
b3:cd:db:90:e1:67:89:1f:44:ea:2d:0b:c4:51:70:36:95:be:
d3:42:af:b7:4e:f7:9d:b7:3f:3a:12:2e:e7:7a:9d:98:8b:b6:
8c:06:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:53 2025 by rpki-client