This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer File: 6zyPJLutyUE0hx1uX9C3xYtJ08k.cer (raw, json) Hash identifier: urn9DVGC00zxYCcgNCR16MEe/rlwkrCvtkRHPUWa3SY= Subject key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7002 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft caRepository: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 14:07:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 64.251.192.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 08:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28674 (0x7002) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 11 14:07:10 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:4c:8e:6d:7e:08:e3:eb:2d:5f:f6:e7:35: de:cf:b7:17:69:31:21:fa:99:c7:38:98:fd:e2:1d: 8b:6f:e1:4e:5c:ab:9e:87:cf:9c:92:05:d8:85:cf: 4b:70:e4:00:7e:dd:0f:ab:9e:73:4c:dc:4c:0e:ef: 97:73:48:36:49:b3:17:3f:eb:ef:6c:9b:a7:09:a5: 6a:81:71:f2:73:a3:75:d4:e9:cd:ee:15:c2:0d:d3: 22:a6:56:4c:39:4b:bd:88:4e:0c:5a:f2:14:f5:c0: cc:09:53:00:af:85:b0:56:69:6c:91:65:4f:53:0d: 5d:fb:2e:43:19:70:3d:ef:e3:47:02:90:24:a1:1f: 8f:07:ae:cd:ec:b4:94:60:0e:43:cd:84:20:c3:5c: c5:1e:a2:31:73:65:a0:e8:89:aa:fa:a6:17:ad:f3: 00:97:31:88:92:80:9b:78:84:56:47:7a:bc:cf:0d: b9:1b:df:93:6d:c6:34:6a:c6:d6:e4:45:d4:5c:c1: a5:9a:fc:69:ba:62:92:b8:f5:b5:e9:14:89:71:19: d2:de:8b:0d:d0:26:08:e7:e5:94:e6:c2:89:11:89: e1:4d:48:1f:97:32:d5:80:a1:7a:12:39:0f:9c:d2: e7:28:5a:ec:a2:d9:e7:3a:83:56:98:3f:5d:d3:06: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.251.192.0/20 Signature Algorithm: sha256WithRSAEncryption c5:35:83:db:35:82:d4:bd:79:44:f9:48:37:62:b2:dd:06:bd: 37:f5:71:91:a1:97:82:7d:66:9f:3d:c2:6a:63:58:b9:6e:95: 3c:79:75:ad:66:a3:a7:43:c9:6d:2f:28:3e:40:dc:6f:de:c5: 64:9c:5b:ff:1e:ac:85:bf:69:8a:d7:82:fc:b4:fb:03:01:6b: b5:28:c7:48:82:a0:da:9e:dc:33:97:40:98:d5:72:c4:a5:2e: 5f:ba:0d:5f:e1:aa:c7:11:3c:59:66:8e:73:02:4c:19:2d:5b: dd:9d:0d:ae:e6:bc:b7:30:54:d0:7b:af:ca:d8:e4:68:c6:f9: 83:9c:b0:78:f1:95:e9:80:29:0e:be:dc:17:5f:46:c3:66:9a: 18:4e:e2:f2:79:cb:84:6e:24:53:9f:85:bd:c1:e3:59:05:3c: c3:a2:4a:ba:ef:4d:df:70:1b:e7:1b:34:3a:49:14:be:a6:52: 22:65:9a:ea:fb:70:44:48:e9:65:d7:70:1e:4a:3e:6f:1e:ff: 23:5f:5a:51:bb:53:af:fb:46:fa:7f:da:9c:3b:1d:89:cb:e9: ff:72:0c:cd:7f:98:bc:a8:3d:58:e4:37:6c:56:36:04:30:b0: 21:ac:fd:ee:5f:6c:b8:bb:92:95:cc:44:36:b6:cc:42:2a:d6: 45:3f:87:4c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjExMTQwNzEwWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4ODNEMzExMC8GA1UEBRMoRUIzQzhGMjRCQkFEQzk0MTM0ODcxRDZF NUZEMEI3QzU4QjQ5RDNDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALPLTI5tfgjj6y1f9uc13s+3F2kxIfqZxziY/eIdi2/hTlyrnofPnJIF2IXPS3Dk AH7dD6uec0zcTA7vl3NINkmzFz/r72ybpwmlaoFx8nOjddTpze4Vwg3TIqZWTDlL vYhODFryFPXAzAlTAK+FsFZpbJFlT1MNXfsuQxlwPe/jRwKQJKEfjweuzey0lGAO Q82EIMNcxR6iMXNloOiJqvqmF63zAJcxiJKAm3iEVkd6vM8NuRvfk23GNGrG1uRF 1FzBpZr8abpikrj1tekUiXEZ0t6LDdAmCOfllObCiRGJ4U1IH5cy1YChehI5D5zS 5yha7KLZ5zqDVpg/XdMGBjECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTrPI8ku63J QTSHHW5f0LfFi0nTyTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgzRDMvOEQwM0VGMzY1RTM2MTFFRkFDOTJEMzE0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg4M0QzLzhEMDNFRjM2NUUzNjExRUZBQzkyRDMxNEM0RjlBRTAyLzZ6eVBKTHV0 eVVFMGh4MXVYOUMzeFl0SjA4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBED7wDANBgkqhkiG9w0BAQsFAAOCAQEAxTWD2zWC1L15RPlIN2Ky 3Qa9N/VxkaGXgn1mnz3CamNYuW6VPHl1rWajp0PJbS8oPkDcb97FZJxb/x6shb9p iteC/LT7AwFrtSjHSIKg2p7cM5dAmNVyxKUuX7oNX+GqxxE8WWaOcwJMGS1b3Z0N rua8tzBU0HuvytjkaMb5g5ywePGV6YApDr7cF19Gw2aaGE7i8nnLhG4kU5+FvcHj WQU8w6JKuu9N33Ab5xs0OkkUvqZSImWa6vtwREjpZddwHko+bx7/I19aUbtTr/tG +n/anDsdicvp/3IMzX+YvKg9WOQ3bFY2BDCwIaz97l9suLuSlcxENrbMQirWRT+H TA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:31:11 2025 by rpki-client