This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer File: 8cgPvdVMGAKQLIXOmQoRLtMLX18.cer (raw, json) Hash identifier: LcthSyM70JFkCf9ZR66qrs5x/Hch6SUT+5ukTIc/zRA= Subject key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F08 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft caRepository: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 05:34:25 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.16.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28424 (0x6f08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 28 05:34:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:69:a3:f8:e0:e2:87:84:93:ad:2b:67:d9: a6:52:32:82:c9:24:09:82:a2:a9:ff:b9:41:44:99: a4:62:1b:fb:3e:25:cd:01:1c:f8:f2:5c:e2:f6:a9: 8d:73:03:de:59:f3:d1:ee:bf:d1:be:b9:db:57:87: 6d:6f:f8:43:d0:df:28:4d:16:be:0e:c6:33:05:eb: 1e:94:7e:9c:78:00:42:54:ef:83:50:08:19:62:69: bb:4a:dd:cc:e2:cc:5b:64:93:1a:48:0d:b0:6b:61: 50:36:ae:51:18:13:56:93:0b:53:0c:8b:aa:e5:12: 5c:d5:f7:4a:c7:25:6c:b7:64:52:90:56:70:3e:4f: fa:f8:59:76:af:1e:2b:ce:9b:5d:ce:c4:75:72:e5: 3d:24:c0:14:08:93:ac:d7:5c:30:05:12:7d:63:bf: ed:54:f0:93:8e:a6:a9:41:a9:f5:f7:5a:9a:73:e8: 01:10:84:68:97:04:6f:d9:8d:66:a2:e1:12:93:00: 85:9f:78:88:ca:51:be:e8:27:aa:8a:ee:7b:ad:99: bb:7e:46:0f:8d:66:89:e5:a0:ff:3f:82:e8:2a:87: 61:95:b9:db:20:12:6b:cc:1b:a8:49:41:78:08:12: 65:40:21:36:34:5b:1d:58:9b:26:43:70:d1:f0:d7: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.16.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e0:0b:e6:f2:6f:86:a7:0a:08:69:50:95:f5:92:82:6b:24: cf:cc:69:aa:bf:14:f1:88:53:cb:e4:8b:f2:12:22:26:39:96: 21:d1:0f:c6:1d:1b:92:fa:b1:e0:4c:c9:cb:80:4e:c9:37:ae: 74:b0:be:60:79:d7:c3:47:5b:7c:d0:6f:05:84:99:32:fc:35: 96:ba:10:52:85:d3:ec:d3:34:c4:b8:66:e7:01:6d:e4:bd:00: 91:13:ee:b9:78:b0:18:9f:5c:9c:f4:77:55:87:ec:b8:a6:43: 87:7f:94:03:02:4c:eb:6d:86:e1:04:38:d2:8b:da:bf:5e:51: c2:eb:7f:19:52:00:c6:f5:98:52:3e:b3:31:d6:0b:07:74:41: be:0e:a5:55:b7:d2:db:a4:55:dc:ab:bc:30:a2:34:b8:20:20: ba:ff:0d:50:92:28:92:8b:46:6f:ae:9e:8e:72:55:bf:8c:15: e5:83:1c:a6:79:50:ff:56:60:c1:ef:84:e2:31:59:36:e7:17: 09:9c:2f:9c:e7:42:df:98:77:d0:80:2c:43:2f:f2:f8:73:32: 83:b6:b7:a1:14:5c:71:c4:13:36:59:53:df:e5:5a:cb:8f:76: c2:a0:c4:5b:2e:ab:e1:ee:fe:26:d6:4d:34:f6:0f:f9:15:99: 3f:67:b8:d2 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI4MDUzNDI1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1QUMzNjExMC8GA1UEBRMoRjFDODBGQkRENTRDMTgwMjkwMkM4NUNF OTkwQTExMkVEMzBCNUY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKxcaaP44OKHhJOtK2fZplIygskkCYKiqf+5QUSZpGIb+z4lzQEc+PJc4vapjXMD 3lnz0e6/0b6521eHbW/4Q9DfKE0Wvg7GMwXrHpR+nHgAQlTvg1AIGWJpu0rdzOLM W2STGkgNsGthUDauURgTVpMLUwyLquUSXNX3SsclbLdkUpBWcD5P+vhZdq8eK86b Xc7EdXLlPSTAFAiTrNdcMAUSfWO/7VTwk46mqUGp9fdamnPoARCEaJcEb9mNZqLh EpMAhZ94iMpRvugnqorue62Zu35GD41mieWg/z+C6CqHYZW52yASa8wbqElBeAgS ZUAhNjRbHVibJkNw0fDXXYMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTxyA+91UwY ApAshc6ZChEu0wtfXzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFDMzYvRTQyMkE5OThDQzFCMTFGMEI5M0Q4RjJDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVBQzM2L0U0MjJBOTk4Q0MxQjExRjBCOTNEOEYyQ0M0RjlBRTAyLzhjZ1B2ZFZN R0FLUUxJWE9tUW9STHRNTFgxOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPEDANBgkqhkiG9w0BAQsFAAOCAQEAi+AL5vJvhqcKCGlQlfWS gmskz8xpqr8U8YhTy+SL8hIiJjmWIdEPxh0bkvqx4EzJy4BOyTeudLC+YHnXw0db fNBvBYSZMvw1lroQUoXT7NM0xLhm5wFt5L0AkRPuuXiwGJ9cnPR3VYfsuKZDh3+U AwJM622G4QQ40ovav15Rwut/GVIAxvWYUj6zMdYLB3RBvg6lVbfS26RV3Ku8MKI0 uCAguv8NUJIokotGb66ejnJVv4wV5YMcpnlQ/1Zgwe+E4jFZNucXCZwvnOdC35h3 0IAsQy/y+HMyg7a3oRRcccQTNllT3+Vay492wqDEWy6r4e7+JtZNNPYP+RWZP2e4 0g== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:36 2025 by rpki-client