This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer File: TI8rREM6tGSnFK2NOajxbkxQCnw.cer (raw, json) Hash identifier: fwhDAjwvTIradYVzNuNtNM6T7Xxo7kN3U28lfwI+7Ac= Subject key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E81 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 04:43:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.196.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28289 (0x6e81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 20 04:43:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:10:49:69:69:c0:1f:59:3b:2b:1d:6b:5a: a2:b7:61:7d:ba:d3:d4:9d:63:eb:17:7c:6b:e1:fc: 1f:d3:83:ae:6e:ec:f9:17:a7:13:bf:dc:a0:16:5f: e8:76:36:13:67:7b:d6:e0:68:af:f6:8c:44:12:6f: fb:6a:24:ca:3a:48:84:f0:b5:9b:14:0c:cd:0f:09: 71:0e:83:9c:fc:99:97:74:02:d0:04:8a:fb:9f:83: 9c:1f:1c:63:3e:f0:c8:2d:fb:7f:fe:b9:cc:57:59: 73:51:c4:a4:d1:d2:27:8c:04:31:5b:ca:10:2b:71: 73:fa:89:bb:59:d4:ea:67:b5:0f:b5:05:1e:e5:e0: 69:16:14:4e:f2:44:2c:5b:4a:c1:3a:5e:b8:8f:a0: d4:f1:6d:cc:da:d9:15:e7:f3:85:d6:4a:92:29:9f: 36:f6:c5:f8:3b:90:e5:2c:b7:b1:e0:ed:00:d6:c0: 3f:6b:17:e2:73:34:be:4a:d1:84:11:9e:8e:11:3a: c0:e1:38:54:8f:7d:03:c4:b1:ff:12:37:8b:08:74: a4:0f:55:7c:57:21:69:69:be:8d:75:f2:ac:97:78: 2b:c0:c0:16:28:fc:89:c1:29:53:b3:ca:26:5e:6f: 4c:08:86:0f:79:b3:e8:56:07:6b:dd:dd:93:f5:0c: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.196.0/23 Signature Algorithm: sha256WithRSAEncryption 78:83:07:26:c8:8b:72:72:c6:14:70:6d:07:15:5c:c2:0b:01: 21:49:4e:2e:39:e7:24:c1:7c:dd:76:9a:6a:b5:25:7d:63:28: 4f:71:a5:51:57:60:5b:2e:ae:23:b6:29:04:48:94:9f:97:b4: 38:12:f1:7b:34:5e:97:55:12:bc:d6:28:f5:a0:2f:39:f9:f8: fb:4e:4d:75:b1:26:29:34:dc:86:03:1e:92:65:c6:1f:d0:18: ba:e9:8d:b2:6f:c0:c2:73:ab:93:01:8f:f5:1f:d0:dd:bc:48: 86:df:bd:3b:10:c1:c0:59:8d:a1:60:81:46:4b:b4:32:d4:f8: f3:ab:e7:e8:75:85:df:bc:b5:39:4d:69:32:f2:51:09:a6:30: b5:76:92:d5:22:1a:7e:df:2a:7f:5b:44:b6:a1:92:82:7f:dc: ed:41:23:8b:ad:91:5d:38:65:b8:22:5b:fb:8a:c3:45:d4:95: e1:90:8d:17:4e:02:1a:cb:05:69:9b:72:ad:f2:8a:df:34:fd: 65:3d:c4:e5:f6:60:6b:bc:63:5c:2c:f4:4d:e8:4f:19:b9:66: 68:ee:f1:1d:2c:c1:91:ed:f1:a4:cb:ad:0c:9e:b8:89:f3:98: cf:ed:ae:4f:fd:2e:00:d7:16:fe:03:c6:b4:fe:d2:03:32:22: 31:1d:bf:92 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICboEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTIwMDQ0MzEzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTExNjI5NzExMC8GA1UEBRMoNEM4RjJCNDQ0MzNBQjQ2NEE3MTRBRDhE MzlBOEYxNkU0QzUwMEE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANnjEElpacAfWTsrHWtaordhfbrT1J1j6xd8a+H8H9ODrm7s+RenE7/coBZf6HY2 E2d71uBor/aMRBJv+2okyjpIhPC1mxQMzQ8JcQ6DnPyZl3QC0ASK+5+DnB8cYz7w yC37f/65zFdZc1HEpNHSJ4wEMVvKECtxc/qJu1nU6me1D7UFHuXgaRYUTvJELFtK wTpeuI+g1PFtzNrZFefzhdZKkimfNvbF+DuQ5Sy3seDtANbAP2sX4nM0vkrRhBGe jhE6wOE4VI99A8Sx/xI3iwh0pA9VfFchaWm+jXXyrJd4K8DAFij8icEpU7PKJl5v TAiGD3mz6FYHa93dk/UMtUcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRMjytEQzq0 ZKcUrY05qPFuTFAKfDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTYyOTcvNkE1OEFEOEVDNUNCMTFGMDg1QTlCQzU4QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE2Mjk3LzZBNThBRDhFQzVDQjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02 dEdTbkZLMk5PYWp4Ymt4UUNudy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8xDANBgkqhkiG9w0BAQsFAAOCAQEAeIMHJsiLcnLGFHBtBxVc wgsBIUlOLjnnJMF83XaaarUlfWMoT3GlUVdgWy6uI7YpBEiUn5e0OBLxezRel1US vNYo9aAvOfn4+05NdbEmKTTchgMekmXGH9AYuumNsm/AwnOrkwGP9R/Q3bxIht+9 OxDBwFmNoWCBRku0MtT486vn6HWF37y1OU1pMvJRCaYwtXaS1SIaft8qf1tEtqGS gn/c7UEji62RXThluCJb+4rDRdSV4ZCNF04CGssFaZtyrfKK3zT9ZT3E5fZga7xj XCz0TehPGblmaO7xHSzBke3xpMutDJ64ifOYz+2uT/0uANcW/gPGtP7SAzIiMR2/ kg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:36 2025 by rpki-client