This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.cer (raw, json) Hash identifier: fmMBqGOrLRH15asQx98Mr9Ng5bc8E/Z25IIYI2IBSVI= Subject key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EFB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft caRepository: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 11:04:11 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 138.252.102.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28411 (0x6efb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 27 11:04:11 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:96:d3:07:0a:ce:08:27:b0:ac:65:78:75: 2b:67:ad:56:26:c2:7a:b7:1e:b2:ac:66:18:4d:84: 07:cd:9e:0a:63:8a:c5:dc:b2:1f:ad:1d:dd:96:be: 25:03:88:a2:84:ce:84:34:60:8b:ba:c9:2e:b8:57: 06:26:72:40:96:7c:d1:4c:ab:d5:02:98:6c:5e:c0: 09:04:2c:8d:dd:64:2c:bd:c6:46:26:55:19:e4:9c: 8b:e0:0a:ad:d6:9f:33:4f:19:2f:e5:22:83:4d:92: 30:30:2e:b5:22:d5:e6:0c:e0:2b:bc:84:25:05:bd: 62:71:f3:f7:31:5b:f6:7b:00:30:f3:9c:3f:55:97: a5:82:95:04:1e:89:a6:aa:0d:c4:58:6f:c2:50:de: 22:f8:67:43:a1:28:96:d4:6b:15:fb:74:1c:28:df: 01:fa:a2:be:1f:a2:e8:3c:0d:62:11:a6:a9:23:14: 12:51:bf:99:18:47:f2:44:5a:06:b2:67:ca:1d:c9: b5:eb:11:c6:12:d2:48:0b:32:60:24:6f:df:1c:8b: 84:fc:06:77:75:6d:bb:ac:6d:29:46:84:66:86:ee: 7e:33:59:72:82:fd:3a:cc:09:a3:08:92:76:c2:58: 54:34:37:81:af:a2:8d:70:a0:fd:1d:f2:01:cf:e5: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.102.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:2f:d0:75:ef:65:04:61:a4:b8:9c:17:ac:df:d1:bd:3e:e2: 4e:88:42:7f:27:49:36:c6:a1:e7:3e:4e:ee:6f:76:a0:5e:48: fa:31:96:b9:c5:30:19:2c:8e:60:75:1b:18:88:02:10:19:a0: ad:d7:18:26:b6:1a:c3:f2:1e:7d:af:47:76:df:b3:bd:dd:e4: 32:93:7c:9a:ab:4f:ff:d7:2f:08:af:37:a9:59:c9:e8:96:b8: b6:2b:23:ae:ee:23:b0:37:84:48:b7:0d:00:2c:a9:b2:77:33: 13:ac:2f:04:22:20:b3:98:98:c6:ea:69:0f:0c:7e:96:d4:84: 32:f7:01:e2:7a:9b:50:30:39:57:eb:de:56:e5:44:c2:13:c9: f2:a1:b7:82:e2:0f:f3:29:69:52:49:cc:b5:6a:73:92:be:d1: aa:5c:93:cd:fc:24:1f:db:34:28:16:fe:64:d0:1c:11:f4:0f: 7a:7c:ae:6f:e2:98:37:32:bb:e6:16:81:d3:45:41:7c:b9:92: 3f:04:4d:9b:e1:e7:be:0c:c2:ea:ae:85:1f:97:08:11:3a:5c: ab:5d:06:85:47:1a:f4:0e:0a:4a:98:9b:2f:cc:a6:a5:a5:a3: b6:bd:6a:a3:05:07:b6:eb:7b:57:c3:66:24:3e:4f:75:cd:29: 7f:23:4a:e9 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI3MTEwNDExWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2NDdFRDExMC8GA1UEBRMoRDVEMEQ4RTFGMDNENTEwMDg4OUY0MTgw QTY1RjU1MEEwRDU4MEI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJx8ltMHCs4IJ7CsZXh1K2etVibCercesqxmGE2EB82eCmOKxdyyH60d3Za+JQOI ooTOhDRgi7rJLrhXBiZyQJZ80Uyr1QKYbF7ACQQsjd1kLL3GRiZVGeSci+AKrdaf M08ZL+Uig02SMDAutSLV5gzgK7yEJQW9YnHz9zFb9nsAMPOcP1WXpYKVBB6JpqoN xFhvwlDeIvhnQ6EoltRrFft0HCjfAfqivh+i6DwNYhGmqSMUElG/mRhH8kRaBrJn yh3JtesRxhLSSAsyYCRv3xyLhPwGd3Vtu6xtKUaEZobufjNZcoL9OswJowiSdsJY VDQ3ga+ijXCg/R3yAc/lSy8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTV0Njh8D1R AIifQYCmX1UKDVgLhTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ3RUQvQzlDNjJEQTRDQjgwMTFGMEE2OEU1NDFDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY0N0VEL0M5QzYyREE0Q0I4MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5 VVFDSW4wR0FwbDlWQ2cxWUM0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8ZjANBgkqhkiG9w0BAQsFAAOCAQEAnS/Qde9lBGGkuJwXrN/R vT7iTohCfydJNsah5z5O7m92oF5I+jGWucUwGSyOYHUbGIgCEBmgrdcYJrYaw/Ie fa9Hdt+zvd3kMpN8mqtP/9cvCK83qVnJ6Ja4tisjru4jsDeESLcNACypsnczE6wv BCIgs5iYxuppDwx+ltSEMvcB4nqbUDA5V+veVuVEwhPJ8qG3guIP8ylpUknMtWpz kr7RqlyTzfwkH9s0KBb+ZNAcEfQPenyub+KYNzK75haB00VBfLmSPwRNm+HnvgzC 6q6FH5cIETpcq10GhUca9A4KSpibL8ympaWjtr1qowUHtut7V8NmJD5Pdc0pfyNK 6Q== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:34 2025 by rpki-client