This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer (raw, json) Hash identifier: fFvSvCzYbzGJWJa4MjG7uWmri8E//mMA+l0AcKXFSyQ= Subject key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E45 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 18:47:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 152.65.192.0/18 IP: 199.247.160.0/20 IP: 207.66.112.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28229 (0x6e45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 17 18:47:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:82:61:0c:89:a6:c3:bc:67:8c:4f:cf:9a: e4:2b:3a:04:27:1f:2c:39:98:69:d6:19:ae:33:63: aa:cf:0e:0b:84:9e:be:ff:66:be:4e:de:a3:5a:db: 4f:a9:5c:87:b5:20:7a:00:35:3d:91:c2:5b:0e:45: 02:96:f6:01:43:b3:a3:32:9e:fc:ff:1d:63:14:b4: f3:f7:c9:ae:7f:ad:52:94:fa:c0:b9:55:82:5c:dc: 2a:dc:07:b6:00:4b:68:91:53:0d:45:1f:d7:a9:ad: 86:c0:c9:02:c4:3f:97:06:2c:48:c4:82:b0:c2:8f: 25:53:e9:e2:6b:46:e9:cf:c6:20:71:5b:96:e2:e6: 38:f7:a4:d1:df:8d:c4:6b:f7:e2:2d:1d:6a:1e:22: c4:fe:bc:22:cb:cc:2e:42:e9:dd:dd:0d:03:55:d0: 0e:22:d4:1e:7e:0f:cc:40:8c:76:f9:80:07:c2:f8: 0c:3f:c6:64:9c:5d:42:62:d2:50:3b:a8:c2:8a:b7: 5c:42:8d:1e:01:04:36:b4:7a:2a:d9:31:8e:0e:ea: 63:2d:d7:85:6f:d5:ac:7b:d9:e6:60:03:5e:d5:2f: b7:8b:f5:89:34:de:89:de:22:9c:f2:e5:c7:ad:7b: ae:78:35:f6:56:fd:7c:ed:7f:55:17:a6:40:39:19: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 199.247.160.0/20 207.66.112.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:1a:6b:85:a0:2b:bb:51:db:76:9a:ac:0e:bd:ad:dc:04:a3: 11:b5:87:b2:d7:9b:46:5f:e2:7c:e5:58:08:43:a4:01:e4:cf: 93:4f:c2:82:49:8c:56:8c:4b:30:f6:5e:cc:e8:95:09:fe:4f: de:8d:50:70:47:97:1a:53:c5:8c:d5:df:0b:8a:cb:c3:1f:41: 1f:d0:42:ad:3d:0e:df:8d:c5:2f:f6:50:3c:c6:1d:d7:97:f5: 59:91:24:02:dc:2e:8b:aa:92:0e:da:fc:33:81:01:63:fd:e4: 34:b2:32:9b:82:ac:4f:4d:d8:f3:2b:7a:80:10:56:f6:ab:d5: fd:17:65:fb:ee:04:2f:76:a5:fc:10:0b:1c:06:a9:3b:81:38: ae:e1:26:d4:49:d4:7d:e8:26:e5:da:04:67:c7:41:b2:06:ad: 46:06:f3:65:9b:7c:d6:67:94:b6:d2:58:34:01:f7:a6:49:82: ca:58:2a:5e:21:48:91:9f:14:d6:7f:59:69:c8:8c:7c:40:1e: 72:ab:4e:70:0a:58:35:a8:e5:7f:af:21:22:d3:03:f5:ad:76: e5:e7:10:b4:b2:9c:7f:25:b2:d3:b7:f1:65:bb:02:d0:8f:bd: cc:53:59:22:59:37:cf:a0:e5:0e:40:32:2e:8d:03:76:67:76: 0d:9e:e7:cb -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICbkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE3MTg0NzIwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFMzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIz OTE2N0I2NUMyMTA5MjExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANmrgmEMiabDvGeMT8+a5Cs6BCcfLDmYadYZrjNjqs8OC4Sevv9mvk7eo1rbT6lc h7UgegA1PZHCWw5FApb2AUOzozKe/P8dYxS08/fJrn+tUpT6wLlVglzcKtwHtgBL aJFTDUUf16mthsDJAsQ/lwYsSMSCsMKPJVPp4mtG6c/GIHFbluLmOPek0d+NxGv3 4i0dah4ixP68IsvMLkLp3d0NA1XQDiLUHn4PzECMdvmAB8L4DD/GZJxdQmLSUDuo woq3XEKNHgEENrR6Ktkxjg7qYy3XhW/VrHvZ5mADXtUvt4v1iTTeid4inPLlx617 rng19lb9fO1/VRemQDkZ3cECAwEAAaOCAv8wggL7MB0GA1UdDgQWBBQxMRz8wUAb 1tDmtrORZ7ZcIQkhFDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUzNDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZB RzliUTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEBphBwAMEBMf3oAMEA89CcDANBgkqhkiG9w0BAQsFAAOCAQEAjBpr haAru1HbdpqsDr2t3ASjEbWHstebRl/ifOVYCEOkAeTPk0/CgkmMVoxLMPZezOiV Cf5P3o1QcEeXGlPFjNXfC4rLwx9BH9BCrT0O343FL/ZQPMYd15f1WZEkAtwui6qS Dtr8M4EBY/3kNLIym4KsT03Y8yt6gBBW9qvV/Rdl++4EL3al/BALHAapO4E4ruEm 1EnUfegm5doEZ8dBsgatRgbzZZt81meUttJYNAH3pkmCylgqXiFIkZ8U1n9ZaciM fEAecqtOcApYNajlf68hItMD9a125ecQtLKcfyWy07fxZbsC0I+9zFNZIlk3z6Dl DkAyLo0Ddmd2DZ7nyw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:41 2025 by rpki-client