This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer (raw, json) Hash identifier: v7pYy21lipbQMnhNCJl7myrnJsyOE72HLivOfsoHJhY= Subject key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6ECD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft caRepository: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 03:58:37 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 138.252.4.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28365 (0x6ecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 25 03:58:37 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:a5:a1:67:86:a2:10:cc:71:21:de:a5:08: 69:9f:08:c6:fe:d5:28:e9:a0:76:e5:26:be:3f:e6: 32:8a:75:9f:3d:27:24:40:d0:4e:96:3e:20:bc:92: 88:6e:18:d3:88:49:64:b1:a5:44:b0:1b:df:04:c6: 3a:99:d1:58:75:87:34:05:8c:1d:61:57:00:b8:7c: 81:b3:45:67:a3:2a:25:e9:03:81:94:61:7d:e5:f2: 66:41:8a:64:09:0c:47:43:46:46:55:d1:18:3b:e8: 2d:cf:cc:48:34:8c:f4:e2:76:84:58:27:bd:04:39: df:71:53:68:ff:38:b6:a1:4a:d1:51:e4:fe:df:64: 8d:10:20:2f:d2:f7:37:b6:92:c1:b5:67:b2:2c:1b: 2b:3c:62:f2:d5:c8:f6:bd:c3:ea:05:b2:ca:03:c8: da:9a:8d:75:43:3a:70:f3:36:91:3f:fe:f3:eb:73: fe:58:6f:a7:d6:b2:71:30:20:e3:8f:9c:0e:85:31: 00:07:07:7e:cf:f1:94:9d:a1:43:05:47:0c:b6:bc: 4d:92:f6:bb:89:83:b6:fc:3e:33:7f:de:f0:c7:0b: 1f:84:ff:11:26:58:25:b3:0f:62:f7:81:74:02:64: 42:9f:14:e6:97:6b:43:5e:d0:b1:90:65:14:e2:bd: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.4.0/23 Signature Algorithm: sha256WithRSAEncryption af:a1:d1:44:05:c7:73:a6:5f:bc:f7:bc:1a:aa:88:68:26:d5: 76:90:4f:4b:15:be:3e:9f:4b:bb:83:e9:44:1f:83:12:e7:05: 46:fd:7a:8f:81:c6:54:86:8d:09:b3:d2:df:97:00:8c:69:07: 69:e1:35:6b:45:7c:42:d5:01:f5:9e:5d:bb:58:e1:4c:5e:bf: fd:d9:e7:09:6a:ef:e7:99:f3:80:7f:f2:4a:a5:a2:b3:12:ba: 65:48:d7:99:e5:ad:5c:d6:a7:e2:ad:e6:7b:e4:c5:96:10:88: b9:fa:c2:25:1c:e0:2e:ce:66:ab:12:9e:81:40:8a:f4:e0:f9: 54:dc:90:ef:e4:24:84:24:31:76:0f:78:a4:b0:f1:df:2e:6d: 30:21:f7:74:4d:45:2c:8e:15:04:4b:a8:61:69:73:04:c8:90: a3:25:35:9d:32:46:cf:f9:19:6d:58:cd:4b:3d:77:72:95:06: 10:67:3a:25:bd:e8:0c:a8:9a:60:ec:ce:a1:6b:4a:77:b5:1d: 61:d8:93:d6:be:ad:96:47:e5:63:53:78:6e:38:2d:62:bd:bc: d4:f4:cb:f3:16:c8:c2:05:d7:50:f4:32:c2:9b:11:df:4e:b8: a8:be:35:3d:04:59:3e:fc:52:02:73:e9:b9:ca:4b:b6:83:ce: 55:16:36:40 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI1MDM1ODM3WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2OEY1MDExMC8GA1UEBRMoMUJFQTM4MTE0RTlFRTgyRTQwNjRFQjNC RjkxMzI4MDg2QzM1N0I2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOyBpaFnhqIQzHEh3qUIaZ8Ixv7VKOmgduUmvj/mMop1nz0nJEDQTpY+ILySiG4Y 04hJZLGlRLAb3wTGOpnRWHWHNAWMHWFXALh8gbNFZ6MqJekDgZRhfeXyZkGKZAkM R0NGRlXRGDvoLc/MSDSM9OJ2hFgnvQQ533FTaP84tqFK0VHk/t9kjRAgL9L3N7aS wbVnsiwbKzxi8tXI9r3D6gWyygPI2pqNdUM6cPM2kT/+8+tz/lhvp9aycTAg44+c DoUxAAcHfs/xlJ2hQwVHDLa8TZL2u4mDtvw+M3/e8McLH4T/ESZYJbMPYveBdAJk Qp8U5pdrQ17QsZBlFOK9dlECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQb6jgRTp7o LkBk6zv5EygIbDV7YTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhGNTAvMDMzRUNENzJDOUIzMTFGMEFENjNGQzc4QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY4RjUwLzAzM0VDRDcyQzlCMzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZl NkM1QVpPczctUk1vQ0d3MWUyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8BDANBgkqhkiG9w0BAQsFAAOCAQEAr6HRRAXHc6ZfvPe8GqqI aCbVdpBPSxW+Pp9Lu4PpRB+DEucFRv16j4HGVIaNCbPS35cAjGkHaeE1a0V8QtUB 9Z5du1jhTF6//dnnCWrv55nzgH/ySqWisxK6ZUjXmeWtXNan4q3me+TFlhCIufrC JRzgLs5mqxKegUCK9OD5VNyQ7+QkhCQxdg94pLDx3y5tMCH3dE1FLI4VBEuoYWlz BMiQoyU1nTJGz/kZbVjNSz13cpUGEGc6Jb3oDKiaYOzOoWtKd7UdYdiT1r6tlkfl Y1N4bjgtYr281PTL8xbIwgXXUPQywpsR3064qL41PQRZPvxSAnPpucpLtoPOVRY2 QA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:34 2025 by rpki-client