This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft File: LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json) Hash identifier: hjrzIjUK9afIS55uxEq/K6AYZ2OW18CTn4GUAlWdVj8= Subject key identifier: E5:DF:3B:CC:FE:AA:30:00:4B:74:47:BC:F8:12:A4:A6:50:5B:1A:8D Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 Certificate issuer: /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft Manifest number: 0F Signing time: Tue 23 Dec 2025 06:50:26 +0000 Manifest this update: Tue 23 Dec 2025 06:50:25 +0000 Manifest next update: Tue 30 Dec 2025 06:50:25 +0000 Files and hashes: 1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: /ky/pSyVpggG1PgebU0BjSlxveGoD3eLN+XLOuZJqSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755 Validity Not Before: Dec 23 06:50:25 2025 GMT Not After : Dec 30 06:50:25 2025 GMT Subject: CN=694a3bb1-279f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:34:08:0d:32:22:3b:16:55:fe:ed:da:ff: a9:e2:43:6a:f2:d9:cb:50:66:22:cb:bd:30:50:6e: a5:67:8b:0e:63:40:c9:ba:01:9b:b1:68:24:40:53: c4:b7:47:44:b7:53:aa:fb:a4:cb:ca:45:07:57:c0: 2b:f8:c7:68:2e:ea:51:60:25:9a:6b:b0:14:5a:cc: 83:39:72:03:6c:8b:ad:84:db:a9:ab:78:ca:fe:39: 2a:82:83:45:e1:83:38:0c:64:cd:33:6c:c6:86:f0: 8a:11:1e:01:39:a7:e4:33:a2:6f:4a:27:70:63:de: 11:4e:15:7f:b5:29:a7:96:b9:e0:02:f0:fa:6e:45: 87:62:5b:a3:e4:77:6a:f3:13:77:75:e5:d9:36:34: b5:6f:df:c6:92:b5:db:b8:d7:31:4b:aa:81:6e:fe: 6c:d1:0b:b2:d4:4d:20:e5:c1:82:1e:e8:25:ed:b4: 31:cf:b5:70:d0:5f:be:b9:d3:bd:17:7e:46:97:bf: 07:11:ab:1a:6a:f3:89:19:b0:d1:06:33:03:e9:7f: 74:df:c3:27:9b:70:b7:09:1f:1e:02:bd:e8:df:2b: 7c:67:bb:a0:50:41:3d:9b:db:8d:80:ef:e1:79:0e: d9:e5:cf:d2:de:f9:88:03:d0:4a:c4:c2:58:e0:d4: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:3B:CC:FE:AA:30:00:4B:74:47:BC:F8:12:A4:A6:50:5B:1A:8D X509v3 Authority Key Identifier: keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:7c:72:1b:9b:0c:f7:f2:51:44:c0:17:b6:ed:49:30:43:5b: 6c:1e:c7:a9:9f:71:95:7e:fd:04:9e:a5:b6:94:93:ee:ce:6d: 0c:82:39:50:4d:57:d8:61:b9:ed:f0:84:50:1f:7c:6c:2d:9f: a2:16:99:e1:6b:29:c8:08:64:f4:21:6f:01:2c:41:b4:db:cb: 9f:14:f5:79:37:b5:17:22:96:58:0c:e5:5a:55:57:f4:c0:5f: d7:46:93:92:44:54:9c:94:11:b2:fc:61:38:9a:79:48:de:3f: 3f:06:83:a6:52:b3:2d:9b:63:30:62:a6:84:22:6d:65:85:5b: e3:ff:9d:84:48:d4:33:80:f3:e5:93:4b:83:58:fb:c2:bf:49: 59:30:5a:e7:d6:1b:0d:65:54:d4:5e:9f:49:93:30:dc:6d:3b: 2b:2d:21:43:99:9a:81:c9:c8:ed:6b:80:27:4b:bc:20:70:69: 82:aa:da:3f:22:f7:58:d2:10:28:25:6d:05:fc:9f:6c:c6:11: 9c:c5:ca:48:9c:16:b9:65:ac:18:d0:0f:d7:28:f1:c8:90:40: 94:88:0a:39:17:68:25:d1:05:6f:ad:7e:e3:6c:87:c2:74:14: 98:5a:91:4c:de:ce:3f:ee:07:fd:63:d2:ab:3e:d1:64:e0:93: c6:e2:3a:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEFDRDExMC8GA1UEBRMoMkM5QUE1Rjk4MkM4QjQ0RkEyNkRGMDhDRUEyNDMxRDc5 QUFDMzc1NTAeFw0yNTEyMjMwNjUwMjVaFw0yNTEyMzAwNjUwMjVaMBgxFjAUBgNV BAMMDTY5NGEzYmIxLTI3OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2JTQIDTIiOxZV/u3a/6niQ2ry2ctQZiLLvTBQbqVniw5jQMm6AZuxaCRAU8S3 R0S3U6r7pMvKRQdXwCv4x2gu6lFgJZprsBRazIM5cgNsi62E26mreMr+OSqCg0Xh gzgMZM0zbMaG8IoRHgE5p+Qzom9KJ3Bj3hFOFX+1KaeWueAC8PpuRYdiW6Pkd2rz E3d15dk2NLVv38aStdu41zFLqoFu/mzRC7LUTSDlwYIe6CXttDHPtXDQX765070X fkaXvwcRqxpq84kZsNEGMwPpf3TfwyebcLcJHx4CvejfK3xnu6BQQT2b242A7+F5 Dtnlz9Le+YgD0ErEwljg1FUrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5d87zP6q MABLdEe8+BKkplBbGo0wHwYDVR0jBBgwFoAULJql+YLItE+ibfCM6iQx15qsN1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QUNEL0JDREJENEU0Q0I5 QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUtaWJmQ002aVF4MTVxc04x VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEpxbC1ZTEl0RS1pYmZDTTZpUXgxNXFzTjFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QUNEL0JDREJENEU0Q0I5QTExRjBCNzAwQzExNkM0RjlBRTAyL0xKcWwtWUxJdEUt aWJmQ002aVF4MTVxc04xVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALl8chubDPfyUUTAF7btSTBDW2wex6mfcZV+/QSepbaUk+7ObQyCOVBN V9hhue3whFAffGwtn6IWmeFrKcgIZPQhbwEsQbTby58U9Xk3tRcillgM5VpVV/TA X9dGk5JEVJyUEbL8YTiaeUjePz8Gg6ZSsy2bYzBipoQibWWFW+P/nYRI1DOA8+WT S4NY+8K/SVkwWufWGw1lVNRen0mTMNxtOystIUOZmoHJyO1rgCdLvCBwaYKq2j8i 91jSECglbQX8n2zGEZzFykicFrllrBjQD9co8ciQQJSICjkXaCXRBW+tfuNsh8J0 FJhakUzezj/uB/1j0qs+0WTgk8biOu8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:09 2025 by rpki-client