This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer File: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer (raw, json) Hash identifier: UZLrzG0/vw+NDN1KGe1DNez5uV7lqXCsmFHCd4+A6Vw= Subject key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F74 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 07:06:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.62.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28532 (0x6f74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 3 07:06:33 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:42:4e:0f:76:84:3c:64:35:36:db:2c:8a: 59:c9:b5:c5:ad:2c:31:34:2d:26:f6:01:c5:b2:18: df:66:6d:39:2d:7e:79:59:97:c8:5d:12:09:61:8b: 48:04:e1:52:85:14:36:d7:8e:fe:72:a6:0c:3f:3a: ce:ee:54:6b:5d:3a:a1:fe:80:d2:33:4e:d0:7e:dd: a0:19:24:94:f5:90:5d:c3:e3:04:f0:00:67:87:6e: 32:f8:c1:76:85:13:e2:45:d2:53:22:89:67:f0:63: 20:5e:fd:c1:34:e4:b4:38:d8:25:79:69:83:92:6d: ea:99:ee:51:78:e5:9c:c6:39:9f:f8:11:f3:6f:3b: 97:cf:d2:fd:23:bd:0c:c1:61:22:65:ad:e9:d9:40: 2a:ca:51:6a:c8:b2:81:3d:23:9c:90:f7:63:30:59: a8:e3:54:e2:85:38:5c:ce:92:e5:95:cc:7d:95:8f: 83:6d:21:ee:b4:d7:8c:1e:56:7c:99:ef:88:e6:1f: 92:3b:48:fb:b9:f8:39:4d:33:e8:08:73:31:8f:47: 55:05:34:ef:8a:2c:59:f8:7b:48:9f:7b:c1:ac:1a: 99:73:9f:c8:cd:bf:07:cc:09:59:5d:66:0f:a3:3b: 89:9e:89:d4:9c:fd:7a:9c:b6:c3:38:2e:ee:c0:f6: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.62.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:73:04:73:4c:6f:6e:56:60:6f:8e:f8:bb:c7:c2:1c:47:d5: 82:b6:4b:aa:ab:fe:71:82:04:c6:48:a0:37:58:20:82:e3:e7: 62:eb:ba:58:22:35:14:57:48:3a:38:e4:3d:81:db:40:23:85: b2:65:6e:e4:5c:94:f0:96:ce:a0:f4:fe:09:4c:85:2f:20:f1: 03:51:47:aa:ba:73:76:28:ea:f7:17:d7:fd:f7:31:a9:89:f8: 7a:25:e0:53:73:17:72:32:e7:7a:61:27:df:fe:7f:2c:22:58: d2:bd:20:3d:e8:d6:fd:52:bd:c5:41:1a:bd:fc:a3:76:44:5a: 16:1a:87:1c:33:97:1f:bf:5b:d9:05:c5:c7:8e:54:48:ac:fb: 3f:f1:f5:f8:84:39:1d:12:db:d7:e5:7c:e1:8c:79:b0:25:7b: 2e:68:e5:dc:01:a2:88:bd:00:36:55:52:61:bf:69:01:0d:0d: d0:56:b2:b5:2b:c7:56:5d:09:03:75:98:2b:f2:40:01:1f:48: 77:88:29:d3:ee:99:b4:5b:90:03:7b:08:88:16:f3:29:6d:88: 83:01:40:91:46:44:ab:95:4a:ea:e8:c3:9b:96:5e:09:96:85: cd:a9:57:7e:db:5b:ed:18:34:c8:e5:6e:07:dc:ca:f6:58:1f: 01:2b:a6:a3 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAzMDcwNjMzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBMUQ4QzExMC8GA1UEBRMoRUUzMjMxRDVBQTU2NUY0MDUyNDE5Nzky QUI4MkM0Mjc4ODRCQzJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALf0Qk4PdoQ8ZDU22yyKWcm1xa0sMTQtJvYBxbIY32ZtOS1+eVmXyF0SCWGLSATh UoUUNteO/nKmDD86zu5Ua106of6A0jNO0H7doBkklPWQXcPjBPAAZ4duMvjBdoUT 4kXSUyKJZ/BjIF79wTTktDjYJXlpg5Jt6pnuUXjlnMY5n/gR8287l8/S/SO9DMFh ImWt6dlAKspRasiygT0jnJD3YzBZqONU4oU4XM6S5ZXMfZWPg20h7rTXjB5WfJnv iOYfkjtI+7n4OU0z6AhzMY9HVQU074osWfh7SJ97wawamXOfyM2/B8wJWV1mD6M7 iZ6J1Jz9epy2wzgu7sD2JYECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTuMjHVqlZf QFJBl5KrgsQniEvC7DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFEOEMvOTc1NERBMzhEMDE2MTFGMEE2NTQ3QTdFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUExRDhDLzk3NTREQTM4RDAxNjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBX WDBCU1FaZVNxNExFSjRoTHd1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPPjANBgkqhkiG9w0BAQsFAAOCAQEAj3MEc0xvblZgb474u8fC HEfVgrZLqqv+cYIExkigN1ggguPnYuu6WCI1FFdIOjjkPYHbQCOFsmVu5FyU8JbO oPT+CUyFLyDxA1FHqrpzdijq9xfX/fcxqYn4eiXgU3MXcjLnemEn3/5/LCJY0r0g PejW/VK9xUEavfyjdkRaFhqHHDOXH79b2QXFx45USKz7P/H1+IQ5HRLb1+V84Yx5 sCV7Lmjl3AGiiL0ANlVSYb9pAQ0N0FaytSvHVl0JA3WYK/JAAR9Id4gp0+6ZtFuQ A3sIiBbzKW2IgwFAkUZEq5VK6ujDm5ZeCZaFzalXfttb7Rg0yOVuB9zK9lgfASum ow== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:28 2025 by rpki-client