This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer (raw, json) Hash identifier: EgtqTTVKP6phhv1eAf0GOSV+QCkoxsPD47gukZaN/zo= Subject key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70C8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 16:11:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.70.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28872 (0x70c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 23 16:11:03 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:ca:72:9a:ad:41:eb:a0:04:4b:7b:76:4c: b2:a1:64:de:8f:ff:09:f3:0e:74:4d:ec:6c:55:e5: a2:e1:02:b1:9b:33:ec:ee:5b:4b:e1:38:fb:02:3b: bf:b7:99:85:72:7d:4f:fb:6d:12:c2:4f:93:34:a5: 73:23:8f:0e:08:31:02:db:95:dd:ea:63:d2:b0:ca: 13:39:20:8d:3e:a4:f1:1e:35:6f:97:0b:55:60:31: a9:f2:cd:e2:39:7e:5f:0a:1d:12:d9:1f:9d:ca:d3: 2e:27:f2:54:f3:4b:af:70:f9:f6:d3:69:ce:b5:69: e4:51:03:85:57:b0:73:78:82:65:48:9d:a4:90:b3: 44:11:46:7e:0d:45:c4:37:9f:65:7c:38:30:69:bb: c0:1d:65:9d:67:a6:09:50:3e:9a:1d:36:02:41:da: 99:15:d8:80:c7:4e:0a:e0:50:be:e2:18:de:05:8d: 9e:21:f0:94:64:54:86:24:16:a2:7c:02:a3:7e:5f: 0d:61:e7:33:1e:32:d7:83:a2:07:01:36:c2:c7:3f: 04:25:f4:6b:20:27:c8:74:2d:cc:13:63:97:6f:da: 74:06:83:a8:aa:e0:f2:87:f2:f6:20:95:b1:68:7d: cb:ef:49:8a:9a:ea:a9:77:61:a6:da:88:fe:0b:72: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.70.0/23 Signature Algorithm: sha256WithRSAEncryption 78:9e:b8:6c:d6:af:e5:e5:dc:43:11:65:de:60:2a:66:fe:31: 00:90:08:da:6d:e5:84:63:bb:72:20:70:cc:e9:9f:f7:17:d1: bf:dc:2f:93:91:41:3c:69:fa:1a:57:99:bf:91:bc:1e:1c:3f: a7:df:a4:e4:bb:bd:df:5c:6f:3c:19:2f:08:2b:18:b1:79:ec: f9:d7:7a:1e:20:d4:57:75:fa:76:3f:12:44:58:3c:24:0d:e0: 95:6f:48:1c:03:83:65:19:dd:1e:ea:86:90:75:3b:69:ad:be: 9f:54:96:02:e0:82:0d:58:f5:4b:15:0a:02:ce:a5:b9:ae:df: 47:2b:94:28:80:fa:6b:50:37:f8:16:d0:ad:71:0a:be:f6:50: 35:3a:4f:9b:64:5a:3b:fc:62:4f:60:d8:66:2b:64:a9:c4:2c: a1:5b:96:bc:3b:be:88:7e:a8:35:f5:5d:1f:7b:11:dd:a9:4c: f1:e8:79:31:b6:c6:c9:45:d2:8d:92:30:a1:6b:d9:00:9f:c8: ca:95:c5:a1:e1:44:6d:e7:61:10:b6:3d:7b:ef:c3:d8:5e:3a: 7c:0d:af:d4:01:5e:09:b0:a9:be:08:c8:89:b7:3d:14:1f:06: 34:f1:c8:0c:f2:09:37:a0:96:82:40:05:29:f7:cf:a8:09:b8: 98:aa:22:ec -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIzMTYxMTAzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFEQjUzQjExMC8GA1UEBRMoNDRBNkE1RTREMUMyQjhFRkUzOUU5RDAz QUEzQjM3OTBCQzBCODMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AI3NynKarUHroARLe3ZMsqFk3o//CfMOdE3sbFXlouECsZsz7O5bS+E4+wI7v7eZ hXJ9T/ttEsJPkzSlcyOPDggxAtuV3epj0rDKEzkgjT6k8R41b5cLVWAxqfLN4jl+ XwodEtkfncrTLifyVPNLr3D59tNpzrVp5FEDhVewc3iCZUidpJCzRBFGfg1FxDef ZXw4MGm7wB1lnWemCVA+mh02AkHamRXYgMdOCuBQvuIY3gWNniHwlGRUhiQWonwC o35fDWHnMx4y14OiBwE2wsc/BCX0ayAnyHQtzBNjl2/adAaDqKrg8ofy9iCVsWh9 y+9JiprqqXdhptqI/gtyMXkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBREpqXk0cK4 7+OenQOqOzeQvAuDKjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI1M0IvRjdFRDVCQTBFMDE5MTFGMDhBRDNFQjhENjI2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURCNTNCL0Y3RUQ1QkEwRTAxOTExRjA4QUQzRUI4RDYyNkY1NkJDL1JLYWw1TkhD dU9fam5wMERxanMza0x3TGd5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPRjANBgkqhkiG9w0BAQsFAAOCAQEAeJ64bNav5eXcQxFl3mAq Zv4xAJAI2m3lhGO7ciBwzOmf9xfRv9wvk5FBPGn6GleZv5G8Hhw/p9+k5Lu931xv PBkvCCsYsXns+dd6HiDUV3X6dj8SRFg8JA3glW9IHAODZRndHuqGkHU7aa2+n1SW AuCCDVj1SxUKAs6lua7fRyuUKID6a1A3+BbQrXEKvvZQNTpPm2RaO/xiT2DYZitk qcQsoVuWvDu+iH6oNfVdH3sR3alM8eh5MbbGyUXSjZIwoWvZAJ/IypXFoeFEbedh ELY9e+/D2F46fA2v1AFeCbCpvgjIibc9FB8GNPHIDPIJN6CWgkAFKffPqAm4mKoi 7A== -----END CERTIFICATE-----Generated at Wed Dec 24 21:01:29 2025 by rpki-client