This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer File: MAKFsSjLjblfHkH_vS68Io1FPvw.cer (raw, json) Hash identifier: 00OYVAL0lHZpqQLRHyYyctEgLv4ZpnDJNZjaQFtH/ZM= Subject key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DC3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 15:21:13 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 147.160.64.0/18 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28099 (0x6dc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 9 15:21:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:d8:00:b7:ef:f3:d8:57:7b:27:ae:ae:8d: 79:09:0f:71:e9:83:85:9f:41:63:c0:44:83:2a:01: eb:81:0f:8c:cc:75:92:3b:e7:e0:69:33:1e:86:d0: 55:2f:f9:28:94:9d:3b:e6:ee:ab:6e:a3:18:c6:e7: 3a:4d:bd:69:6a:ea:d4:92:fd:3e:cd:0c:fb:a7:40: 99:ac:46:a3:17:c8:24:cb:97:10:8e:8c:bd:ae:18: 9e:58:7e:32:48:43:2b:5e:45:45:2e:c5:0e:63:fe: 61:84:ed:c8:08:f1:8d:f9:72:7a:3e:5c:99:df:4d: 1e:e5:35:1c:6b:b2:c7:3c:71:4b:7b:a1:30:db:13: 53:65:b5:0c:08:a3:eb:17:19:62:d9:5c:f9:a7:e6: 86:c9:e6:c3:88:85:88:ed:80:2d:3d:33:45:bc:c3: 65:be:58:cf:23:13:47:c4:cf:47:aa:fa:76:4b:70: 04:4e:8a:61:d0:81:ed:b0:c3:bf:0d:ee:1a:5c:14: 33:82:df:34:fb:71:d9:39:93:99:92:f8:19:06:cb: cf:d7:e2:a3:57:8f:a5:6b:a7:7a:ad:fb:65:f7:7e: 6c:1f:b4:f2:fc:fa:81:30:c7:74:ad:18:0b:c5:4e: a8:15:19:57:11:5f:ab:0f:61:b1:e0:10:35:0f:00: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.160.64.0/18 Signature Algorithm: sha256WithRSAEncryption 37:9b:ef:11:46:fc:80:4e:70:75:d7:4b:1f:83:d4:84:63:c6: 9f:f6:af:af:4a:56:90:7f:ac:7c:29:e2:3a:71:76:fa:5e:16: ab:d3:2e:6c:4c:b1:4b:ba:0c:4d:ce:3d:80:b6:d3:f4:c1:4c: 5f:8c:fb:8d:08:5a:64:81:a6:07:ed:d7:62:a4:5d:2d:20:9d: 85:02:23:7c:6b:2d:59:6b:62:65:dd:d0:07:f6:7a:76:af:1c: a2:e4:75:9d:e1:a3:a4:10:10:9f:3c:30:61:a0:c2:07:98:04: c4:86:b2:bb:74:44:4c:28:f5:88:5d:d2:f2:22:da:67:ad:36: 7a:71:10:80:3a:c8:94:17:bc:3b:c9:9d:47:7d:37:78:14:6f: 1a:80:f0:29:1e:fc:36:2e:47:8f:a5:3f:b9:bd:67:a0:fe:46: 79:f0:bc:b2:af:a8:8c:18:ca:8b:63:5b:ce:53:b4:3e:ad:d8: 2c:47:9c:84:4d:87:75:f2:4e:ae:5c:6a:2e:9e:d7:65:18:2b: 1d:2d:63:68:e2:97:83:1a:5b:42:06:75:a3:9a:51:59:d5:8c: da:10:60:13:f4:72:e6:7e:a0:ce:60:94:e2:e9:d6:b7:21:d0: fe:bd:af:b1:f9:3f:64:c5:d7:41:f7:39:c7:f8:c6:bd:09:c8: e8:96:64:05 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA5MTUyMTEzWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDRDM5RDExMC8GA1UEBRMoMzAwMjg1QjEyOENCOERCOTVGMUU0MUZG QkQyRUJDMjI4RDQ1M0VGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKv52AC37/PYV3snrq6NeQkPcemDhZ9BY8BEgyoB64EPjMx1kjvn4GkzHobQVS/5 KJSdO+buq26jGMbnOk29aWrq1JL9Ps0M+6dAmaxGoxfIJMuXEI6Mva4Ynlh+MkhD K15FRS7FDmP+YYTtyAjxjflyej5cmd9NHuU1HGuyxzxxS3uhMNsTU2W1DAij6xcZ Ytlc+afmhsnmw4iFiO2ALT0zRbzDZb5YzyMTR8TPR6r6dktwBE6KYdCB7bDDvw3u GlwUM4LfNPtx2TmTmZL4GQbLz9fio1ePpWuneq37Zfd+bB+08vz6gTDHdK0YC8VO qBUZVxFfqw9hseAQNQ8AbRUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQwAoWxKMuN uV8eQf+9LrwijUU+/DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvRDQ0RTM2RDA0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNEMzlEL0Q0NEUzNkQwNEU3NjExRUNBNTcyMEI3OUM0RjlBRTAyL01BS0ZzU2pM amJsZkhrSF92UzY4SW8xRlB2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBpOgQDANBgkqhkiG9w0BAQsFAAOCAQEAN5vvEUb8gE5wdddLH4PU hGPGn/avr0pWkH+sfCniOnF2+l4Wq9MubEyxS7oMTc49gLbT9MFMX4z7jQhaZIGm B+3XYqRdLSCdhQIjfGstWWtiZd3QB/Z6dq8couR1neGjpBAQnzwwYaDCB5gExIay u3RETCj1iF3S8iLaZ602enEQgDrIlBe8O8mdR303eBRvGoDwKR78Ni5Hj6U/ub1n oP5GefC8sq+ojBjKi2NbzlO0Pq3YLEechE2HdfJOrlxqLp7XZRgrHS1jaOKXgxpb QgZ1o5pRWdWM2hBgE/Ry5n6gzmCU4unWtyHQ/r2vsfk/ZMXXQfc5x/jGvQnI6JZk BQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:04 2025 by rpki-client