This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer File: 024QQmH4GdaND3C7Ka3-jvRjsu0.cer (raw, json) Hash identifier: WnWHmG+lW3fXzr1Sj2UFVmczWpYBbjcEIccmoMu/jZg= Subject key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F6C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 20:43:19 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.170.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28524 (0x6f6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 20:43:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:8a:df:96:d5:3b:26:6b:64:25:f8:5f:f5: 8a:c7:a4:1e:d8:21:a5:f6:29:5c:cf:93:34:27:da: 4c:91:79:cb:c0:3c:48:10:98:bc:81:c7:27:f5:33: 38:10:9f:a0:5a:78:ed:8d:77:93:c7:0f:96:23:d9: dc:d1:99:04:95:aa:ff:97:da:8a:7f:bb:f7:8b:ac: 6b:97:1f:a2:3d:db:11:af:47:98:2a:d4:36:fe:cb: 4d:16:53:1a:e9:1e:3a:6d:51:4a:bb:56:f1:ae:7a: e6:a1:81:ff:a4:9b:21:7a:37:f3:61:7e:3f:5c:1e: 47:48:f0:ca:14:0f:24:56:28:4d:38:b8:c6:c9:b0: 26:f5:00:76:50:b7:98:10:ed:64:e5:0c:d5:82:72: 85:b4:76:31:c1:1b:7d:a1:d2:25:9a:30:e8:5e:d1: 2b:cb:64:09:12:21:7d:e3:7c:07:e4:9b:9e:d3:a9: 3c:7e:ab:ca:36:4f:2f:eb:8e:af:2d:cf:14:b4:16: 52:63:4c:81:90:ee:5b:47:06:c3:b1:d4:c7:4e:48: cc:a0:72:86:83:23:83:dd:52:e4:64:cd:c9:a1:c9: be:d3:9d:8c:eb:28:76:4a:75:6b:48:14:a3:5a:da: b7:c8:ed:00:11:30:99:5c:6d:15:c1:b9:67:57:5f: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.170.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e7:bf:09:ae:b6:2c:1c:2e:a5:d2:af:86:9b:ef:77:0c:ab: 8c:d8:ee:ad:31:ea:dd:ad:e8:ea:d3:f7:5f:56:52:28:eb:ab: 12:f8:1d:9a:11:be:5c:94:e9:03:34:b0:06:62:e4:91:1b:b6: be:73:e5:77:1c:37:9d:f6:d4:4d:20:72:e7:6b:0a:41:5c:35: a9:b1:40:37:59:40:98:d7:36:ed:d3:eb:94:2d:57:9a:ee:c4: cf:45:5c:1a:2f:03:3c:b1:72:4f:07:32:99:e4:c9:4d:2e:44: 91:80:40:e1:75:47:09:f2:dd:c9:08:eb:ac:5b:64:c2:9e:a4: 5a:e8:59:23:38:f7:1a:36:3a:fd:15:af:17:6b:60:48:e3:6d: 53:f1:f4:03:02:16:6e:cd:7a:0c:b8:04:bf:67:05:e6:54:e8: fa:3b:5f:30:6f:50:2d:f5:c3:95:b0:79:be:6d:94:19:40:19: 89:b0:01:0e:c0:04:37:2d:3d:68:2a:0e:c8:ba:7a:29:70:77: e3:06:7e:eb:0c:03:99:89:bc:84:1f:bb:e5:ff:57:09:0d:61: 52:be:68:70:bc:ed:c7:bd:a0:7f:c6:66:85:fe:e4:f7:ad:f2: 84:e8:e5:01:3c:e1:5f:3d:ca:14:49:1d:6b:08:96:b0:01:d4: 1d:5f:b6:d4 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMjA0MzE5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCMTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJC MjlBREZFOEVGNDYzQjJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL89it+W1Tsma2Ql+F/1isekHtghpfYpXM+TNCfaTJF5y8A8SBCYvIHHJ/UzOBCf oFp47Y13k8cPliPZ3NGZBJWq/5fain+794usa5cfoj3bEa9HmCrUNv7LTRZTGuke Om1RSrtW8a565qGB/6SbIXo382F+P1weR0jwyhQPJFYoTTi4xsmwJvUAdlC3mBDt ZOUM1YJyhbR2McEbfaHSJZow6F7RK8tkCRIhfeN8B+SbntOpPH6ryjZPL+uOry3P FLQWUmNMgZDuW0cGw7HUx05IzKByhoMjg91S5GTNyaHJvtOdjOsodkp1a0gUo1ra t8jtABEwmVxtFcG5Z1dfIlMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTTbhBCYfgZ 1o0PcLsprf6O9GOy7TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE1REMvNEZFQzFDMDRDRUVEMTFFRkJENjU1NTExQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIxNURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0 R2RhTkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC/qjANBgkqhkiG9w0BAQsFAAOCAQEAVue/Ca62LBwupdKvhpvv dwyrjNjurTHq3a3o6tP3X1ZSKOurEvgdmhG+XJTpAzSwBmLkkRu2vnPldxw3nfbU TSBy52sKQVw1qbFAN1lAmNc27dPrlC1Xmu7Ez0VcGi8DPLFyTwcymeTJTS5EkYBA 4XVHCfLdyQjrrFtkwp6kWuhZIzj3GjY6/RWvF2tgSONtU/H0AwIWbs16DLgEv2cF 5lTo+jtfMG9QLfXDlbB5vm2UGUAZibABDsAENy09aCoOyLp6KXB34wZ+6wwDmYm8 hB+75f9XCQ1hUr5ocLztx72gf8Zmhf7k963yhOjlATzhXz3KFEkdawiWsAHUHV+2 1A== -----END CERTIFICATE-----Generated at Wed Dec 3 16:12:02 2025 by rpki-client