This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer File: EW_4Kqydd_b_IWNo9ANGAPCzQY8.cer (raw, json) Hash identifier: r6c/wu0XqQqb4B7xV73/KU351ukRUOC0s8SNgPBTq/w= Subject key identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F13 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 29 Nov 2025 00:54:48 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.24.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28435 (0x6f13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 29 00:54:48 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A0807, serialNumber=116FF82AAC9D77F6FF216368F4034600F0B3418F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:64:76:f1:ed:c7:98:bb:8e:9f:13:09:dc: 6a:85:87:4b:2f:bc:bb:2c:c7:54:d6:9f:7c:83:d0: b8:52:86:c5:b3:89:61:c3:3e:1c:79:40:55:6e:cb: 72:51:c0:96:d5:8f:b8:ed:eb:04:a5:1c:5f:dd:49: e8:46:cc:03:88:69:76:c2:05:e8:32:f2:80:5b:14: 20:02:ae:58:56:81:bb:ff:a8:70:a9:3b:e8:3e:11: 02:92:0a:14:02:9e:d6:2e:32:51:3e:b9:fa:f7:15: 5f:52:c4:12:7d:f3:94:d3:ec:bc:29:c5:bc:d3:61: 79:68:33:98:2b:20:a6:df:27:c7:8e:6c:a0:cc:f1: 34:c8:18:44:24:1c:92:93:16:15:18:02:77:c8:ca: 8b:20:f2:fb:87:d0:82:ec:51:89:5f:df:db:71:b9: 74:2b:f0:c6:b5:d9:e8:c9:e7:49:d5:d8:64:30:12: 1b:2f:1a:04:35:ed:b5:1f:e2:61:14:86:93:fc:47: dd:74:e3:b6:7c:61:81:01:a1:0e:e9:04:13:e2:a0: 91:ee:dd:8f:e0:ec:b3:ed:df:08:13:1e:d1:e3:57: ca:7c:42:39:20:c2:48:1f:33:60:5d:35:02:7a:82: 33:af:5a:e0:c9:a3:88:fa:cc:ea:04:61:cd:0b:2e: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:F8:2A:AC:9D:77:F6:FF:21:63:68:F4:03:46:00:F0:B3:41:8F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A0807/FF0A52F4CCBD11F0840DDC22C4F9AE02/EW_4Kqydd_b_IWNo9ANGAPCzQY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.24.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e0:bd:e8:60:8a:1a:7a:e0:3b:34:07:d7:03:69:ba:4d:2b: 74:36:e5:fe:b6:13:67:f6:34:14:d2:04:b8:e0:37:a9:8b:c8: c9:fd:71:53:0c:bd:dd:63:80:92:9f:ee:31:88:44:a0:21:51: 5b:0b:78:2d:e7:08:1c:50:22:16:bd:15:02:20:e1:16:53:51: cc:f1:39:7e:87:59:24:c8:cc:75:3c:1a:b8:33:81:a3:fd:c3: 09:c1:70:a6:d6:d9:73:0e:06:3b:4b:91:bb:96:a2:ac:f7:84: d7:ed:35:84:46:03:5b:84:29:cf:41:54:e7:e7:a4:cd:6a:15: d6:38:74:e4:c6:52:ff:6e:58:72:07:d0:b8:f1:a3:b6:d7:70: 91:91:37:f4:62:dc:39:bf:13:16:b8:7c:14:f0:98:68:04:d5: 01:a9:81:27:8c:43:67:4b:51:8e:01:2f:20:83:4b:fc:bc:c0: 27:0f:bc:e4:09:17:df:04:61:56:65:59:97:ad:48:be:e1:6d: f8:67:3d:3d:44:5c:1d:07:c3:f6:56:c0:8c:2d:45:90:97:66: 33:c6:7b:dd:4f:a2:b3:4a:f7:13:9d:d0:b1:61:da:4b:04:d9: 68:d3:05:41:5d:34:b3:6b:60:da:ea:73:60:2e:32:2a:4b:50: 87:1e:f5:ab -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI5MDA1NDQ4WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBMDgwNzExMC8GA1UEBRMoMTE2RkY4MkFBQzlENzdGNkZGMjE2MzY4 RjQwMzQ2MDBGMEIzNDE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALaYZHbx7ceYu46fEwncaoWHSy+8uyzHVNaffIPQuFKGxbOJYcM+HHlAVW7LclHA ltWPuO3rBKUcX91J6EbMA4hpdsIF6DLygFsUIAKuWFaBu/+ocKk76D4RApIKFAKe 1i4yUT65+vcVX1LEEn3zlNPsvCnFvNNheWgzmCsgpt8nx45soMzxNMgYRCQckpMW FRgCd8jKiyDy+4fQguxRiV/f23G5dCvwxrXZ6MnnSdXYZDASGy8aBDXttR/iYRSG k/xH3XTjtnxhgQGhDukEE+Kgke7dj+Dss+3fCBMe0eNXynxCOSDCSB8zYF01AnqC M69a4MmjiPrM6gRhzQsuvBECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQRb/gqrJ13 9v8hY2j0A0YA8LNBjzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MDcvRkYwQTUyRjRDQ0JEMTFGMDg0MEREQzIyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEwODA3L0ZGMEE1MkY0Q0NCRDExRjA4NDBEREMyMkM0RjlBRTAyL0VXXzRLcXlk ZF9iX0lXTm85QU5HQVBDelFZOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8GDANBgkqhkiG9w0BAQsFAAOCAQEAK+C96GCKGnrgOzQH1wNp uk0rdDbl/rYTZ/Y0FNIEuOA3qYvIyf1xUwy93WOAkp/uMYhEoCFRWwt4LecIHFAi Fr0VAiDhFlNRzPE5fodZJMjMdTwauDOBo/3DCcFwptbZcw4GO0uRu5airPeE1+01 hEYDW4Qpz0FU5+ekzWoV1jh05MZS/25YcgfQuPGjttdwkZE39GLcOb8TFrh8FPCY aATVAamBJ4xDZ0tRjgEvIINL/LzAJw+85AkX3wRhVmVZl61IvuFt+Gc9PURcHQfD 9lbAjC1FkJdmM8Z73U+is0r3E53QsWHaSwTZaNMFQV00s2tg2upzYC4yKktQhx71 qw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:33 2025 by rpki-client