This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer File: Lb_HsoYVsf94189GiGr5ITn_loo.cer (raw, json) Hash identifier: Z3s1SrLlsj45KhvWJYJ1XAwSx4EdoqEfI7v7FO94ZeQ= Subject key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4E7B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 23 Nov 2025 07:58:28 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 82.158.224.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20091 (0x4e7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 23 07:58:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:11:f4:fc:32:39:58:c1:a4:2b:7a:4f:97: 12:04:4d:41:c0:c9:4c:f8:3d:0a:6e:3f:b8:c9:32: af:bc:40:e9:94:91:18:2c:25:2f:c9:b0:39:0a:b6: 89:5e:da:4f:52:81:14:6e:25:05:55:78:3c:8e:a5: cf:bd:3b:3a:63:a9:b5:e8:57:90:f7:60:eb:25:04: 70:52:23:51:d6:8d:74:3b:a2:87:e3:83:bb:81:ac: 09:bc:45:8b:9c:76:d7:0b:73:e9:f8:73:09:6c:d2: e1:21:8a:a4:39:e6:b6:00:53:74:a1:6c:59:fd:70: 51:d1:db:73:37:0f:da:50:0c:89:0c:ec:de:b9:ce: 7d:49:26:f4:de:f2:f6:a3:37:42:71:17:f3:ee:f9: b5:8f:f9:67:64:da:fe:a9:8d:74:8c:83:63:01:db: 3b:99:bb:b0:87:0a:cd:65:5b:44:ca:2d:2c:8c:e6: 7b:fb:43:e8:61:84:16:86:f6:d7:c5:24:56:b9:1f: 63:01:ab:93:37:eb:18:2f:b5:65:67:6c:04:a2:76: 99:dd:94:95:05:eb:3a:ae:73:d7:36:c5:5f:f9:e2: 1f:82:ce:d1:38:68:c2:e3:38:63:51:7f:72:b3:22: fc:99:a7:6b:4f:ad:50:a8:65:3d:c0:0c:4e:6a:16: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 82.158.224.0/21 Signature Algorithm: sha256WithRSAEncryption 56:a8:68:eb:b2:cf:dd:99:34:ce:5a:7c:aa:4d:16:65:e1:5c: bf:18:4e:a5:67:2b:f5:e2:21:f9:09:a5:36:6e:d2:de:cf:2c: 70:b1:3f:be:15:b8:bf:08:4d:08:be:1b:0c:86:ef:bb:45:9a: bb:b5:0d:4f:6c:b1:50:27:33:9c:7b:5c:06:20:17:25:24:bf: 30:97:a0:49:80:dc:18:9a:f2:4e:4b:e6:af:10:1d:e7:2c:2d: fd:42:ab:f7:4a:af:e4:91:e0:89:ec:f4:c0:d9:fd:0f:df:88: 3d:af:5d:ab:cc:aa:87:2d:93:04:eb:c4:54:69:5a:c5:03:84: 56:c8:1d:e4:d4:7f:00:5b:6e:18:05:df:d8:da:19:4a:ca:9a: 7a:13:ed:66:0e:8a:0a:f3:87:e0:fa:f8:9b:12:da:f2:61:b4: 30:25:5d:d3:85:15:bf:5f:9e:80:eb:e3:e1:bd:df:e9:67:a3: 7c:e4:95:e4:69:81:11:8a:5e:9e:d0:9b:b4:c3:7f:89:42:70: be:38:e9:8f:b8:2e:c2:43:7f:90:ad:90:1b:f0:bb:76:06:ef: 0c:7f:7a:98:82:e7:b4:18:78:f6:e8:2f:0c:14:29:60:2f:fc: 8c:fc:19:d5:5d:aa:0d:2b:74:61:c6:82:6f:6f:d2:9b:a9:e7: ed:76:c8:f1 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICTnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMTIzMDc1ODI4WhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDQ0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2 ODg2QUY5MjEzOUZGOTY4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKTBEfT8MjlYwaQrek+XEgRNQcDJTPg9Cm4/uMkyr7xA6ZSRGCwlL8mwOQq2iV7a T1KBFG4lBVV4PI6lz707OmOptehXkPdg6yUEcFIjUdaNdDuih+ODu4GsCbxFi5x2 1wtz6fhzCWzS4SGKpDnmtgBTdKFsWf1wUdHbczcP2lAMiQzs3rnOfUkm9N7y9qM3 QnEX8+75tY/5Z2Ta/qmNdIyDYwHbO5m7sIcKzWVbRMotLIzme/tD6GGEFob218Uk VrkfYwGrkzfrGC+1ZWdsBKJ2md2UlQXrOq5z1zbFX/niH4LO0ThowuM4Y1F/crMi /Jmna0+tUKhlPcAMTmoWvl0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQtv8eyhhWx /3jXz0aIavkhOf+WijAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NEQUUvMkZCRUE0MDJDODQyMTFGMEEzM0U5QTdFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNDREFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lW c2Y5NDE4OUdpR3I1SVRuX2xvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA1Ke4DANBgkqhkiG9w0BAQsFAAOCAQEAVqho67LP3Zk0zlp8qk0W ZeFcvxhOpWcr9eIh+QmlNm7S3s8scLE/vhW4vwhNCL4bDIbvu0Wau7UNT2yxUCcz nHtcBiAXJSS/MJegSYDcGJryTkvmrxAd5ywt/UKr90qv5JHgiez0wNn9D9+IPa9d q8yqhy2TBOvEVGlaxQOEVsgd5NR/AFtuGAXf2NoZSsqaehPtZg6KCvOH4Pr4mxLa 8mG0MCVd04UVv1+egOvj4b3f6WejfOSV5GmBEYpentCbtMN/iUJwvjjpj7guwkN/ kK2QG/C7dgbvDH96mILntBh49ugvDBQpYC/8jPwZ1V2qDSt0YcaCb2/Sm6nn7XbI 8Q== -----END CERTIFICATE-----Generated at Thu Dec 4 03:32:43 2025 by rpki-client