This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer File: D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer (raw, json) Hash identifier: VKlQ52JVgEQREdHyNDPUVUGGbLhAY5tDXLlYZ09UzCA= Subject key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E70 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft caRepository: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 13:48:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.224.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28272 (0x6e70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 19 13:48:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:23:04:3a:ab:86:ac:39:cd:2a:25:ce:1b: 7d:64:4a:e3:64:dd:c5:6c:cc:bf:6a:1f:00:36:30: 5e:0f:6a:65:e1:9e:f7:78:f6:0b:d1:4f:02:89:2d: df:34:de:cf:00:d3:dd:ea:d2:08:5d:a7:4a:ea:8e: f4:a7:3b:65:04:41:85:29:a5:72:44:c6:5c:2e:06: 0b:78:84:fa:6c:f7:80:d1:d0:8e:49:6f:53:77:89: 28:f2:4e:7c:de:a4:44:b0:de:46:37:34:25:a3:6c: 64:9e:20:77:0d:19:7a:07:ff:3c:ab:a2:52:7b:08: 71:86:39:66:f2:af:9c:91:b7:0f:d0:d0:d3:73:cf: 08:e1:de:03:f4:1c:d1:02:ae:7c:5a:13:54:33:bb: 6d:23:2b:44:18:f7:cf:53:a7:11:37:09:f5:d5:df: fb:d5:e6:ca:46:7a:d1:97:0b:4f:c4:54:e6:fb:b3: 75:6c:c1:ea:a0:9f:31:a3:9b:45:13:e7:75:38:9f: 9a:8f:84:bf:5d:a7:ac:f4:f2:48:cb:82:53:20:27: 88:d4:fd:8d:72:06:cb:61:35:47:79:bf:5e:44:71: 05:64:bf:d5:ef:4a:0f:be:1f:19:c3:42:16:82:ab: a2:63:25:93:d6:87:23:05:ea:c3:91:57:af:af:22: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.224.0/23 Signature Algorithm: sha256WithRSAEncryption 10:93:72:4f:1c:9f:91:c0:22:61:7a:6f:91:07:d1:36:d0:cf: 14:d4:98:1e:17:00:01:a3:6f:14:68:a7:a3:b0:21:9e:ec:17: 5d:aa:38:8d:03:18:27:a7:12:27:33:f4:d3:b9:fb:f3:28:f2: a6:96:44:bf:67:c4:b6:d7:79:f4:00:7a:9c:3a:6e:63:14:3e: 41:95:ed:bd:c1:a6:6d:36:a4:12:30:b0:ff:e6:67:fa:ab:64: e5:1c:5a:9b:72:72:f8:9c:49:95:fc:6b:a3:24:34:33:2e:10: b1:98:1b:13:57:18:35:22:9b:f0:b6:ec:4c:98:46:44:4f:a1: 06:cb:37:c0:a4:9c:33:e6:cc:a9:06:48:05:ae:41:73:d0:80: 31:05:f7:77:4d:e4:4d:c3:c3:9f:90:56:82:b2:be:15:e3:f5: 8c:ce:52:38:c2:54:ae:b3:65:1b:a1:6b:e2:a7:54:11:99:27: 8c:50:5f:e7:da:31:e0:5b:c4:84:9c:ee:56:eb:4d:17:e5:f4: e3:3d:d3:69:ef:fd:63:71:55:9f:4b:9a:9e:2c:cf:08:31:59: 9d:74:89:ca:0a:6f:ea:f6:49:bd:78:0b:0b:97:ed:0b:3f:63: e8:1f:ef:e3:20:e6:6c:02:b9:f7:9a:38:75:db:c7:94:eb:ed: 6b:f7:20:a1 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE5MTM0ODEyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4MzA2RjExMC8GA1UEBRMoMEY1MzIwOTZFN0Y1OERFNDAxRjI2NTA3 NkRFRkI1QzgyRTcxRjNFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKAnIwQ6q4asOc0qJc4bfWRK42TdxWzMv2ofADYwXg9qZeGe93j2C9FPAokt3zTe zwDT3erSCF2nSuqO9Kc7ZQRBhSmlckTGXC4GC3iE+mz3gNHQjklvU3eJKPJOfN6k RLDeRjc0JaNsZJ4gdw0Zegf/PKuiUnsIcYY5ZvKvnJG3D9DQ03PPCOHeA/Qc0QKu fFoTVDO7bSMrRBj3z1OnETcJ9dXf+9XmykZ60ZcLT8RU5vuzdWzB6qCfMaObRRPn dTifmo+Ev12nrPTySMuCUyAniNT9jXIGy2E1R3m/XkRxBWS/1e9KD74fGcNCFoKr omMlk9aHIwXqw5FXr68irYkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQPUyCW5/WN 5AHyZQdt77XILnHz4jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODMwNkYvNjFDMjY4RDZDNTRFMTFGMDg4NTg0Rjg2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgzMDZGLzYxQzI2OEQ2QzU0RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYx amVRQjhtVUhiZS0xeUM1eDgtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr84DANBgkqhkiG9w0BAQsFAAOCAQEAEJNyTxyfkcAiYXpvkQfR NtDPFNSYHhcAAaNvFGino7AhnuwXXao4jQMYJ6cSJzP007n78yjyppZEv2fEttd5 9AB6nDpuYxQ+QZXtvcGmbTakEjCw/+Zn+qtk5Rxam3Jy+JxJlfxroyQ0My4QsZgb E1cYNSKb8LbsTJhGRE+hBss3wKScM+bMqQZIBa5Bc9CAMQX3d03kTcPDn5BWgrK+ FeP1jM5SOMJUrrNlG6Fr4qdUEZknjFBf59ox4FvEhJzuVutNF+X04z3Tae/9Y3FV n0uanizPCDFZnXSJygpv6vZJvXgLC5ftCz9j6B/v4yDmbAK595o4ddvHlOvta/cg oQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:30 2025 by rpki-client