This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer File: HdM6aLwLXJMQ__Uq1zlBINECpic.cer (raw, json) Hash identifier: JnYXUnq1kTOmNamfVH6Lgz53ZYDdn/blibK4sMUquuU= Subject key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E79 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 17:56:48 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.187.162.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28281 (0x6e79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 19 17:56:48 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:b6:78:b4:34:71:7e:5d:2f:3e:76:11:76: 9b:b9:dd:c0:dc:e3:ce:4f:69:4b:ae:62:09:69:29: 78:42:bf:38:e5:59:b7:fb:ee:ef:4e:61:88:5a:8e: 4f:c3:82:1d:02:27:0d:14:41:dc:84:17:31:08:d8: a2:8c:b1:fe:dd:2a:ba:4f:76:1c:71:2b:5f:39:8b: ec:cd:26:9d:35:1e:2e:8f:52:6f:0f:ac:f9:19:0b: 34:8b:03:8e:80:56:96:62:48:c2:bf:21:ba:c3:b7: 74:b5:43:b3:ab:14:54:db:ca:4e:a7:c5:7b:d8:5c: 73:20:3e:e0:45:fc:f5:df:51:8f:f4:c1:b0:15:25: b8:05:18:71:d4:88:d8:d9:f9:d9:13:27:8d:cf:65: a7:60:b1:cf:16:90:6c:1d:1c:52:03:41:08:da:ff: d0:62:e0:3f:6e:eb:cc:36:98:09:d2:34:14:b7:3a: eb:c4:d4:a5:f9:b0:85:72:1a:a2:8d:e7:2d:a8:1a: 4b:71:53:f0:62:59:2d:5b:09:9f:42:85:af:6f:f9: 54:d6:de:e4:74:2d:47:0a:3b:1d:6e:0a:39:2c:46: e7:7c:0c:c2:24:87:40:49:82:c8:53:be:83:c0:9b: f1:cf:b9:27:6a:8c:7a:73:d4:60:5e:6a:a1:df:2d: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.162.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:bc:54:6c:93:23:9e:8b:17:d7:f8:a4:8a:8b:bf:3b:6b:f8: ba:91:4c:35:33:f3:cc:ce:19:6f:16:38:5d:09:cc:57:fa:a2: e5:cd:e7:ba:1b:50:5f:3a:e7:ff:eb:29:da:f5:ce:7e:15:72: b1:b8:cd:f9:94:44:56:18:f0:8a:e6:5f:32:0b:96:fc:96:a8: ec:36:3c:b6:40:69:16:75:bd:42:a4:79:16:80:f1:c1:9c:b4: 1a:4e:c0:93:89:3c:44:a8:32:8a:2e:9d:92:7a:76:07:04:02: cf:31:04:bf:a6:1c:38:27:18:03:13:c6:af:ac:4f:f0:f6:89: 1e:da:ba:a2:c3:25:a1:66:13:71:40:35:3e:a7:30:41:a8:dc: 0d:a4:1c:a1:23:96:6c:4a:74:54:b9:8a:42:61:97:66:ce:2a: 27:23:79:15:0f:7f:74:55:1a:27:43:ca:bb:04:59:c2:6e:4e: 3b:83:fe:bc:ef:a0:bc:d3:f6:12:c3:56:ec:8d:b1:b6:48:03: 95:8a:67:4e:f1:47:6f:0a:31:db:f4:75:8e:8c:14:f5:7e:7b: 5d:a9:12:87:35:d3:f4:97:41:c5:ca:80:e8:3b:96:51:aa:62: 15:ec:aa:0a:29:02:62:e8:76:e4:70:74:5a:26:2b:d3:86:3c: b5:ac:a1:e6 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE5MTc1NjQ4WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDNTMxOTExMC8GA1UEBRMoMUREMzNBNjhCQzBCNUM5MzEwRkZGNTJB RDczOTQxMjBEMTAyQTYyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM9Htni0NHF+XS8+dhF2m7ndwNzjzk9pS65iCWkpeEK/OOVZt/vu705hiFqOT8OC HQInDRRB3IQXMQjYooyx/t0quk92HHErXzmL7M0mnTUeLo9Sbw+s+RkLNIsDjoBW lmJIwr8husO3dLVDs6sUVNvKTqfFe9hccyA+4EX89d9Rj/TBsBUluAUYcdSI2Nn5 2RMnjc9lp2CxzxaQbB0cUgNBCNr/0GLgP27rzDaYCdI0FLc668TUpfmwhXIaoo3n LagaS3FT8GJZLVsJn0KFr2/5VNbe5HQtRwo7HW4KOSxG53wMwiSHQEmCyFO+g8Cb 8c+5J2qMenPUYF5qod8tgTUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQd0zpovAtc kxD/9SrXOUEg0QKmJzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzUzMTkvRjk0RDQxQzg4QzJDMTFFRjgxMjJFQzExQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM1MzE5L0Y5NEQ0MUM4OEMyQzExRUY4MTIyRUMxMUM0RjlBRTAyL0hkTTZhTHdM WEpNUV9fVXExemxCSU5FQ3BpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC7ojANBgkqhkiG9w0BAQsFAAOCAQEAD7xUbJMjnosX1/ikiou/ O2v4upFMNTPzzM4ZbxY4XQnMV/qi5c3nuhtQXzrn/+sp2vXOfhVysbjN+ZREVhjw iuZfMguW/Jao7DY8tkBpFnW9QqR5FoDxwZy0Gk7Ak4k8RKgyii6dknp2BwQCzzEE v6YcOCcYAxPGr6xP8PaJHtq6osMloWYTcUA1PqcwQajcDaQcoSOWbEp0VLmKQmGX Zs4qJyN5FQ9/dFUaJ0PKuwRZwm5OO4P+vO+gvNP2EsNW7I2xtkgDlYpnTvFHbwox 2/R1jowU9X57XakShzXT9JdBxcqA6DuWUapiFeyqCikCYuh25HB0WiYr04Y8tayh 5g== -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:45 2025 by rpki-client