This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.cer (raw, json) Hash identifier: h1ttwv6Yi3y295Dyk0NvDBD/vixpl4jwADcpq9fnaZY= Subject key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4E49 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 01:35:31 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: IP: 91.204.80.0/24 IP: 91.222.132.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20041 (0x4e49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 11 01:35:31 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:46:4d:85:e3:79:1d:96:f7:d8:f2:59:f0: eb:b9:4e:7b:b0:f2:f2:24:0f:aa:a9:44:d0:f4:78: e0:1d:14:9e:6a:f0:69:9a:71:3e:c5:79:dc:b1:09: b8:c7:bd:3c:d1:d2:0f:fa:ec:0d:17:56:33:45:f2: d0:d5:b0:b8:97:8f:60:28:c4:39:6c:5b:c8:3f:25: d9:d0:e1:49:e2:42:f7:d4:eb:e8:8f:76:2e:74:96: 2f:71:28:6e:f6:10:a2:e7:bb:c6:71:b0:2f:a2:76: 96:22:19:83:e5:9e:2e:7c:67:23:2a:e2:17:2e:07: 5b:2e:7f:ff:6f:a0:2c:d3:a2:b0:ef:76:7f:d4:02: 84:07:b0:bf:25:7f:00:4d:be:1f:2c:7e:89:52:ef: cb:f3:3e:7e:cb:f7:b0:0b:5c:ec:40:77:90:f9:f1: 02:15:38:d1:67:1f:a9:e3:da:13:e6:a6:fa:57:cf: 55:7b:02:a5:f0:74:28:7e:e9:40:6b:ed:be:ed:ab: ff:db:af:f5:64:ca:39:71:95:89:eb:6e:a3:4f:ce: cb:3d:89:20:cc:43:0a:0f:07:a4:eb:a2:c4:0f:e3: ed:43:34:4c:fc:c3:77:4c:8b:71:dc:a2:aa:b4:fd: cd:2f:eb:b0:5e:91:eb:3e:3d:44:c9:22:73:8f:0d: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 91.204.80.0/24 91.222.132.0/22 Signature Algorithm: sha256WithRSAEncryption ac:ba:ae:98:92:d5:aa:5b:42:30:ba:56:eb:15:a3:b8:12:17: ac:e3:b2:5d:78:f8:67:49:c5:bc:8b:51:3d:ae:c0:c7:70:56: b1:88:8f:52:c8:58:3b:3d:e2:e6:5c:fe:7d:8c:f1:c6:e5:94: 5a:32:eb:d9:0a:58:d7:c4:2e:f6:3c:71:1f:21:d8:ba:59:cb: 4a:b6:34:d0:73:0a:41:06:21:7d:60:5f:4b:65:cf:3a:68:d0: 83:3b:3b:5c:6e:33:a5:28:f4:d2:42:d3:74:47:a5:e2:56:80: 76:6d:20:7d:dd:a1:f3:39:ee:c7:c6:7d:24:26:75:77:3b:b2: df:3a:ed:a2:35:a9:f1:be:65:4f:51:bc:79:94:f2:df:3d:c1: 24:51:16:03:cb:24:40:4f:81:8f:d5:a6:0f:db:d3:40:95:88: 5d:27:0b:84:4c:98:b7:64:9e:97:80:e5:8e:87:2c:cc:8d:d1: c7:5b:13:17:df:a6:99:c4:ea:1c:cf:60:63:3a:2b:77:83:e1: 22:0b:c2:8d:36:5e:08:43:12:77:c6:9f:1b:6f:66:16:33:a8: 5f:b6:a2:64:5f:1e:fe:da:ea:b3:24:ae:e8:4c:12:57:89:fc: 02:ec:0b:77:ab:cf:0a:66:cd:c4:12:2a:4e:94:3f:ef:cf:fd: 7d:8c:3b:37 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICTkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMTExMDEzNTMxWhcNMjYxMDMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDOUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3 NENDRkJCNTE4NzgzRDk2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMnBRk2F43kdlvfY8lnw67lOe7Dy8iQPqqlE0PR44B0UnmrwaZpxPsV53LEJuMe9 PNHSD/rsDRdWM0Xy0NWwuJePYCjEOWxbyD8l2dDhSeJC99Tr6I92LnSWL3EobvYQ oue7xnGwL6J2liIZg+WeLnxnIyriFy4HWy5//2+gLNOisO92f9QChAewvyV/AE2+ Hyx+iVLvy/M+fsv3sAtc7EB3kPnxAhU40WcfqePaE+am+lfPVXsCpfB0KH7pQGvt vu2r/9uv9WTKOXGVietuo0/Oyz2JIMxDCg8HpOuixA/j7UM0TPzDd0yLcdyiqrT9 zS/rsF6R6z49RMkic48NW1MCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTRZoFnPxGK EA7CAUdMz7tRh4PZYDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvQjM3Qjc4NEFCRTlFMTFGMDk4MUI0QzMyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM5RTgyL0IzN0I3ODRBQkU5RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhS aWhBT3dnRkhUTS03VVllRDJXQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAFvMUAMEAlvehDANBgkqhkiG9w0BAQsFAAOCAQEArLqumJLVqltC MLpW6xWjuBIXrOOyXXj4Z0nFvItRPa7Ax3BWsYiPUshYOz3i5lz+fYzxxuWUWjLr 2QpY18Qu9jxxHyHYulnLSrY00HMKQQYhfWBfS2XPOmjQgzs7XG4zpSj00kLTdEel 4laAdm0gfd2h8znux8Z9JCZ1dzuy3zrtojWp8b5lT1G8eZTy3z3BJFEWA8skQE+B j9WmD9vTQJWIXScLhEyYt2Sel4DljocszI3Rx1sTF9+mmcTqHM9gYzord4PhIgvC jTZeCEMSd8afG29mFjOoX7aiZF8e/trqsySu6EwSV4n8AuwLd6vPCmbNxBIqTpQ/ 78/9fYw7Nw== -----END CERTIFICATE-----Generated at Fri Nov 28 05:41:05 2025 by rpki-client