This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer File: MNcZ-cbTfirJ9NbUsffZeOwqMok.cer (raw, json) Hash identifier: v3miBOU8HLo0iU3AfCdJbqRB5fCnq2ChrInlGx8tLPA= Subject key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E65 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft caRepository: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 05:15:25 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.24.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28261 (0x6e65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 19 05:15:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:e9:03:63:c3:97:4f:8e:34:a3:3d:ad:40: b4:ab:b1:78:30:ba:65:f5:56:41:c0:d1:2e:84:f7: 44:60:fc:cd:45:69:00:73:34:a9:e8:0e:e4:f9:ab: a2:b0:0b:d0:ed:89:d4:6e:4d:85:d4:1a:e8:a8:ae: c0:40:e2:09:35:a1:49:e6:1b:4a:3d:b9:2d:bb:4c: 5c:e8:56:96:cf:75:a0:7a:2a:f7:e1:53:7a:b0:05: 6d:6e:83:c2:df:77:8d:09:35:76:84:47:d4:5e:a1: 79:4d:73:cb:50:99:ec:de:65:55:d2:a5:d1:2f:78: 95:90:a6:91:2b:76:d4:62:53:b0:7f:62:ff:da:97: 1d:0f:87:d5:c5:dc:73:4e:28:79:46:c8:18:d0:c1: 3e:da:c6:7a:57:10:ed:c4:97:5d:dd:fe:4d:78:82: f2:2d:e7:89:49:e2:d3:f2:7a:3a:0e:82:9d:2b:71: 31:57:d2:9a:28:ed:cd:f9:44:68:cc:38:ab:65:8b: 33:9c:ed:d3:44:0b:f4:39:22:3a:f9:fb:0f:98:17: ea:b5:3d:48:3c:fb:4d:1e:de:21:98:91:17:4f:8a: 3e:62:b8:aa:fc:df:d2:7a:53:b4:79:f0:14:f9:62: 1e:21:ed:64:3b:2b:08:8f:51:04:19:50:68:92:be: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.24.0/23 Signature Algorithm: sha256WithRSAEncryption b6:ad:06:0c:3c:0b:51:0a:ec:ca:6b:59:b3:ff:be:9e:e1:b7: f6:78:52:dc:9c:43:76:bb:ea:a9:89:cc:df:b9:f1:71:9a:91: 8c:51:63:ff:47:1d:29:1c:5b:42:22:c0:4a:c4:1d:c9:f3:9f: e1:c2:fb:37:c5:d0:28:17:cd:b7:2e:d6:7d:fd:b6:b0:61:64: ad:9e:69:de:be:b0:f3:be:60:54:02:3c:b6:f2:3c:68:15:d8: df:31:62:40:40:28:0a:c6:50:00:87:61:d5:5d:34:b1:75:35: b7:2e:5c:ec:75:3f:96:9d:b2:5f:09:9b:9f:2a:4c:b9:2b:2c: 62:f6:a8:66:96:57:21:c4:d3:f3:b6:23:d5:53:06:fa:9a:ab: 52:6f:cd:d8:31:04:7b:33:a0:fc:3c:80:5d:a4:7d:87:b8:ab: ea:8a:ba:be:d9:f2:e2:24:23:e3:ff:0a:10:1d:26:60:53:0f: 16:17:f5:f8:14:53:af:c6:18:81:cb:b8:f9:c9:35:3e:2c:ab: f4:ab:f6:12:fe:c2:8b:69:d2:26:f6:7e:b9:6b:ea:ff:c3:df: e1:49:15:fc:47:23:55:33:b5:74:26:7b:14:e7:6d:61:f5:ef: 72:2c:aa:b5:be:11:a9:aa:a0:93:19:98:71:f6:54:57:6d:33: 48:08:74:e4 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE5MDUxNTI1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyNDM0RDExMC8GA1UEBRMoMzBENzE5RjlDNkQzN0UyQUM5RjRENkQ0 QjFGN0Q5NzhFQzJBMzI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMJ96QNjw5dPjjSjPa1AtKuxeDC6ZfVWQcDRLoT3RGD8zUVpAHM0qegO5PmrorAL 0O2J1G5NhdQa6KiuwEDiCTWhSeYbSj25LbtMXOhWls91oHoq9+FTerAFbW6Dwt93 jQk1doRH1F6heU1zy1CZ7N5lVdKl0S94lZCmkSt21GJTsH9i/9qXHQ+H1cXcc04o eUbIGNDBPtrGelcQ7cSXXd3+TXiC8i3niUni0/J6Og6CnStxMVfSmijtzflEaMw4 q2WLM5zt00QL9DkiOvn7D5gX6rU9SDz7TR7eIZiRF0+KPmK4qvzf0npTtHnwFPli HiHtZDsrCI9RBBlQaJK+kg8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQw1xn5xtN+ Ksn01tSx99l47CoyiTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQzNEQvRkMyMDkxMzg1OEREMTFGMDhGQUFERTY2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI0MzREL0ZDMjA5MTM4NThERDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JU ZmlySjlOYlVzZmZaZU93cU1vay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/GDANBgkqhkiG9w0BAQsFAAOCAQEAtq0GDDwLUQrsymtZs/++ nuG39nhS3JxDdrvqqYnM37nxcZqRjFFj/0cdKRxbQiLASsQdyfOf4cL7N8XQKBfN ty7Wff22sGFkrZ5p3r6w875gVAI8tvI8aBXY3zFiQEAoCsZQAIdh1V00sXU1ty5c 7HU/lp2yXwmbnypMuSssYvaoZpZXIcTT87Yj1VMG+pqrUm/N2DEEezOg/DyAXaR9 h7ir6oq6vtny4iQj4/8KEB0mYFMPFhf1+BRTr8YYgcu4+ck1Piyr9Kv2Ev7Ci2nS JvZ+uWvq/8Pf4UkV/EcjVTO1dCZ7FOdtYfXvciyqtb4RqaqgkxmYcfZUV20zSAh0 5A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:37 2025 by rpki-client