This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer (raw, json) Hash identifier: KEoduGPTMnVd1myYHZxoe6k1s7oeU+VP9pFE3TQm/+k= Subject key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E97 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 03:46:22 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 144.79.6.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28311 (0x6e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 21 03:46:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:43:d6:bb:cd:bb:0a:7f:d9:37:70:fa:bf: 18:f0:46:a0:cf:91:b5:2d:5b:6d:4f:bd:8a:50:97: c7:85:cf:4a:d6:fb:b3:cf:14:9a:55:1e:5b:6e:e6: b1:79:c8:d5:3e:ed:21:1e:d2:8d:8e:b4:67:d4:6f: d8:92:8f:39:48:c1:04:68:1c:da:3e:b9:82:b2:46: ec:ad:3b:ee:73:77:3a:2b:23:1b:61:6a:b3:79:24: bd:ce:c7:b2:3d:7f:3a:81:fe:d1:26:19:b5:d7:0c: a1:c2:80:d2:d0:61:ef:d6:0d:63:98:c6:b9:1d:4a: bf:c3:71:6f:85:31:7e:01:a4:f5:34:49:59:a9:71: 28:21:5c:b9:58:22:b6:5d:74:e7:e8:60:7a:e0:f1: 05:9e:99:59:28:75:a2:c7:63:fc:ca:c5:65:13:34: 12:dc:c7:37:4a:34:22:72:3b:2a:30:af:22:6d:e1: 4f:65:52:39:a1:e1:fb:6b:93:b3:b6:11:e4:1f:a6: 13:98:10:80:aa:df:b8:55:42:a2:a8:a6:6a:7a:0a: b9:92:96:fc:58:f8:b2:26:37:23:e4:b4:bf:59:ae: bb:b7:e8:b2:00:96:25:c2:06:a6:be:5d:9e:42:42: a7:f3:3e:b4:96:cb:e6:dc:ac:72:7a:f0:7f:fc:f9: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.6.0/23 Signature Algorithm: sha256WithRSAEncryption 44:98:1c:c0:1d:3d:7d:a7:c1:c9:9f:97:b3:2f:a9:d7:94:30: 25:49:e6:1c:08:8b:d2:e1:4e:f7:1a:70:97:70:d7:83:eb:37: e7:c6:1f:8f:79:93:43:11:bb:ac:c5:b3:42:33:72:b9:7c:3f: e7:f8:47:78:ac:07:22:b4:9d:53:c2:61:7f:e1:7c:12:26:7b: f5:c3:67:d2:f1:7e:3e:7a:32:05:57:ab:75:76:3e:2b:dc:26: e6:af:22:93:c2:ee:7d:d8:e4:13:af:08:89:c3:0a:15:dd:f4: e2:15:2d:e0:7f:93:6b:b6:76:fc:7b:a9:a6:fe:f9:45:df:88: 81:df:ba:a5:2c:03:5a:27:11:89:25:f4:ae:00:bb:c3:4f:e1: c2:86:d5:3a:91:f8:5b:dc:ea:72:a7:b9:d3:5f:2e:06:0b:a1: 32:af:ab:ab:7a:a0:2f:49:88:c6:5f:8b:8f:3b:3b:b8:d6:21: 1c:6f:15:7a:4e:a7:d3:b2:b6:e3:2c:35:88:4d:88:9b:fe:81: b8:e3:29:7e:de:64:42:50:8e:7a:a4:55:17:38:87:88:d9:23: 31:c4:9e:67:c8:6c:85:b3:c4:19:3f:86:99:cc:01:bb:f5:3e: 4d:16:3b:28:eb:11:9c:01:dc:b9:db:09:1f:37:60:6a:c1:24: 53:fa:09:bd -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTIxMDM0NjIyWhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD VQQDEwhBOTFENDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4 MUY4QkVGNkM0REVDMzVFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMVbQ9a7zbsKf9k3cPq/GPBGoM+RtS1bbU+9ilCXx4XPStb7s88UmlUeW27msXnI 1T7tIR7SjY60Z9Rv2JKPOUjBBGgc2j65grJG7K077nN3OisjG2Fqs3kkvc7Hsj1/ OoH+0SYZtdcMocKA0tBh79YNY5jGuR1Kv8Nxb4UxfgGk9TRJWalxKCFcuVgitl10 5+hgeuDxBZ6ZWSh1osdj/MrFZRM0EtzHN0o0InI7KjCvIm3hT2VSOaHh+2uTs7YR 5B+mE5gQgKrfuFVCoqimanoKuZKW/Fj4siY3I+S0v1muu7fosgCWJcIGpr5dnkJC p/M+tJbL5tyscnrwf/z5d7ECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTuqQG3+zP7 UM8ExZgfi+9sTew14jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQxQUMvQTMwMkFCNDZDNjhDMTFGMEFEMjE0NjM3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ0MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6 LTFEUEJNV1lINHZ2YkUzc05lSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPBjANBgkqhkiG9w0BAQsFAAOCAQEARJgcwB09fafByZ+Xsy+p 15QwJUnmHAiL0uFO9xpwl3DXg+s358Yfj3mTQxG7rMWzQjNyuXw/5/hHeKwHIrSd U8Jhf+F8EiZ79cNn0vF+PnoyBVerdXY+K9wm5q8ik8LufdjkE68IicMKFd304hUt 4H+Ta7Z2/Huppv75Rd+Igd+6pSwDWicRiSX0rgC7w0/hwobVOpH4W9zqcqe5018u BguhMq+rq3qgL0mIxl+Ljzs7uNYhHG8Vek6n07K24yw1iE2Im/6BuOMpft5kQlCO eqRVFziHiNkjMcSeZ8hshbPEGT+GmcwBu/U+TRY7KOsRnAHcudsJHzdgasEkU/oJ vQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:33 2025 by rpki-client