This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer File: EKxjBm6avEIqxfRaInENUC6-Qsg.cer (raw, json) Hash identifier: 5DrmPGP3ehIotkMrQnWtxw+KMer0rbSaiqyvDv3tKls= Subject key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F69 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 18:36:14 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.92.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28521 (0x6f69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 18:36:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:cf:ef:d1:e6:e6:83:bf:64:90:4a:f3:1e: 09:0d:45:1d:85:93:bb:4f:76:b1:39:a0:06:24:6c: bb:ed:95:4f:dd:01:82:4b:cb:dd:b1:0c:83:97:12: 87:47:54:57:c0:60:17:de:f9:d1:c6:d0:4f:db:55: 32:2c:61:b8:1c:b4:00:3a:2a:6f:f6:d4:22:af:db: c1:85:e0:c2:f3:25:33:a5:72:30:c6:01:e9:ff:e3: 0e:ce:f2:df:56:47:2b:a4:0e:a3:e1:1f:51:4f:4e: 00:97:d2:e0:d6:d2:4b:84:74:59:e5:4f:7f:7e:ae: 16:52:8f:e0:16:bc:91:b7:4d:d9:c6:e8:eb:91:49: de:fc:cd:c6:a6:d6:f1:aa:40:9f:b9:91:8d:11:ab: 5e:6e:b6:a8:11:03:9c:d6:34:a0:80:17:88:ad:51: d0:26:9d:29:b8:19:0f:4c:ac:a0:7b:e8:29:d5:92: 92:a4:63:81:6f:38:a2:dc:e3:e4:f3:72:07:74:f7: d8:49:a0:57:57:80:a2:5a:42:bd:fb:9e:57:8b:98: f1:a4:20:db:ca:09:59:36:e1:6f:2d:72:0e:8a:c6: 96:04:aa:b8:14:5e:a2:90:55:8b:5e:29:bb:41:17: 15:28:ca:23:0f:96:2c:c3:b1:28:f3:98:1c:83:d6: 79:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.92.0/23 Signature Algorithm: sha256WithRSAEncryption 10:1a:d4:61:16:8f:93:87:96:da:0e:c1:62:fd:87:a6:e3:38: 16:d4:b5:64:20:20:ba:ec:51:5d:07:2c:47:94:fd:20:d2:1d: 32:8b:19:c2:c3:b1:b1:df:f3:49:50:cb:9c:ea:fc:6f:51:2f: 44:fd:1b:06:c0:76:4e:bf:2f:5b:55:75:bc:d8:84:37:7c:4a: 92:20:7c:8e:05:25:64:e3:d3:41:73:03:65:3d:83:98:08:3f: 4b:eb:4a:f4:93:e0:26:76:d3:6d:e7:60:93:d7:02:d9:6e:0b: 71:b1:f0:78:16:89:be:87:38:71:f1:09:7a:f9:ef:d8:3a:db: d9:7a:c0:f2:35:95:da:ab:ce:31:d9:8b:d3:b7:5f:9c:04:d2: 40:0d:eb:b5:37:dd:8c:f6:ed:f3:8f:da:a9:b4:e0:86:03:ca: a1:21:0b:ad:eb:5a:54:d5:8f:c4:86:d6:23:3c:20:ec:75:5e: cc:50:e7:61:76:bd:6d:63:6d:0d:9b:fa:be:52:28:53:13:03: 93:78:5e:53:bf:ee:b1:59:23:9a:28:13:5b:99:b8:cd:c6:93: fd:bf:1a:96:8d:13:b0:b0:64:d1:64:58:a5:e5:8d:32:8f:5a: 4d:42:eb:81:fc:dc:5f:76:9a:f5:0a:52:f2:33:06:6b:0a:b0: 64:19:ed:ef -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTgzNjE0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVB MjI3MTBENTAyRUJFNDJDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMgFz+/R5uaDv2SQSvMeCQ1FHYWTu092sTmgBiRsu+2VT90BgkvL3bEMg5cSh0dU V8BgF9750cbQT9tVMixhuBy0ADoqb/bUIq/bwYXgwvMlM6VyMMYB6f/jDs7y31ZH K6QOo+EfUU9OAJfS4NbSS4R0WeVPf36uFlKP4Ba8kbdN2cbo65FJ3vzNxqbW8apA n7mRjRGrXm62qBEDnNY0oIAXiK1R0CadKbgZD0ysoHvoKdWSkqRjgW84otzj5PNy B3T32EmgV1eAolpCvfueV4uY8aQg28oJWTbhby1yDorGlgSquBReopBVi14pu0EX FSjKIw+WLMOxKPOYHIPWebECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQQrGMGbpq8 QirF9FoicQ1QLr5CyDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdENUIvNzk4MzM4NUE2OTJFMTFGMEJEMEY2ODE5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3RDVCLzc5ODMzODVBNjkyRTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZh dkVJcXhmUmFJbkVOVUM2LVFzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6XDANBgkqhkiG9w0BAQsFAAOCAQEAEBrUYRaPk4eW2g7BYv2H puM4FtS1ZCAguuxRXQcsR5T9INIdMosZwsOxsd/zSVDLnOr8b1EvRP0bBsB2Tr8v W1V1vNiEN3xKkiB8jgUlZOPTQXMDZT2DmAg/S+tK9JPgJnbTbedgk9cC2W4LcbHw eBaJvoc4cfEJevnv2Drb2XrA8jWV2qvOMdmL07dfnATSQA3rtTfdjPbt84/aqbTg hgPKoSELretaVNWPxIbWIzwg7HVezFDnYXa9bWNtDZv6vlIoUxMDk3heU7/usVkj migTW5m4zcaT/b8alo0TsLBk0WRYpeWNMo9aTULrgfzcX3aa9QpS8jMGawqwZBnt 7w== -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:05 2025 by rpki-client