This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4-ABdWjohx9OiHmxBiqu1yw08jo.cer File: 4-ABdWjohx9OiHmxBiqu1yw08jo.cer (raw, json) Hash identifier: pNyZrUqmqZV9S73EUclsRg8ABfWmj4nNZ1TPt4Pf9D8= Subject key identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6CE8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 28 Oct 2025 04:10:57 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.100.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27880 (0x6ce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Oct 28 04:10:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A05BF, serialNumber=E3E0017568E8871F4E8879B1062AAED72C34F23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:3d:c1:e2:bc:6f:ed:f2:12:3f:5d:9a:7d: ff:7d:a4:28:f0:d7:ae:73:c3:4b:55:3d:53:a3:7e: e3:e3:96:4b:0f:7a:fc:d9:bf:b8:c1:d3:bd:a3:9e: 86:b2:a7:44:d8:50:fb:e9:ed:ec:80:4a:b3:b4:43: 40:78:67:84:b9:c7:5e:94:57:b7:32:a2:83:d1:66: 82:f1:87:c3:93:1a:ec:c4:24:3a:8d:6a:d3:46:f9: 92:01:05:57:f5:e1:42:96:ce:78:54:b6:c3:96:4c: d2:eb:c4:31:d6:b6:51:13:7c:ed:f9:66:8d:a3:ea: 05:8b:8c:e9:71:6c:6b:bc:8a:79:75:f6:bc:60:b3: a5:d9:5c:95:da:71:db:8d:30:75:74:1c:f2:7d:08: 2a:77:7f:30:40:23:52:96:d9:01:15:c7:e3:71:f5: df:a9:fd:1c:db:85:3b:aa:ba:a8:9e:0f:26:aa:f6: 0e:4b:bf:2f:58:70:24:9f:cf:a8:dd:18:f6:df:3b: 58:6e:7c:64:21:42:25:21:ce:45:ef:e3:a3:03:87: 06:27:60:6a:06:e3:b0:9d:41:30:44:9e:0b:8f:3c: 1a:c3:54:bd:14:bf:f2:2b:48:b5:60:ee:2c:0c:2a: 5d:8c:20:6e:1d:94:c8:88:94:5b:56:c7:e0:55:11: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:01:75:68:E8:87:1F:4E:88:79:B1:06:2A:AE:D7:2C:34:F2:3A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/18136D8AB3B411F0B6917F0EC4F9AE02/4-ABdWjohx9OiHmxBiqu1yw08jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.100.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:f5:85:0d:9f:69:e5:98:47:37:5f:4f:93:c8:c9:4d:22:69: 8a:50:de:72:58:fd:be:c8:c5:97:cc:d8:7a:c6:51:7c:88:43: b0:c4:97:33:8f:ea:58:53:22:be:63:6e:a7:93:1e:9f:b3:3d: 6b:96:ed:80:01:44:b0:91:5c:a6:ad:56:64:74:be:e0:ab:61: 82:9c:1e:2c:06:18:04:91:c9:e9:2b:9f:72:ee:19:ba:f7:08: 1c:2d:61:7c:d2:15:f7:99:db:ae:8e:d1:f8:98:64:1a:8a:42: 8b:b6:bd:60:26:11:61:37:af:07:86:d7:28:d4:56:8b:88:c9: c7:7f:53:77:6d:57:e8:47:b8:fb:36:bb:a7:63:51:d0:fc:b8: ce:27:d8:3e:a2:46:10:71:53:a7:a8:e6:e5:0b:4f:16:c0:82: 3a:4c:5d:75:a9:e0:b8:78:7c:5e:49:af:bb:6d:97:08:c5:5d: 90:0b:d5:7d:46:9c:00:17:04:06:52:82:fd:c2:fb:eb:80:76: fd:e7:3b:6c:e2:24:4f:9c:5e:f7:c5:99:08:d1:1f:3a:a6:e6: 44:f7:59:81:4c:2f:88:a4:a9:09:b8:7e:de:26:fb:d7:58:38: 6a:ad:54:f9:4e:12:41:c3:f3:4a:cd:db:41:d5:87:63:63:48: ab:08:8c:77 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMDI4MDQxMDU3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBMDVCRjExMC8GA1UEBRMoRTNFMDAxNzU2OEU4ODcxRjRFODg3OUIx MDYyQUFFRDcyQzM0RjIzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALzMPcHivG/t8hI/XZp9/32kKPDXrnPDS1U9U6N+4+OWSw96/Nm/uMHTvaOehrKn RNhQ++nt7IBKs7RDQHhnhLnHXpRXtzKig9FmgvGHw5Ma7MQkOo1q00b5kgEFV/Xh QpbOeFS2w5ZM0uvEMda2URN87flmjaPqBYuM6XFsa7yKeXX2vGCzpdlcldpx240w dXQc8n0IKnd/MEAjUpbZARXH43H136n9HNuFO6q6qJ4PJqr2Dku/L1hwJJ/PqN0Y 9t87WG58ZCFCJSHORe/jowOHBidgagbjsJ1BMESeC488GsNUvRS/8itItWDuLAwq XYwgbh2UyIiUW1bH4FUREkECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTj4AF1aOiH H06IebEGKq7XLDTyOjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA1QkYvMTgxMzZEOEFCM0I0MTFGMEI2OTE3RjBFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEwNUJGLzE4MTM2RDhBQjNCNDExRjBCNjkxN0YwRUM0RjlBRTAyLzQtQUJkV2pv aHg5T2lIbXhCaXF1MXl3MDhqby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8ZDANBgkqhkiG9w0BAQsFAAOCAQEAa/WFDZ9p5ZhHN19Pk8jJ TSJpilDeclj9vsjFl8zYesZRfIhDsMSXM4/qWFMivmNup5Men7M9a5btgAFEsJFc pq1WZHS+4KthgpweLAYYBJHJ6Sufcu4ZuvcIHC1hfNIV95nbro7R+JhkGopCi7a9 YCYRYTevB4bXKNRWi4jJx39Td21X6Ee4+za7p2NR0Py4zifYPqJGEHFTp6jm5QtP FsCCOkxddanguHh8Xkmvu22XCMVdkAvVfUacABcEBlKC/cL764B2/ec7bOIkT5xe 98WZCNEfOqbmRPdZgUwviKSpCbh+3ib711g4aq1U+U4SQcPzSs3bQdWHY2NIqwiM dw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:28 2025 by rpki-client