This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer (raw, json) Hash identifier: DxzxQ7RB2h80IJ4+SJs/DW86rlm3I5mNHf2HD64wHoA= Subject key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F02 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 16:52:29 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.107.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28418 (0x6f02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 27 16:52:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:32:a8:fa:65:ed:69:d3:67:83:27:15:e1: d1:21:8e:25:d4:90:af:6e:df:e9:eb:c6:94:9d:0d: 81:6c:7e:6b:70:50:eb:0c:e8:1e:0f:c9:bb:80:a5: 5e:56:d2:53:f1:64:c2:3d:3f:10:aa:88:5c:25:74: 49:35:1d:d7:9f:03:77:5f:57:71:0a:76:fd:5d:76: 0b:5f:c5:2f:e3:0c:b7:41:a4:8c:2c:d6:6f:b4:1a: c0:ad:59:72:84:f2:ca:84:37:c8:30:f6:99:5a:87: 75:1d:25:af:a7:53:a6:7a:5f:b2:64:f5:b1:e3:57: 59:02:f5:f7:f7:eb:0b:74:e8:84:90:c6:bf:96:41: 89:00:c3:e4:dd:17:3c:cf:01:84:9b:88:67:ef:c4: 42:04:64:98:d4:d9:05:e3:8b:70:1e:79:3b:96:27: ee:35:71:0c:eb:6c:3b:88:2b:0f:e4:1b:7a:f7:0e: ef:41:8a:94:a1:86:5c:78:16:d6:5e:09:a3:16:8d: 24:8d:4d:f2:6f:dc:ef:4d:5d:8b:81:f0:cb:2e:07: 86:bf:1f:6e:37:9b:29:44:4c:2f:17:64:61:fd:d6: da:44:e3:78:25:02:36:5a:e9:60:be:6d:d1:85:79: c9:49:ab:65:18:5e:8a:1e:31:9c:95:08:61:d1:b5: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.107.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:72:7b:37:19:81:60:b0:36:40:09:90:5d:d4:97:65:ba:81: 37:b5:14:1d:bd:dc:96:5f:90:7a:a9:0d:2f:49:cd:b7:4b:b4: 98:a6:aa:29:f9:13:53:d3:c4:1f:a1:74:00:80:ba:df:c7:10: 39:df:95:c9:24:69:cc:33:bb:dd:50:80:36:d1:02:01:f0:47: 63:b1:4c:2e:6f:16:8b:af:b1:fc:ba:40:7e:64:81:ff:c4:32: 12:5f:e3:6a:8b:5f:eb:72:41:e3:f0:d7:a7:74:56:51:e3:14: 84:f5:a3:4a:7f:29:c8:60:12:e7:5d:e6:e9:bb:bc:9c:bb:56: 67:b5:e6:a0:a8:45:b9:a8:11:78:5e:9e:8a:82:51:d0:5f:00: 33:36:92:4d:aa:cc:cb:6e:e5:10:c7:ea:99:2c:20:fe:0c:85: dd:e0:08:93:35:e7:83:5f:a4:27:7c:d1:b7:2d:67:25:17:23: ae:eb:ca:e3:4b:92:07:36:dc:a1:76:32:3b:7e:24:64:c8:bf: 93:40:fb:a2:9d:da:5b:fe:4f:d7:bb:64:84:1a:e2:f1:fb:05: 0e:d2:9f:18:19:e0:c0:bf:1d:67:05:04:25:87:e7:af:cf:ab: eb:c0:3d:0d:58:6b:4c:98:fa:a6:44:2c:85:a5:c1:ea:b8:9e: 2a:d5:ea:1a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI3MTY1MjI5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlF RjI2QkVENzE2NjlFOEQ4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALM6Mqj6Ze1p02eDJxXh0SGOJdSQr27f6evGlJ0NgWx+a3BQ6wzoHg/Ju4ClXlbS U/Fkwj0/EKqIXCV0STUd158Dd19XcQp2/V12C1/FL+MMt0GkjCzWb7QawK1ZcoTy yoQ3yDD2mVqHdR0lr6dTpnpfsmT1seNXWQL19/frC3TohJDGv5ZBiQDD5N0XPM8B hJuIZ+/EQgRkmNTZBeOLcB55O5Yn7jVxDOtsO4grD+QbevcO70GKlKGGXHgW1l4J oxaNJI1N8m/c701di4Hwyy4Hhr8fbjebKURMLxdkYf3W2kTjeCUCNlrpYL5t0YV5 yUmrZRheih4xnJUIYdG12ScCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQXHt0/d4Xg 9ThVb57ya+1xZp6NjDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYzNjMvQjU2MDBBRUNBRkFDMTFFRkI4ODZENjUxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg2MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VG NFBVNFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKD6azANBgkqhkiG9w0BAQsFAAOCAQEAjHJ7NxmBYLA2QAmQXdSX ZbqBN7UUHb3cll+QeqkNL0nNt0u0mKaqKfkTU9PEH6F0AIC638cQOd+VySRpzDO7 3VCANtECAfBHY7FMLm8Wi6+x/LpAfmSB/8QyEl/jaotf63JB4/DXp3RWUeMUhPWj Sn8pyGAS513m6bu8nLtWZ7XmoKhFuagReF6eioJR0F8AMzaSTarMy27lEMfqmSwg /gyF3eAIkzXng1+kJ3zRty1nJRcjruvK40uSBzbcoXYyO34kZMi/k0D7op3aW/5P 17tkhBri8fsFDtKfGBngwL8dZwUEJYfnr8+r68A9DVhrTJj6pkQshaXB6rieKtXq Gg== -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:01 2025 by rpki-client