This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer File: MjQC2m9aUgggITsu3L_s7DrJEEU.cer (raw, json) Hash identifier: Ix8ASjXTrR+tJOECfEBDhyNch9CGu5aMV/s54VYgDok= Subject key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E33 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft caRepository: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 03:15:21 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: IP: 138.252.216.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28211 (0x6e33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 17 03:15:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:d0:b6:d6:cd:36:4e:af:9e:d2:d8:df:c6: 29:c0:14:21:04:2a:22:2a:76:17:0a:aa:9d:7c:a3: eb:9a:a2:68:73:32:c5:44:51:e6:30:45:a7:bc:4e: 8f:cf:45:aa:3b:20:6f:36:33:5d:17:85:44:cf:d9: cf:fa:f1:0e:43:a8:6d:3e:57:69:a5:33:e3:72:ce: aa:bd:4f:8b:61:ab:e5:a1:77:08:fe:a9:0f:a8:e9: 24:8a:f8:ed:5b:43:ac:57:7b:62:fb:f7:9c:c0:26: 77:08:ba:aa:14:3f:cb:b2:5d:b3:fe:4d:69:ee:62: 37:78:d6:43:04:cf:0c:f7:d4:2d:3a:c7:85:d3:09: 09:06:1d:c2:01:52:9e:6b:5c:57:96:93:8f:22:fd: eb:1d:4e:04:53:48:4a:25:bc:07:b6:ba:66:21:8d: 89:d9:b3:ed:5b:b7:c7:8e:b5:48:24:71:e7:52:2c: 52:e8:29:a9:a6:d9:ff:00:45:a7:a4:f2:3f:de:d4: 81:47:64:72:1f:ed:df:3c:bb:23:49:32:f6:ea:8f: b9:01:65:e9:d7:ed:9e:3c:07:1f:48:78:37:dc:cd: e7:60:c9:3e:3d:d0:f1:99:ff:c5:e7:96:be:d1:29: 0a:3d:ff:4c:4e:2e:52:3e:01:5c:28:21:89:f4:a5: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.216.0/24 Signature Algorithm: sha256WithRSAEncryption ab:e1:f2:8f:f2:68:12:0f:12:00:56:df:e7:c4:12:fb:26:bb: 11:18:10:6a:19:3b:3a:2b:b8:0a:f6:6d:31:d4:5f:84:8a:82: 63:57:12:11:74:43:ef:93:22:55:c1:61:ae:39:3d:4e:7a:80: e4:41:30:98:34:14:d3:83:30:03:ca:00:6d:69:3a:51:c7:b0: 4e:3e:d9:c8:be:9b:9e:6e:78:6c:f2:38:65:ac:b4:5e:8e:ed: 1a:cb:84:f7:fd:94:04:7a:13:a1:95:fa:c5:b6:f4:15:c6:c3: b1:74:9e:43:37:58:37:f3:a4:17:cf:8e:39:0f:fd:dc:a6:f6: 0c:50:65:4c:d4:a3:fe:a5:42:e7:34:63:95:fc:7a:d5:2c:6e: 8f:6e:7d:ee:d9:42:54:40:ef:00:94:7d:f6:66:55:4c:4d:86: c2:e6:55:ca:ac:e1:27:19:39:21:b9:95:77:c0:24:6e:77:8d: e2:c1:79:f2:a4:1a:c7:18:06:e3:2b:ad:ae:af:5b:ec:bf:bf: 16:1a:76:f2:df:8a:9c:33:24:75:a9:ba:49:98:f3:a8:25:1e: 92:11:42:e5:dc:81:ad:73:e7:a8:85:d8:79:34:92:a5:28:30: 67:ca:35:e5:bd:eb:25:ff:79:49:75:f5:d2:6f:e1:ea:8c:66: bf:41:33:8a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE3MDMxNTIxWhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzMDU5RTExMC8GA1UEBRMoMzIzNDAyREE2RjVBNTIwODIwMjEzQjJF RENCRkVDRUMzQUM5MTA0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOQv0LbWzTZOr57S2N/GKcAUIQQqIip2FwqqnXyj65qiaHMyxURR5jBFp7xOj89F qjsgbzYzXReFRM/Zz/rxDkOobT5XaaUz43LOqr1Pi2Gr5aF3CP6pD6jpJIr47VtD rFd7Yvv3nMAmdwi6qhQ/y7Jds/5Nae5iN3jWQwTPDPfULTrHhdMJCQYdwgFSnmtc V5aTjyL96x1OBFNISiW8B7a6ZiGNidmz7Vu3x461SCRx51IsUugpqabZ/wBFp6Ty P97UgUdkch/t3zy7I0ky9uqPuQFl6dftnjwHH0h4N9zN52DJPj3Q8Zn/xeeWvtEp Cj3/TE4uUj4BXCghifSlTTsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQyNALab1pS CCAhOy7cv+zsOskQRTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA1OUUvQTQ2NUNBODBDMzYzMTFGMDlERDlGNjMyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMwNTlFL0E0NjVDQTgwQzM2MzExRjA5REQ5RjYzMkM0RjlBRTAyL01qUUMybTlh VWdnZ0lUc3UzTF9zN0RySkVFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr82DANBgkqhkiG9w0BAQsFAAOCAQEAq+Hyj/JoEg8SAFbf58QS +ya7ERgQahk7Oiu4CvZtMdRfhIqCY1cSEXRD75MiVcFhrjk9TnqA5EEwmDQU04Mw A8oAbWk6UcewTj7ZyL6bnm54bPI4Zay0Xo7tGsuE9/2UBHoToZX6xbb0FcbDsXSe QzdYN/OkF8+OOQ/93Kb2DFBlTNSj/qVC5zRjlfx61Sxuj2597tlCVEDvAJR99mZV TE2GwuZVyqzhJxk5IbmVd8AkbneN4sF58qQaxxgG4yutrq9b7L+/Fhp28t+KnDMk dam6SZjzqCUekhFC5dyBrXPnqIXYeTSSpSgwZ8o15b3rJf95SXX10m/h6oxmv0Ez ig== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:27 2025 by rpki-client