This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer (raw, json) Hash identifier: 7tApa4rT7SSIJTp0E7ZmdX77bSwkbya7ptBefdxOFeQ= Subject key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E38 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft caRepository: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 10:35:54 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.150.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28216 (0x6e38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 17 10:35:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:7c:e2:ee:8b:de:ef:06:a2:45:45:77:c4: e5:18:98:f4:0f:78:bf:1c:8a:9b:9c:92:42:56:1b: 14:1d:ef:bc:cd:50:08:07:be:2e:2e:e9:f4:e3:54: 88:e0:b5:da:73:ac:5e:8d:d1:4c:b1:1f:00:02:1e: bd:8c:dd:d7:64:bb:48:72:67:18:7d:4a:3b:03:7c: 05:3f:ab:a9:fc:c0:9d:d9:4f:48:01:56:1a:5b:2c: 1e:3a:7a:f2:2f:1f:3c:19:c3:d0:af:b1:2c:04:1b: 14:2d:16:61:c4:ce:3d:5e:aa:c8:5e:a3:ee:be:82: 26:77:87:07:d4:13:0e:4d:c4:3e:8a:24:72:20:f4: 8a:50:59:82:ea:d1:01:f4:ac:d7:e1:90:83:b2:24: 3b:de:87:03:a0:57:ad:75:02:73:4e:83:b8:56:b6: 86:fb:54:84:1c:77:37:d8:20:4b:75:68:82:0c:0e: 50:54:fb:61:fb:62:34:d5:43:27:df:7d:7f:dd:f5: 37:44:3a:78:4b:5f:3b:d3:c8:07:e6:84:b1:1d:67: 47:3b:3a:d7:fd:aa:09:4c:ef:41:dc:c9:79:2f:5f: 58:57:3d:fc:73:73:7a:20:54:62:eb:d9:14:58:e5: 4d:db:3a:23:91:54:3f:24:8d:99:62:84:34:0a:63: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.150.0/23 Signature Algorithm: sha256WithRSAEncryption 65:06:60:8b:be:bc:bb:3c:b8:0a:a6:cb:89:a2:dd:e4:ac:bd: c5:97:e3:db:98:9c:ec:81:10:b0:ca:c3:5f:c6:5f:57:00:b5: ef:a0:52:7c:5f:8f:54:b1:13:4b:b1:42:ca:51:2a:43:4d:46: dd:1e:89:7e:96:20:99:1a:f2:c7:79:5b:cc:09:a4:61:73:58: 00:f5:26:f3:06:af:d5:2d:59:b7:10:1d:35:77:cc:32:c5:d8: 68:9a:46:6c:c8:56:85:10:3d:aa:75:3b:a8:4b:f1:3e:c5:1a: 5a:d2:db:2d:d4:39:87:02:10:fa:67:56:14:c9:9d:ed:ef:4f: eb:3a:d7:fb:ba:0c:9c:8b:87:e6:80:69:90:23:07:a5:9a:bd: ec:dc:be:59:6e:41:6c:49:7f:49:36:57:4d:87:42:69:0e:78: 94:d2:34:22:d7:85:9a:8a:36:be:78:8e:8a:4d:8a:75:f2:08: d8:e3:56:15:e3:77:4b:a5:e8:6b:5a:bd:d6:d3:1a:81:98:00: 34:a6:da:3b:b0:b0:d3:2d:7a:e2:44:fe:fd:2c:7b:48:4a:21: b7:ea:00:80:ab:96:89:05:43:f8:07:dc:b4:f2:63:e3:33:f8: c9:1f:35:26:c9:69:71:99:16:65:29:3d:2e:a3:d5:6b:ee:ab: 42:13:2a:f8 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE3MTAzNTU0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzRTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFG NjhGQTQ2NEY0OTUyMzY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALLFfOLui97vBqJFRXfE5RiY9A94vxyKm5ySQlYbFB3vvM1QCAe+Li7p9ONUiOC1 2nOsXo3RTLEfAAIevYzd12S7SHJnGH1KOwN8BT+rqfzAndlPSAFWGlssHjp68i8f PBnD0K+xLAQbFC0WYcTOPV6qyF6j7r6CJneHB9QTDk3EPookciD0ilBZgurRAfSs 1+GQg7IkO96HA6BXrXUCc06DuFa2hvtUhBx3N9ggS3VoggwOUFT7YftiNNVDJ999 f931N0Q6eEtfO9PIB+aEsR1nRzs61/2qCUzvQdzJeS9fWFc9/HNzeiBUYuvZFFjl Tds6I5FUPySNmWKENApjtb0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRVc8VorgFI FNG03q9o+kZPSVI2YTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U2MTQvMkZEOTAwRTBDM0ExMTFGMDlCMUJDMzM5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNFNjE0LzJGRDkwMEUwQzNBMTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRC U0JUUnRONnZhUHBHVDBsU05tRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8ljANBgkqhkiG9w0BAQsFAAOCAQEAZQZgi768uzy4CqbLiaLd 5Ky9xZfj25ic7IEQsMrDX8ZfVwC176BSfF+PVLETS7FCylEqQ01G3R6JfpYgmRry x3lbzAmkYXNYAPUm8wav1S1ZtxAdNXfMMsXYaJpGbMhWhRA9qnU7qEvxPsUaWtLb LdQ5hwIQ+mdWFMmd7e9P6zrX+7oMnIuH5oBpkCMHpZq97Ny+WW5BbEl/STZXTYdC aQ54lNI0IteFmoo2vniOik2KdfII2ONWFeN3S6Xoa1q91tMagZgANKbaO7Cw0y16 4kT+/Sx7SEoht+oAgKuWiQVD+AfctPJj4zP4yR81JslpcZkWZSk9LqPVa+6rQhMq +A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:36 2025 by rpki-client