This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer File: 0MwJjruW320cXCjum1Xwqbgp_ak.cer (raw, json) Hash identifier: SFOTxHKKJTWKmS1sQbGRzBLi+n2sHZStMpa3snCK3Ss= Subject key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EE0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft caRepository: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 23:48:09 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.126.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28384 (0x6ee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 25 23:48:09 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:8a:34:ad:65:01:d1:f0:ff:0e:83:22:c0: 6a:f3:65:c6:b7:10:b0:19:25:3d:51:1f:51:2f:31: a3:10:84:e7:ff:21:12:8b:ac:c8:fd:0e:15:2a:b6: 95:b8:cd:4c:01:62:be:2a:80:77:26:11:06:fe:66: 49:88:de:9b:f1:49:60:58:0b:d6:89:76:6b:53:04: cc:9d:2d:f8:2d:c4:f4:d3:7a:ea:56:8f:c8:5f:36: b6:be:de:11:80:d1:f1:9d:68:ff:f0:38:8c:37:35: be:95:c1:b2:9e:10:21:ab:a1:6d:e7:98:3b:95:cb: 69:d4:11:0e:0d:c0:f6:74:19:b2:28:91:dd:20:f1: 07:2d:46:68:df:24:89:50:d2:7b:55:11:c7:77:c8: b0:b2:bb:02:af:d6:a6:32:4f:e0:38:fa:96:83:75: 53:28:6e:ef:78:db:06:5e:83:a2:bb:0c:30:a0:8c: ec:af:45:5e:f3:6c:c9:7f:66:2f:64:98:1d:51:bd: dd:71:b5:a8:36:c5:48:b1:b8:8c:e1:af:2f:94:dc: 81:bf:6c:30:19:df:5a:6c:b1:b7:f2:cc:0f:52:3f: 1f:08:c2:8b:8d:0d:9a:5a:14:14:20:2a:bf:e1:e2: e3:d0:f6:10:44:2a:e4:2e:84:1d:da:15:58:bc:11: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.126.0/23 Signature Algorithm: sha256WithRSAEncryption a6:c3:57:95:e2:b8:8d:c7:5c:8d:42:2f:6b:53:df:0a:14:56: 9b:de:69:6f:25:58:99:4e:1a:27:4d:be:80:da:86:65:38:8f: ec:b9:d9:e7:fd:76:5b:6e:90:48:7b:c8:e2:3a:98:a6:00:27: b4:fe:c9:78:68:8f:03:c8:c1:01:bf:92:1c:f1:50:21:e8:a5: b2:d0:c6:14:9d:63:53:97:cb:17:cb:87:53:fd:6b:73:7f:f2: c6:ae:57:25:25:85:6b:51:c7:e8:34:0b:82:ce:ff:3a:66:95: f8:b1:9b:db:dc:5f:f9:8c:13:22:bc:4b:98:70:6e:d5:e8:f9: d4:90:af:e9:97:0c:bb:90:47:d2:42:ec:bf:93:c4:08:d0:af: 3f:fa:93:01:c2:22:66:eb:e8:ea:0e:6d:5f:0b:05:ca:af:d4: 33:40:ab:b3:dd:4f:a7:b6:a2:2d:a1:55:81:c3:61:cd:e2:c3: 8e:84:7d:c7:96:7c:35:eb:48:d5:2d:aa:53:3f:fa:a0:66:5b: 00:73:30:a9:de:10:60:29:f0:6e:71:46:e9:af:a3:cf:b3:03: 0e:fe:1a:cc:1e:30:21:76:85:57:f1:ac:6a:64:79:d7:89:70: 97:23:7b:73:21:98:34:20:d0:14:20:e4:a1:d4:29:61:79:9f: 80:71:85:27 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI1MjM0ODA5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0MjE4NzExMC8GA1UEBRMoRDBDQzA5OEVCQjk2REY2RDFDNUMyOEVF OUI1NUYwQTlCODI5RkRBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKCjijStZQHR8P8OgyLAavNlxrcQsBklPVEfUS8xoxCE5/8hEousyP0OFSq2lbjN TAFiviqAdyYRBv5mSYjem/FJYFgL1ol2a1MEzJ0t+C3E9NN66laPyF82tr7eEYDR 8Z1o//A4jDc1vpXBsp4QIauhbeeYO5XLadQRDg3A9nQZsiiR3SDxBy1GaN8kiVDS e1URx3fIsLK7Aq/WpjJP4Dj6loN1Uyhu73jbBl6DorsMMKCM7K9FXvNsyX9mL2SY HVG93XG1qDbFSLG4jOGvL5Tcgb9sMBnfWmyxt/LMD1I/HwjCi40NmloUFCAqv+Hi 49D2EEQq5C6EHdoVWLwRNDECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTQzAmOu5bf bRxcKO6bVfCpuCn9qTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIxODcvMzAzRTc3MkNDQTU5MTFGMDgzOTk4NDZCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQyMTg3LzMwM0U3NzJDQ0E1OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVX MzIwY1hDanVtMVh3cWJncF9hay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8fjANBgkqhkiG9w0BAQsFAAOCAQEApsNXleK4jcdcjUIva1Pf ChRWm95pbyVYmU4aJ02+gNqGZTiP7LnZ5/12W26QSHvI4jqYpgAntP7JeGiPA8jB Ab+SHPFQIeilstDGFJ1jU5fLF8uHU/1rc3/yxq5XJSWFa1HH6DQLgs7/OmaV+LGb 29xf+YwTIrxLmHBu1ej51JCv6ZcMu5BH0kLsv5PECNCvP/qTAcIiZuvo6g5tXwsF yq/UM0Crs91Pp7aiLaFVgcNhzeLDjoR9x5Z8NetI1S2qUz/6oGZbAHMwqd4QYCnw bnFG6a+jz7MDDv4azB4wIXaFV/GsamR514lwlyN7cyGYNCDQFCDkodQpYXmfgHGF Jw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:35 2025 by rpki-client