This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer File: AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer (raw, json) Hash identifier: 5qg1h5LKqmMbLUQoKGSsHOkvN/OlhVcgB0jUlZq111E= Subject key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DB0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft caRepository: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 19:45:54 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.69.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28080 (0x6db0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 7 19:45:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:bd:1e:8f:ca:c6:d0:82:a6:a5:26:c9:c6: 0b:fe:51:08:ac:96:31:19:52:0f:78:6a:19:57:e2: 4f:77:de:3b:b3:4a:14:ab:dd:3b:65:e1:be:b8:75: a1:50:44:94:07:9b:5c:15:17:ce:df:99:42:31:91: 5c:a6:93:c5:d5:ef:61:7e:ba:d2:1d:7f:ae:01:53: d2:3d:7e:34:6b:14:1d:4b:cf:d7:db:5b:82:1c:4f: 66:4c:0d:7f:cd:e5:b6:81:88:b6:52:d2:2d:9d:1e: 65:ce:50:d6:7f:2e:6b:a4:77:f0:0c:19:d9:e7:c2: 13:15:3a:0a:cc:40:8b:c2:9f:cb:2a:db:e6:38:c9: 2d:a4:ce:fa:ac:f1:dc:19:ef:8e:32:e3:6b:42:d7: 1d:d2:37:d6:22:20:06:9e:e5:7a:10:19:af:19:f3: 3f:42:a4:dd:14:46:35:40:90:df:0d:d3:6b:19:ef: 0d:18:f4:a0:83:10:c3:7d:f0:67:2d:67:3c:a0:e8: ab:bf:c8:95:12:54:72:78:68:58:3c:85:54:6b:12: cb:b7:46:78:a7:a1:a8:00:f2:74:db:48:64:35:d6: 62:22:1e:e4:47:e3:fc:55:b9:c4:40:a0:6b:76:c1: 00:74:92:b6:20:1e:20:e6:54:00:c5:69:09:85:eb: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:2b:8a:17:a4:6f:04:41:4a:03:14:d8:bf:e7:62:e8:f7:1e: a2:66:0e:8a:b3:8a:a9:db:f7:c8:8c:3e:d7:fd:58:02:a4:e9: 04:82:a6:7f:d6:95:d2:ed:49:c6:2a:9a:f1:5d:78:01:aa:74: ed:f1:2b:8b:67:94:9c:14:5f:c0:ab:04:ef:20:2e:d9:2e:29: 59:5a:62:50:ea:81:93:b2:dc:23:d1:6a:70:83:04:7c:d8:10: 4a:f2:5d:8c:41:53:6d:1d:1e:6a:3d:c3:dc:06:2b:d2:dd:b8: af:83:d1:1f:bf:52:91:56:c5:9b:d3:35:5e:a4:20:3d:0a:44: 76:7e:b1:c9:f9:22:a1:e5:96:53:04:46:c8:fe:b3:b6:9d:3d: 74:71:9f:7d:94:98:bd:41:6d:c1:25:bd:4b:77:3d:50:cb:49: 10:46:86:9d:57:65:61:cc:a9:4b:29:21:a6:d9:b0:f3:6a:f5: 7f:9c:97:4a:15:c9:33:9a:f4:b8:3d:ef:05:fa:80:f0:0a:b9: 70:ae:2b:33:e5:ff:0a:9f:1b:ce:50:ab:02:3d:41:3b:6f:cf: 8e:63:f4:3e:6a:0c:01:d2:d1:32:d1:53:ee:67:48:d5:b0:84: 59:23:fd:50:85:9f:b1:6d:5f:12:b6:c1:3a:56:04:7b:1a:04: 4c:97:24:60 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA3MTk0NTU0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1RTEzMTExMC8GA1UEBRMoMDA1NzA0NDAzQjk1RTU4RDhDNEU3MUJG MTUzREEzRjI2NEE5ODY1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANewvR6PysbQgqalJsnGC/5RCKyWMRlSD3hqGVfiT3feO7NKFKvdO2Xhvrh1oVBE lAebXBUXzt+ZQjGRXKaTxdXvYX660h1/rgFT0j1+NGsUHUvP19tbghxPZkwNf83l toGItlLSLZ0eZc5Q1n8ua6R38AwZ2efCExU6CsxAi8Kfyyrb5jjJLaTO+qzx3Bnv jjLja0LXHdI31iIgBp7lehAZrxnzP0Kk3RRGNUCQ3w3TaxnvDRj0oIMQw33wZy1n PKDoq7/IlRJUcnhoWDyFVGsSy7dGeKehqADydNtIZDXWYiIe5Efj/FW5xECga3bB AHSStiAeIOZUAMVpCYXryNECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQAVwRAO5Xl jYxOcb8VPaPyZKmGXDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUxMzEvNUQ0RTU0MUNCQzEyMTFGMEFFRkI2MDdCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVFMTMxLzVENEU1NDFDQkMxMjExRjBBRUZCNjA3QkM0RjlBRTAyL0FGY0VRRHVW NVkyTVRuR19GVDJqOG1TcGhsdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8RTANBgkqhkiG9w0BAQsFAAOCAQEAbSuKF6RvBEFKAxTYv+di 6PceomYOirOKqdv3yIw+1/1YAqTpBIKmf9aV0u1Jxiqa8V14Aap07fEri2eUnBRf wKsE7yAu2S4pWVpiUOqBk7LcI9FqcIMEfNgQSvJdjEFTbR0eaj3D3AYr0t24r4PR H79SkVbFm9M1XqQgPQpEdn6xyfkioeWWUwRGyP6ztp09dHGffZSYvUFtwSW9S3c9 UMtJEEaGnVdlYcypSykhptmw82r1f5yXShXJM5r0uD3vBfqA8Aq5cK4rM+X/Cp8b zlCrAj1BO2/PjmP0PmoMAdLRMtFT7mdI1bCEWSP9UIWfsW1fErbBOlYEexoETJck YA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:35 2025 by rpki-client