This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer File: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer (raw, json) Hash identifier: bVU4+TR2W+67cJHrItBQXIHjfjrA6/lhPStBeId/YpM= Subject key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E04 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 13:11:17 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 160.187.180.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28164 (0x6e04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 13 13:11:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:12:3a:0e:fb:1a:09:bf:f6:b2:84:d8:ff: 05:50:3b:69:63:ed:0d:7c:b3:9c:d0:0e:70:f5:ab: 5a:54:85:52:3c:05:5d:a9:84:4a:78:37:4e:4a:b5: 13:f7:e7:0b:94:34:64:fd:4b:9d:3d:a3:f0:e7:a7: 77:eb:81:7a:48:49:c1:70:ca:1d:81:0e:d8:09:1d: ff:c1:ff:55:69:1b:d5:79:be:f4:6d:62:72:73:00: 22:10:d8:a0:a7:b9:1f:88:40:8c:e8:cc:dd:25:b5: 6f:99:9c:e5:02:58:d2:89:b7:72:59:ad:95:ef:5f: bf:f0:48:31:3a:f4:ff:73:ef:3b:f8:5a:21:b3:13: ae:0a:8e:32:e8:56:8b:d7:b9:f5:ca:82:d4:45:97: 2c:b1:ae:35:a6:e6:71:45:cb:48:79:8a:af:66:68: 72:ed:f9:8d:5b:40:6a:f5:04:39:ec:de:0b:88:85: fd:40:0c:85:5e:7b:24:d4:7c:40:43:cf:4e:33:f2: f2:ab:56:a2:29:ee:95:47:00:32:e4:32:41:47:4d: bb:00:d9:15:84:fd:94:de:17:33:42:41:cb:d3:7f: 60:47:ed:c3:bc:94:8c:ec:54:eb:ed:ad:b6:79:ae: ca:73:49:f5:e7:a3:79:78:94:76:0f:3f:56:fb:0e: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.180.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:f8:36:55:22:70:82:38:88:08:e4:7f:67:d0:2b:f1:91:e4: 35:f5:d5:36:48:3d:9a:fc:2f:ed:1a:4e:a2:6f:3e:a7:bd:35: 99:21:b2:ce:9d:c2:f8:e2:54:51:7a:e2:2b:20:db:4e:37:78: b4:62:ae:73:65:5e:a8:5b:1c:d8:6b:0e:d8:a3:71:0c:f7:fa: 9d:e1:eb:dc:8b:2f:15:bb:24:6e:03:4b:91:9f:a4:c5:7a:82: 66:48:ca:16:58:ee:52:2a:9b:48:39:5e:1f:fa:2d:e2:0f:c0: 6e:b7:f7:f7:5c:34:df:71:fe:df:60:19:38:f4:ea:6c:5a:04: 1e:80:8a:41:d7:89:62:6a:e5:f7:f2:26:58:65:c5:12:dd:e3: c9:09:e3:8e:8e:a8:82:37:fd:c9:9c:ba:c2:f0:fa:f1:6a:3d: a6:5d:1b:25:d9:ae:19:3e:fa:fa:73:27:5e:9b:2d:11:0a:14: d6:30:0e:36:60:47:6a:64:e7:b3:b6:71:14:4c:13:65:4e:05: 96:d6:b7:af:69:88:fc:c3:34:16:78:04:22:22:bd:26:97:c6: 40:27:e0:5c:92:13:55:a9:bf:95:24:42:c8:a5:02:e7:4d:78: 9c:0f:27:3d:be:6c:95:a5:fe:a1:e0:f9:f1:4f:72:c7:a3:15: ed:66:13:56 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEzMTMxMTE3WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1MjMyOTExMC8GA1UEBRMoMjkzQUM2NDA1MzA5REU5NDk1MTY4N0ZF MTcyOTZBRERDRDk1NzJGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOSGEjoO+xoJv/ayhNj/BVA7aWPtDXyznNAOcPWrWlSFUjwFXamESng3Tkq1E/fn C5Q0ZP1LnT2j8Oend+uBekhJwXDKHYEO2Akd/8H/VWkb1Xm+9G1icnMAIhDYoKe5 H4hAjOjM3SW1b5mc5QJY0om3clmtle9fv/BIMTr0/3PvO/haIbMTrgqOMuhWi9e5 9cqC1EWXLLGuNabmcUXLSHmKr2Zocu35jVtAavUEOezeC4iF/UAMhV57JNR8QEPP TjPy8qtWoinulUcAMuQyQUdNuwDZFYT9lN4XM0JBy9N/YEftw7yUjOxU6+2ttnmu ynNJ9eejeXiUdg8/VvsOrWECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQpOsZAUwne lJUWh/4XKWrdzZVy/DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTIzMjkvQzdGQUQzNjhBMjY4MTFFRjlEOTE0MTE4QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUyMzI5L0M3RkFEMzY4QTI2ODExRUY5RDkxNDExOEM0RjlBRTAyL0tUckdRRk1K M3BTVkZvZi1GeWxxM2MyVmN2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC7tDANBgkqhkiG9w0BAQsFAAOCAQEADPg2VSJwgjiICOR/Z9Ar 8ZHkNfXVNkg9mvwv7RpOom8+p701mSGyzp3C+OJUUXriKyDbTjd4tGKuc2VeqFsc 2GsO2KNxDPf6neHr3IsvFbskbgNLkZ+kxXqCZkjKFljuUiqbSDleH/ot4g/Abrf3 91w033H+32AZOPTqbFoEHoCKQdeJYmrl9/ImWGXFEt3jyQnjjo6ogjf9yZy6wvD6 8Wo9pl0bJdmuGT76+nMnXpstEQoU1jAONmBHamTns7ZxFEwTZU4Flta3r2mI/MM0 FngEIiK9JpfGQCfgXJITVam/lSRCyKUC5014nA8nPb5slaX+oeD58U9yx6MV7WYT Vg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:51 2025 by rpki-client