This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer File: HLlfP3vebhmbdAuSgqxyKk7amZs.cer (raw, json) Hash identifier: zSvqy5aH7psceAs57AqIQGp5/Dq8cLlRHieVGLbQHI8= Subject key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70A7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 05:05:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.184.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28839 (0x70a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 22 05:05:21 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:5d:a3:77:40:13:3a:89:a1:71:d8:b8:4b: ba:60:65:95:b7:54:67:88:33:49:7e:e0:d5:bd:9a: 8d:08:6f:2e:ca:a1:30:6b:dc:e6:91:dd:12:bb:0b: 80:d0:d7:b1:76:00:2a:b6:0b:8a:1a:70:bc:f7:52: 8b:16:48:12:4f:7f:87:9b:19:6a:65:77:d8:80:59: 4c:93:cb:81:53:f0:f9:04:fc:4f:c9:f2:ee:5f:47: 3d:19:b6:ef:73:f0:ad:1b:6f:13:12:d9:0d:d1:8d: c7:80:1e:99:c1:c5:53:5d:53:c9:fb:9e:c4:bc:12: cc:4d:93:2f:00:71:21:83:be:1e:5d:d0:a6:03:f7: fc:60:e9:7c:6e:64:cb:79:07:15:e6:a9:e8:80:03: 74:73:97:96:5c:bc:f1:7e:3e:97:7d:ef:a8:4b:aa: 04:f6:ff:f4:27:42:57:82:55:f4:59:c4:c7:14:dc: d6:5e:4a:05:c1:6f:11:11:c6:f9:4b:03:44:a2:50: 95:3b:26:bb:e6:8e:da:59:bf:5e:13:63:2c:cf:d0: 13:9a:42:65:2d:50:b1:db:c9:c6:27:ac:61:81:5c: d8:bf:f6:24:a5:e4:f6:07:b8:ec:f8:80:a6:40:e4: 46:9e:66:16:01:69:16:7a:51:bd:94:a5:ad:e8:26: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.184.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:a3:1c:44:80:ad:e0:e6:94:87:6a:1f:74:89:1c:47:f0:d7: 41:56:68:09:d2:08:8d:0f:74:d5:87:78:de:31:72:7e:83:b0: dc:20:7f:0b:d8:02:a5:99:24:d6:4f:bf:1c:b4:60:28:2c:5b: af:45:51:5f:13:bc:24:66:b8:b5:77:f5:bf:fc:09:1a:3c:51: 6c:6e:e9:06:bd:b0:5c:e4:fe:63:dd:73:17:3c:97:0e:9a:17: 13:86:73:f6:d2:56:d6:7e:1d:0f:61:9b:2b:a9:23:8b:76:45: d0:56:26:41:ed:48:0a:f1:d6:ff:09:67:bc:3b:c0:18:c0:e1: 75:2e:a0:b3:b0:9e:43:ee:a6:1a:12:94:76:ea:c0:f2:11:c9: 74:a0:16:69:b6:ed:6c:9a:5b:2a:af:5a:5b:fe:2e:8c:a0:8e: 6c:d2:86:de:73:00:b0:9e:b2:3d:b2:b6:2d:be:f8:b4:65:67: ef:e1:10:8b:15:7f:1f:ef:4c:74:b5:a2:86:2e:d0:bc:c7:1f: 3f:6b:31:6c:88:ba:f6:ec:86:6b:f4:f2:a1:5d:41:c1:60:2c: 9b:0d:03:58:50:70:5a:dd:08:c2:15:3a:c1:c9:2f:3e:2a:3e: f7:6c:65:2e:2b:07:3e:24:99:1f:03:26:86:04:5f:a1:99:20: 70:13:52:78 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIyMDUwNTIxWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFNEVFRjExMC8GA1UEBRMoMUNCOTVGM0Y3QkRFNkUxOTlCNzQwQjky ODJBQzcyMkE0RURBOTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMoIXaN3QBM6iaFx2LhLumBllbdUZ4gzSX7g1b2ajQhvLsqhMGvc5pHdErsLgNDX sXYAKrYLihpwvPdSixZIEk9/h5sZamV32IBZTJPLgVPw+QT8T8ny7l9HPRm273Pw rRtvExLZDdGNx4AemcHFU11TyfuexLwSzE2TLwBxIYO+Hl3QpgP3/GDpfG5ky3kH Feap6IADdHOXlly88X4+l33vqEuqBPb/9CdCV4JV9FnExxTc1l5KBcFvERHG+UsD RKJQlTsmu+aO2lm/XhNjLM/QE5pCZS1QsdvJxiesYYFc2L/2JKXk9ge47PiApkDk Rp5mFgFpFnpRvZSlregmVI8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQcuV8/e95u GZt0C5KCrHIqTtqZmzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFRUYvQ0VBODM2QkFERUYzMTFGMDlFRDQxMjk2NTc2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU0RUVGL0NFQTgzNkJBREVGMzExRjA5RUQ0MTI5NjU3NkY1NkJDL0hMbGZQM3Zl YmhtYmRBdVNncXh5S2s3YW1acy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPuDANBgkqhkiG9w0BAQsFAAOCAQEAiqMcRICt4OaUh2ofdIkc R/DXQVZoCdIIjQ901Yd43jFyfoOw3CB/C9gCpZkk1k+/HLRgKCxbr0VRXxO8JGa4 tXf1v/wJGjxRbG7pBr2wXOT+Y91zFzyXDpoXE4Zz9tJW1n4dD2GbK6kji3ZF0FYm Qe1ICvHW/wlnvDvAGMDhdS6gs7CeQ+6mGhKUdurA8hHJdKAWabbtbJpbKq9aW/4u jKCObNKG3nMAsJ6yPbK2Lb74tGVn7+EQixV/H+9MdLWihi7QvMcfP2sxbIi69uyG a/TyoV1BwWAsmw0DWFBwWt0IwhU6wckvPio+92xlLisHPiSZHwMmhgRfoZkgcBNS eA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:01:27 2025 by rpki-client