This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer (raw, json) Hash identifier: p65ZVSCGxd90KGInxR786xiTkCIp6K1xJKSCQ8NsyUs= Subject key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E67 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 05:24:37 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 74.119.64.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28263 (0x6e67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 19 05:24:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:c7:b2:93:f6:4b:15:30:6f:dc:d5:fd:6a: 91:5e:ef:54:c0:42:47:80:16:e3:b1:ef:1e:98:0a: fa:6e:7b:47:20:19:cf:11:13:7d:4d:35:96:03:ac: 57:ec:23:fc:33:34:ed:37:64:49:27:4f:8e:68:83: 47:19:d7:b0:32:a6:61:c6:e7:0d:c9:ea:2a:78:d2: d5:50:11:80:4f:89:03:ec:eb:42:9a:55:f5:c8:d2: 61:89:fe:68:48:6e:89:83:66:45:ea:69:29:8d:dc: 0c:6a:7b:d1:52:95:78:99:15:5a:d2:97:ce:5b:1b: 65:40:57:91:98:22:b3:64:e0:29:03:d2:4d:f7:80: 0a:56:a2:8a:b7:e1:82:d8:95:08:30:c5:84:ba:7c: b1:3f:e3:65:f0:32:fe:1e:29:67:37:4e:1f:78:23: ec:81:68:30:a0:bc:55:47:99:1e:37:fa:f0:a7:17: 59:10:28:b5:fc:7d:d9:b6:65:e7:b2:5e:1d:2b:9c: f1:51:cc:08:e7:d6:53:a1:d0:86:9e:bf:ca:0d:56: 35:22:9d:75:05:e9:c1:57:ad:e2:89:c0:28:32:25: 68:1c:4e:8d:04:fe:5d:f8:b3:3c:e6:67:d8:67:64: c5:c1:51:c2:ec:ff:04:ef:72:a8:5c:52:28:0d:bc: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 74.119.64.0/21 Signature Algorithm: sha256WithRSAEncryption 76:e3:ac:90:8a:95:45:cd:5c:85:c3:74:71:ea:01:86:91:83: bf:01:6f:74:e0:49:fe:35:a0:d9:c1:1b:24:4f:7e:17:42:a8: c6:ed:52:18:da:87:54:40:3e:70:90:a3:fd:ce:92:9b:11:72: 8d:b6:e9:08:fe:5e:e4:33:05:cb:f8:dd:10:b0:59:45:4d:4f: 48:c4:d8:08:9b:59:6e:2a:24:d5:0c:55:b6:b3:35:0b:6d:b7: 78:d5:66:be:6e:aa:46:14:10:49:f9:f9:45:51:4a:90:30:7e: 21:6c:f8:c6:ec:d9:7a:dd:0a:5f:7b:0a:72:05:01:e7:c0:af: 0c:13:01:cf:4f:14:26:a7:11:df:a8:c1:fc:cc:f2:37:28:31: 7b:3d:af:cb:67:5b:bf:fb:f0:1e:47:cd:a2:94:7d:bc:3c:a7: de:dd:f9:2e:c6:ee:7a:bc:40:f3:16:e3:83:ad:61:fa:db:9b: d8:2e:2c:28:5e:d1:ef:c3:09:76:d8:2a:0b:ae:84:2f:6c:d9: 2f:0d:dd:44:b2:e4:0a:d3:1b:ea:45:c7:3d:92:a7:6a:7c:d3: 0c:c7:4e:fc:a7:c6:be:bb:bb:3b:18:28:b2:2e:5b:23:3d:61: 6b:8a:54:c4:ee:44:9c:39:29:f8:87:e1:70:d4:5d:a5:87:5a: 8c:73:0a:d2 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE5MDUyNDM3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFERUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2 NzQxNDVGNkM1OEY4M0NENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALP2x7KT9ksVMG/c1f1qkV7vVMBCR4AW47HvHpgK+m57RyAZzxETfU01lgOsV+wj /DM07TdkSSdPjmiDRxnXsDKmYcbnDcnqKnjS1VARgE+JA+zrQppV9cjSYYn+aEhu iYNmReppKY3cDGp70VKVeJkVWtKXzlsbZUBXkZgis2TgKQPSTfeAClaiirfhgtiV CDDFhLp8sT/jZfAy/h4pZzdOH3gj7IFoMKC8VUeZHjf68KcXWRAotfx92bZl57Je HSuc8VHMCOfWU6HQhp6/yg1WNSKddQXpwVet4onAKDIlaBxOjQT+XfizPOZn2Gdk xcFRwuz/BO9yqFxSKA28QKsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBREfVmDvw25 Ea2P3LZ0FF9sWPg81TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCMDEvMzJFRTBBNkU5OUU5MTFGMDk3OEQ0MDcyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURFQjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhO dVJHdGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA0p3QDANBgkqhkiG9w0BAQsFAAOCAQEAduOskIqVRc1chcN0ceoB hpGDvwFvdOBJ/jWg2cEbJE9+F0Koxu1SGNqHVEA+cJCj/c6SmxFyjbbpCP5e5DMF y/jdELBZRU1PSMTYCJtZbiok1QxVtrM1C223eNVmvm6qRhQQSfn5RVFKkDB+IWz4 xuzZet0KX3sKcgUB58CvDBMBz08UJqcR36jB/MzyNygxez2vy2dbv/vwHkfNopR9 vDyn3t35LsbuerxA8xbjg61h+tub2C4sKF7R78MJdtgqC66EL2zZLw3dRLLkCtMb 6kXHPZKnanzTDMdO/KfGvru7Oxgosi5bIz1ha4pUxO5EnDkp+IfhcNRdpYdajHMK 0g== -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:45 2025 by rpki-client