This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer File: 6HkDAXqx8GqctGqwIb0Lkhya-og.cer (raw, json) Hash identifier: WyUfii6J2VUHYlR/qcRnWM8zZedwdIFg8Z/JdhmSGsc= Subject key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DDF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 11:59:37 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.170.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28127 (0x6ddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 11 11:59:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:43:26:d6:c7:11:88:ee:86:01:96:54:b7:24: 56:d3:8d:9b:af:41:7d:fb:3c:ed:f8:07:ac:f5:df: 4f:b7:5d:b3:c0:04:71:6b:ed:bc:6e:15:27:06:ed: 68:aa:91:b2:0e:1c:37:30:99:40:8d:d1:0b:14:2f: ec:cb:96:91:fb:6e:80:1b:51:3f:6e:fa:8a:b5:11: d4:e4:de:41:05:ce:76:b2:aa:5f:50:fe:16:93:be: 66:d1:49:5b:d6:fb:c4:9d:71:75:e0:7e:1a:97:43: 73:09:73:09:75:3b:e1:6c:47:f5:41:8c:37:91:1d: 02:a6:d8:68:4e:b7:8f:57:b3:6f:f0:d8:9c:d1:d2: 5d:10:37:3e:28:12:c8:79:a8:a6:74:ca:97:c2:d1: 8c:d5:2a:f9:3e:ed:b5:79:2e:b2:22:dc:e3:d7:f0: c3:d8:ba:9c:d9:b9:e8:ea:56:43:69:3d:fb:ae:78: ca:0b:ac:c4:d6:8a:9c:93:19:fc:46:fa:a7:ca:69: 07:ae:0b:66:07:b9:bf:da:73:ed:90:61:54:f8:42: ae:bc:34:e5:2c:29:cc:8c:60:03:a8:2e:ce:53:92: 65:ea:e0:47:ce:4d:8c:7b:35:b6:b4:b8:02:e5:c6: 98:31:e2:f3:80:8e:17:41:d7:2c:f8:e5:04:b8:59: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:1c:d9:70:8c:25:6d:ab:b5:db:5a:4c:2a:36:c8:5f:6f:eb: 24:50:ba:87:f4:6c:eb:84:a8:b1:62:fd:94:cf:fd:c9:09:e6: d2:0b:3e:79:5c:af:26:47:03:b5:80:8f:df:55:2b:9d:3b:3e: 27:81:a3:95:07:fe:46:63:9d:03:b6:a7:3a:a3:ee:35:78:0b: bc:12:2c:6c:44:39:a5:db:40:24:82:29:c3:8e:12:82:9d:b4: 9b:80:4a:f1:7f:5d:4d:07:46:91:a4:7e:74:5d:f0:3e:d7:c7: 5b:3d:5f:09:86:55:b0:9b:b3:72:25:a0:4f:16:61:b6:2e:34: 55:48:f9:a6:6d:87:48:8d:40:eb:06:55:1a:9e:8c:1b:6d:f5: 70:26:4e:1a:b9:8b:9d:cd:d3:24:8f:4b:31:0e:08:c3:e6:13: 11:36:a2:f3:6b:b2:1c:a3:0b:b3:54:43:0f:10:b1:01:8b:27: c0:fd:1f:26:4b:b0:09:be:40:48:61:a2:de:dd:56:33:fa:e2: a8:b8:44:dc:24:f0:ad:b9:a6:01:fd:96:1a:f5:55:53:5e:4b: d0:9f:76:a3:1a:fc:cf:8b:3a:8e:fd:eb:23:29:f4:da:f0:c9: 18:15:f4:ba:0a:48:5a:fe:2f:d3:ed:9a:d7:e9:97:68:fd:bd: d5:09:51:e5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTExMTE1OTM3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDNDlCQTExMC8GA1UEBRMoRTg3OTAzMDE3QUIxRjA2QTlDQjQ2QUIw MjFCRDBCOTIxQzlBRkE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOtDJtbHEYjuhgGWVLckVtONm69Bffs87fgHrPXfT7dds8AEcWvtvG4VJwbtaKqR sg4cNzCZQI3RCxQv7MuWkftugBtRP276irUR1OTeQQXOdrKqX1D+FpO+ZtFJW9b7 xJ1xdeB+GpdDcwlzCXU74WxH9UGMN5EdAqbYaE63j1ezb/DYnNHSXRA3PigSyHmo pnTKl8LRjNUq+T7ttXkusiLc49fww9i6nNm56OpWQ2k9+654ygusxNaKnJMZ/Eb6 p8ppB64LZge5v9pz7ZBhVPhCrrw05SwpzIxgA6guzlOSZergR85NjHs1trS4AuXG mDHi84COF0HXLPjlBLhZwh0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBToeQMBerHw apy0arAhvQuSHJr6iDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ5QkEvRTM2N0Y2QzZCRUY1MTFGMDlCN0U3MjA5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM0OUJBL0UzNjdGNkM2QkVGNTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4 OEdxY3RHcXdJYjBMa2h5YS1vZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8qjANBgkqhkiG9w0BAQsFAAOCAQEAGxzZcIwlbau121pMKjbI X2/rJFC6h/Rs64SosWL9lM/9yQnm0gs+eVyvJkcDtYCP31UrnTs+J4GjlQf+RmOd A7anOqPuNXgLvBIsbEQ5pdtAJIIpw44Sgp20m4BK8X9dTQdGkaR+dF3wPtfHWz1f CYZVsJuzciWgTxZhti40VUj5pm2HSI1A6wZVGp6MG231cCZOGrmLnc3TJI9LMQ4I w+YTETai82uyHKMLs1RDDxCxAYsnwP0fJkuwCb5ASGGi3t1WM/riqLhE3CTwrbmm Af2WGvVVU15L0J92oxr8z4s6jv3rIyn02vDJGBX0ugpIWv4v0+2a1+mXaP291QlR 5Q== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:35 2025 by rpki-client