This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer File: EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer (raw, json) Hash identifier: 3Hdw7sLhofF6dpWU1czyFEXSTUCLduKBrzJ6bd4xJA8= Subject key identifier: 11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F70 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 03:01:22 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.58.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28528 (0x6f70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 3 03:01:22 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91F1451, serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:4f:0b:26:c8:f8:bd:2d:53:df:b4:c5:d2: 00:5f:19:db:78:e7:f9:cc:85:78:cf:d3:b3:13:ce: 36:48:05:dc:e6:df:82:39:95:ef:99:02:7a:12:ca: f4:0b:47:b2:ea:94:69:05:89:e7:b0:03:eb:34:aa: a9:c5:02:4a:c2:fc:74:d9:b1:d4:0f:a7:28:c5:0a: 26:ef:1a:30:ff:87:07:5a:c2:87:75:1a:12:3e:25: ea:a3:34:31:91:04:10:e8:e9:64:8f:ce:a8:9c:01: 76:e0:9d:e5:58:7f:6b:e7:a7:0d:b0:95:60:51:e6: 47:bb:85:c9:f9:b3:f1:86:67:23:3e:b4:27:09:5c: e5:c7:3f:3b:08:1c:cf:9a:c4:79:7e:76:6c:75:d3: e2:9c:7d:91:84:83:37:90:cc:66:30:9a:64:96:da: a0:f4:9f:05:35:f7:78:ed:ce:ff:ce:dc:ef:28:b5: e5:41:14:1c:72:c6:30:8c:fb:59:ad:11:fd:ba:c7: 0a:2f:8a:55:f9:da:1b:bb:0e:1e:8a:dc:11:2d:21: d8:30:38:bf:12:6b:f2:8e:b2:52:bb:7e:a8:4e:32: 9e:ec:5c:ee:bd:b4:f2:c0:be:25:7b:f6:c3:21:50: dd:56:16:de:43:f5:d7:97:99:ab:14:20:78:15:81: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.58.0/23 Signature Algorithm: sha256WithRSAEncryption 64:68:87:e8:21:87:b2:35:94:1a:de:58:57:43:8b:73:e7:6b: 79:0c:d5:30:3c:17:5c:9d:a8:8d:9a:33:07:5f:b1:1b:ce:42: 53:76:3b:a2:ae:02:c2:90:f6:fe:91:98:53:cc:1b:57:66:40: 3c:f2:60:41:f6:31:93:b9:a8:1c:70:a2:54:53:ea:0a:a2:e7: ee:f4:a5:f1:13:c5:df:84:9a:be:fc:43:dd:73:1d:a7:66:6f: df:8f:18:6d:7f:d2:31:59:cc:b9:da:34:7e:d4:d1:7e:c3:68: e3:17:79:65:63:23:fb:7f:1c:38:54:72:d8:d7:94:c1:69:d2: cd:e9:f0:6b:bf:ce:ba:b6:0a:05:52:34:89:a6:06:ab:39:8d: 1f:91:99:23:f7:87:12:c6:e2:83:32:e9:7d:6b:47:8a:b8:86: 4b:82:47:e5:cf:23:d6:0d:b2:05:ad:e1:7d:3f:1e:3d:a6:bd: 27:40:11:0c:f3:c2:7b:a1:90:bd:e9:d1:68:5b:a1:ff:51:b0: 2d:ee:68:a5:81:53:29:e7:27:1b:ef:e7:bc:1a:c4:dc:a1:f5: 03:bb:ff:b8:3f:1d:19:8a:1e:7b:a5:f8:28:ab:c6:9b:4f:f4: 92:ce:13:cc:c1:5f:f8:0d:62:89:45:23:c8:60:cd:fa:d3:2e: ea:6f:6d:ee -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAzMDMwMTIyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGMTQ1MTExMC8GA1UEBRMoMTE1MzQwN0VFMEJGQjA2MjcxM0M1QkZF NkZCODIyRTEzQjMzRTAxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALc1TwsmyPi9LVPftMXSAF8Z23jn+cyFeM/TsxPONkgF3ObfgjmV75kCehLK9AtH suqUaQWJ57AD6zSqqcUCSsL8dNmx1A+nKMUKJu8aMP+HB1rCh3UaEj4l6qM0MZEE EOjpZI/OqJwBduCd5Vh/a+enDbCVYFHmR7uFyfmz8YZnIz60Jwlc5cc/Owgcz5rE eX52bHXT4px9kYSDN5DMZjCaZJbaoPSfBTX3eO3O/87c7yi15UEUHHLGMIz7Wa0R /brHCi+KVfnaG7sOHorcES0h2DA4vxJr8o6yUrt+qE4ynuxc7r208sC+JXv2wyFQ 3VYW3kP115eZqxQgeBWBt88CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQRU0B+4L+w YnE8W/5vuCLhOzPgEzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0NTEvNTZFRjY4MkNDRkY0MTFGMEFCRjk3QTNGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYxNDUxLzU2RUY2ODJDQ0ZGNDExRjBBQkY5N0EzRkM0RjlBRTAyL0VWTkFmdUNf c0dKeFBGdi1iN2dpNFRzejRCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPOjANBgkqhkiG9w0BAQsFAAOCAQEAZGiH6CGHsjWUGt5YV0OL c+dreQzVMDwXXJ2ojZozB1+xG85CU3Y7oq4CwpD2/pGYU8wbV2ZAPPJgQfYxk7mo HHCiVFPqCqLn7vSl8RPF34SavvxD3XMdp2Zv348YbX/SMVnMudo0ftTRfsNo4xd5 ZWMj+38cOFRy2NeUwWnSzenwa7/OurYKBVI0iaYGqzmNH5GZI/eHEsbigzLpfWtH iriGS4JH5c8j1g2yBa3hfT8ePaa9J0ARDPPCe6GQvenRaFuh/1GwLe5opYFTKecn G+/nvBrE3KH1A7v/uD8dGYoee6X4KKvGm0/0ks4TzMFf+A1iiUUjyGDN+tMu6m9t 7g== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:34 2025 by rpki-client