This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer File: 529w4WvXl_FHD9HglUZu2f_XC94.cer (raw, json) Hash identifier: rDitAqCEdSBuoNld9/7JYOCnWtl+ARGIgMAHSb/jiLs= Subject key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DDC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft caRepository: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 04:53:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.177.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28124 (0x6ddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 11 04:53:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:ed:af:07:9f:82:b6:14:9b:dd:2b:6a:e6: 93:82:95:d3:40:b1:4f:6d:07:c7:67:e2:89:1d:1f: 54:a5:5b:e1:0e:56:5f:7f:ac:00:ca:a0:a8:e8:52: 2c:5e:fa:75:dd:0a:aa:6a:6f:6c:35:9f:38:5c:ec: 03:f3:41:0a:c1:cf:f7:b3:3b:8f:c8:79:4b:c9:b6: 56:67:10:4f:4e:a4:9d:5d:9c:8d:59:2f:dd:b5:61: 63:3a:da:98:d5:67:e4:65:03:6c:79:73:45:fa:7a: 36:d9:9f:b0:51:29:4a:c7:ca:a5:cb:78:28:be:2e: 62:fc:a4:f7:69:2e:6a:df:d8:da:f3:27:47:f2:cc: 29:0b:1e:59:65:b0:95:0d:e6:df:64:fa:c7:08:d8: 10:fd:9a:0c:d2:07:9e:b1:24:0c:f8:c8:a0:53:4c: 8b:21:4c:a3:d6:8d:d9:f3:94:53:e7:9e:61:da:c3: f8:41:34:23:e8:45:2c:a8:c8:e5:d9:79:c8:45:0d: ef:78:12:95:95:04:d8:a6:e5:58:4a:0f:db:cd:6f: 2e:54:1c:f5:6a:d3:82:c2:f3:6b:77:2c:d7:f0:66: 00:0a:bc:c2:42:10:87:5b:0b:9c:86:cf:23:cb:b9: bc:19:f3:a0:e1:9e:6d:2e:f7:e3:d1:a1:dd:61:0b: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.177.0/24 Signature Algorithm: sha256WithRSAEncryption 03:0a:5a:bd:c6:e7:52:69:1f:ae:a3:77:28:38:13:e1:93:8e: 08:70:8f:ff:4f:63:5f:8f:ef:4e:31:8e:52:6a:24:3a:77:03: 60:d7:b0:3c:ca:e9:43:5e:0c:84:85:e8:d4:e2:e0:d7:a8:8d: 4d:8e:99:bd:fe:2c:16:4b:e7:00:cd:c6:b0:c3:7d:8b:22:eb: 35:9e:06:9d:8c:3e:dd:1f:e2:f0:a6:62:06:72:a6:3e:e1:ff: d1:ba:a4:92:24:eb:f3:e0:ea:36:a9:c0:dd:30:b8:bc:8d:a0: 3c:48:ad:ae:ea:d4:e4:57:a2:e7:b7:14:8b:b5:44:c4:c3:9c: 80:75:07:b1:73:45:3b:ad:93:fb:97:d5:e1:a3:d5:df:9b:17: 81:58:d5:07:20:a9:76:25:df:a6:76:86:4b:21:7e:2c:5e:3c: fd:93:f4:b4:89:40:bd:10:9d:35:a6:91:0a:99:38:a6:d3:de: f6:2a:ea:4e:35:89:84:16:ee:a0:65:f0:0b:77:31:e3:cc:09: 4e:b8:df:0b:79:3c:6e:1c:0a:29:a0:c0:86:0d:1e:1a:71:0c: 0c:06:2e:7c:40:c6:f4:6f:26:96:a7:57:c1:35:62:2c:4f:dd: 3f:f0:9c:56:f8:3a:46:92:fa:6e:93:a2:b7:bf:80:da:69:66: f3:d0:e7:03 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTExMDQ1MzIxWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0QjZEODExMC8GA1UEBRMoRTc2RjcwRTE2QkQ3OTdGMTQ3MEZEMUUw OTU0NjZFRDlGRkQ3MEJERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKVF7a8Hn4K2FJvdK2rmk4KV00CxT20Hx2fiiR0fVKVb4Q5WX3+sAMqgqOhSLF76 dd0KqmpvbDWfOFzsA/NBCsHP97M7j8h5S8m2VmcQT06knV2cjVkv3bVhYzramNVn 5GUDbHlzRfp6NtmfsFEpSsfKpct4KL4uYvyk92kuat/Y2vMnR/LMKQseWWWwlQ3m 32T6xwjYEP2aDNIHnrEkDPjIoFNMiyFMo9aN2fOUU+eeYdrD+EE0I+hFLKjI5dl5 yEUN73gSlZUE2KblWEoP281vLlQc9WrTgsLza3cs1/BmAAq8wkIQh1sLnIbPI8u5 vBnzoOGebS7349Gh3WELDAMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTnb3Dha9eX 8UcP0eCVRm7Z/9cL3jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI2RDgvNTY5NDhCMzJCRUJBMTFGMDk2QTYyNzg0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRCNkQ4LzU2OTQ4QjMyQkVCQTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZY bF9GSEQ5SGdsVVp1MmZfWEM5NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8sTANBgkqhkiG9w0BAQsFAAOCAQEAAwpavcbnUmkfrqN3KDgT 4ZOOCHCP/09jX4/vTjGOUmokOncDYNewPMrpQ14MhIXo1OLg16iNTY6Zvf4sFkvn AM3GsMN9iyLrNZ4GnYw+3R/i8KZiBnKmPuH/0bqkkiTr8+DqNqnA3TC4vI2gPEit rurU5Fei57cUi7VExMOcgHUHsXNFO62T+5fV4aPV35sXgVjVByCpdiXfpnaGSyF+ LF48/ZP0tIlAvRCdNaaRCpk4ptPe9irqTjWJhBbuoGXwC3cx48wJTrjfC3k8bhwK KaDAhg0eGnEMDAYufEDG9G8mlqdXwTViLE/dP/CcVvg6RpL6bpOit7+A2mlm89Dn Aw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:30 2025 by rpki-client