This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer File: F6I2W2QK2rIDQznh5f80TkeLWJg.cer (raw, json) Hash identifier: cV3rxedJDG3MailwyRtiqjmRYuMsCZd8hkJzfRqT7sc= Subject key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E52 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 12:15:56 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 160.187.215.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28242 (0x6e52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 18 12:15:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:54:ea:04:a1:3a:47:ef:8d:63:ef:bf:97: b9:84:ba:ba:eb:08:8f:9f:f4:3c:5b:c1:07:7b:de: 0e:bb:c4:a6:ad:5a:db:1b:0b:60:12:83:35:32:8d: 6e:5d:34:3d:3b:8f:67:b8:06:af:ce:12:59:01:5f: a1:57:5c:f7:a1:b2:13:f1:01:36:86:24:4a:c9:f2: 2f:fa:c4:26:b7:3a:ab:46:ab:a5:60:b4:5f:9b:b9: 11:58:0b:b4:04:8a:cf:c0:ab:11:b5:ba:fe:0e:f0: 2b:bc:ce:e5:d5:6f:39:29:55:b2:db:6f:97:88:33: bb:f0:33:9f:9a:37:97:5a:c4:e5:ed:87:62:d3:02: ab:8c:2a:d8:8c:22:37:1f:75:6e:69:f6:b4:ff:95: ee:27:92:43:db:36:de:f1:05:c6:26:8d:69:d2:51: 46:19:5c:eb:62:58:63:ff:70:01:20:36:6a:d1:de: c7:e9:e3:27:34:b3:c9:e7:e9:66:73:fa:49:82:0a: fd:52:45:a0:de:96:74:ec:2b:01:25:b7:2f:b8:e3: e9:d9:12:37:11:8e:09:a5:d2:4b:e9:0d:0e:48:20: 76:49:16:29:71:d5:0e:f1:53:35:ff:15:11:4b:ac: ba:38:b8:b8:54:3d:77:2a:0e:fb:ee:ce:e9:b6:68: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.215.0/24 Signature Algorithm: sha256WithRSAEncryption a0:4b:35:d4:de:58:98:dd:f2:f5:6c:fb:9f:56:df:c0:89:38: a4:39:2c:63:b9:9f:57:2f:40:54:0b:3a:d9:cd:73:f0:00:0b: b7:6f:5a:e4:57:ad:e3:78:a5:2d:f6:8b:05:98:9f:cb:59:93: 02:c7:84:af:fd:14:42:06:3d:a8:8a:ae:af:62:8b:5e:56:22: 89:25:fa:38:a8:67:00:28:f6:27:16:7a:e4:ef:a3:d1:4b:d6: 65:9a:73:a5:e7:68:31:8d:d3:61:30:86:2a:b4:63:30:ed:9c: b4:03:7b:ef:73:a0:17:ff:1a:f3:c2:5e:2c:81:50:94:af:8e: 73:51:c1:13:a1:cd:a7:44:2d:14:49:15:0e:f2:27:97:52:e7: 2f:50:45:74:08:a5:1a:73:4c:23:c0:91:9e:03:a8:77:42:93: 90:3c:e5:49:2a:d5:10:a8:ca:e7:3d:ae:e0:a0:b5:ab:14:4f: b5:e2:be:06:6f:ad:6c:b0:d2:bd:d9:79:e8:b3:65:ef:34:b5: 76:b5:76:42:96:d3:34:3b:9e:c5:ea:50:eb:11:6d:73:fd:26: ff:12:24:41:cf:fa:04:de:c0:30:51:7c:a1:6a:99:ea:f1:5d: ab:b2:90:40:d5:10:cb:f9:09:0c:f8:b0:d2:4a:68:f7:98:0d: f1:f9:64:07 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICblIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE4MTIxNTU2WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFMUJCMDExMC8GA1UEBRMoMTdBMjM2NUI2NDBBREFCMjAzNDMzOUUx RTVGRjM0NEU0NzhCNTg5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJYaVOoEoTpH741j77+XuYS6uusIj5/0PFvBB3veDrvEpq1a2xsLYBKDNTKNbl00 PTuPZ7gGr84SWQFfoVdc96GyE/EBNoYkSsnyL/rEJrc6q0arpWC0X5u5EVgLtASK z8CrEbW6/g7wK7zO5dVvOSlVsttvl4gzu/Azn5o3l1rE5e2HYtMCq4wq2IwiNx91 bmn2tP+V7ieSQ9s23vEFxiaNadJRRhlc62JYY/9wASA2atHex+njJzSzyefpZnP6 SYIK/VJFoN6WdOwrASW3L7jj6dkSNxGOCaXSS+kNDkggdkkWKXHVDvFTNf8VEUus uji4uFQ9dyoO++7O6bZoQ50CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQXojZbZAra sgNDOeHl/zROR4tYmDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTFCQjAvNTNFREI0RDBDNDc4MTFGMDg1Mzg1MDI1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxQkIwLzUzRURCNEQwQzQ3ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFL MnJJRFF6bmg1ZjgwVGtlTFdKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC71zANBgkqhkiG9w0BAQsFAAOCAQEAoEs11N5YmN3y9Wz7n1bf wIk4pDksY7mfVy9AVAs62c1z8AALt29a5Fet43ilLfaLBZify1mTAseEr/0UQgY9 qIqur2KLXlYiiSX6OKhnACj2JxZ65O+j0UvWZZpzpedoMY3TYTCGKrRjMO2ctAN7 73OgF/8a88JeLIFQlK+Oc1HBE6HNp0QtFEkVDvInl1LnL1BFdAilGnNMI8CRngOo d0KTkDzlSSrVEKjK5z2u4KC1qxRPteK+Bm+tbLDSvdl56LNl7zS1drV2QpbTNDue xepQ6xFtc/0m/xIkQc/6BN7AMFF8oWqZ6vFdq7KQQNUQy/kJDPiw0kpo95gN8flk Bw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:31 2025 by rpki-client