This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer File: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer (raw, json) Hash identifier: zrL+XeBJeV7zIyDMrUT79AAFmxtSfa8IieNOvhaQ/vA= Subject key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F72 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft caRepository: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 05:30:16 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.44.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28530 (0x6f72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 3 05:30:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:d0:32:6c:cc:45:de:cd:06:88:76:f8:b0: ae:fa:b6:52:a1:d5:b3:70:20:2c:1b:d6:28:b3:23: 35:b2:bb:87:0e:a5:84:e8:19:5c:61:0c:34:39:9e: 15:c2:cc:94:b5:54:5e:7f:77:83:6e:de:f7:32:9e: e7:65:d5:b9:f7:c4:94:0d:80:03:6b:65:42:4d:89: a5:f0:9d:ea:1a:61:cb:f9:56:25:ef:f5:e8:45:7a: c7:92:06:22:ae:a0:2c:45:86:80:c5:79:bf:cd:a4: 1e:64:c1:4f:da:53:37:81:bf:01:56:d6:66:18:d3: e6:58:29:f8:0c:11:6d:a3:ff:15:6d:a2:fa:ed:8c: 3e:8b:0c:05:a8:86:b3:11:aa:d7:71:e8:e5:6b:cb: 4f:01:2d:d1:7c:38:0a:57:4b:78:01:6a:3e:14:55: 5a:b1:d6:dd:02:9b:92:8d:95:7d:bf:86:b9:65:5d: 0a:a8:f7:c6:9b:f2:75:7d:a6:06:cf:7a:0b:8b:a4: 47:e2:f6:ad:2c:01:51:2f:bd:b8:be:be:6a:8d:0b: c4:b1:3e:22:61:73:4e:0f:cc:e5:06:88:40:75:e1: d6:cb:34:b4:0d:b7:78:97:4d:84:32:7a:0c:e4:0c: 7c:37:80:a2:e8:05:3d:d7:5a:21:7d:55:57:d1:25: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.44.0/24 Signature Algorithm: sha256WithRSAEncryption 83:5f:84:d4:87:24:84:82:ab:51:3a:03:6d:98:41:25:fd:19: b3:8a:92:7b:c6:6d:64:06:2b:ef:29:ba:81:1e:56:b4:b2:74: e0:61:89:ce:81:f1:5f:43:90:28:c5:a5:d4:35:33:1f:0a:8e: 17:ee:ee:07:a7:84:67:f9:cc:db:93:58:60:28:2f:48:40:d5: a3:f3:39:2b:45:20:13:65:9d:3d:30:8e:25:88:85:22:68:fd: 6c:00:bc:11:ea:54:10:0a:4c:22:2e:69:18:d2:d6:e5:c3:f8: 97:c8:20:57:11:3e:11:10:aa:91:9b:d4:7e:a7:b6:5b:45:f1: fe:c1:6c:b5:80:c7:78:fb:c4:97:ef:d5:bd:f0:e7:8a:0d:79: b9:96:32:db:7f:be:a6:d9:ed:2e:16:ed:29:2c:55:b9:66:7d: 31:26:83:05:5f:75:67:0a:49:88:a2:b4:6b:b6:c7:61:32:a6: 1e:d2:c6:a0:f2:b7:39:3f:b0:bc:5c:d6:fa:3c:fd:74:7b:e7: c8:5f:fb:3f:a3:c8:9c:ae:14:e5:08:b3:7b:09:62:1c:4b:91: 75:4b:02:b6:5d:d0:87:bf:cd:02:a1:e9:f7:11:15:37:28:e4: d4:b3:dd:d7:f5:5f:ea:3e:02:22:ec:81:e3:8a:47:de:7f:5d: d2:79:9b:f9 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAzMDUzMDE2WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RC RUQ4MDRCMTgwQzNBMTZGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANd20DJszEXezQaIdviwrvq2UqHVs3AgLBvWKLMjNbK7hw6lhOgZXGEMNDmeFcLM lLVUXn93g27e9zKe52XVuffElA2AA2tlQk2JpfCd6hphy/lWJe/16EV6x5IGIq6g LEWGgMV5v82kHmTBT9pTN4G/AVbWZhjT5lgp+AwRbaP/FW2i+u2MPosMBaiGsxGq 13Ho5WvLTwEt0Xw4CldLeAFqPhRVWrHW3QKbko2Vfb+GuWVdCqj3xpvydX2mBs96 C4ukR+L2rSwBUS+9uL6+ao0LxLE+ImFzTg/M5QaIQHXh1ss0tA23eJdNhDJ6DOQM fDeAougFPddaIX1VV9ElrFkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ4vNT5+Doa 0Jtoh9vtgEsYDDoW/DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFREYvMjQ3QjVDQkFEMDA5MTFGMEJFNjAwRTZCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdCRURGLzI0N0I1Q0JBRDAwOTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2 R3RDYmFJZmI3WUJMR0F3NkZ2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPLDANBgkqhkiG9w0BAQsFAAOCAQEAg1+E1IckhIKrUToDbZhB Jf0Zs4qSe8ZtZAYr7ym6gR5WtLJ04GGJzoHxX0OQKMWl1DUzHwqOF+7uB6eEZ/nM 25NYYCgvSEDVo/M5K0UgE2WdPTCOJYiFImj9bAC8EepUEApMIi5pGNLW5cP4l8gg VxE+ERCqkZvUfqe2W0Xx/sFstYDHePvEl+/VvfDnig15uZYy23++ptntLhbtKSxV uWZ9MSaDBV91ZwpJiKK0a7bHYTKmHtLGoPK3OT+wvFzW+jz9dHvnyF/7P6PInK4U 5QizewliHEuRdUsCtl3Qh7/NAqHp9xEVNyjk1LPd1/Vf6j4CIuyB44pH3n9d0nmb +Q== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:31 2025 by rpki-client