This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer (raw, json) Hash identifier: Na174g7ZxI8WRJngdpurskLvrPh+QxcyCOq5j+9Dmlg= Subject key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F54 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:33:04 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.102.239.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28500 (0x6f54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 13:33:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:a9:c3:b6:a5:4b:ab:e4:55:12:5c:0d:71: b6:3e:f3:e6:3e:3a:0e:70:34:f5:75:39:6d:1a:d6: 71:1c:94:1c:73:1d:b0:7d:bf:e4:17:bb:9d:d3:01: c0:79:6b:2b:f7:db:50:4b:5f:4a:45:d3:6a:e3:d5: f2:3f:2e:d7:10:f2:ab:80:61:5a:ab:b7:d4:88:82: 77:96:cf:c5:ff:e7:21:fe:4b:eb:44:42:bc:f3:d3: ea:a6:78:80:d0:a9:5d:97:df:40:11:4f:41:5e:d4: 7e:e2:f5:d5:b3:d8:55:c5:c7:42:ef:e4:ba:1a:3a: 02:c3:04:fc:c9:3a:e7:bd:4d:3a:4d:54:6e:3a:dc: f9:de:24:ad:08:a1:6b:3a:05:d8:d7:b4:c7:41:e8: 4f:64:e0:81:ff:d3:39:a1:5b:8e:91:db:2b:4c:13: b2:68:b3:67:0e:fd:3c:87:2e:16:96:d7:48:79:f3: 10:5d:46:fd:d5:9f:2a:3d:c7:ad:14:8b:88:0a:0a: 1a:74:ca:a5:77:14:7a:fb:1e:c0:b7:55:70:99:19: 1e:74:29:6e:d8:f6:16:10:88:b8:ea:5a:c1:28:91: 58:5a:a1:37:61:80:bc:00:57:07:0f:fb:02:41:4c: 4e:72:71:72:7d:2c:78:ea:e2:3d:53:42:b0:9d:cc: 68:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.102.239.0/24 Signature Algorithm: sha256WithRSAEncryption 20:60:0a:8c:39:b8:8b:05:c8:da:85:21:5c:a4:e7:86:5a:9c: e9:a7:52:94:bf:72:3e:aa:cc:65:60:6f:a7:d1:73:fc:f8:c1: 2b:7e:92:15:28:cb:7e:83:c3:48:29:10:00:3e:21:84:36:8d: 76:bf:a1:db:35:ac:52:af:0f:9f:39:23:84:d9:8e:38:35:0a: f7:59:01:7e:8e:6e:10:11:a9:f2:b5:6c:5a:0c:bc:94:bd:85: ca:e7:24:cd:10:fe:49:ed:1e:87:28:0d:58:ba:b0:59:7c:57: ee:ec:a1:24:1d:01:b5:86:71:91:3b:b1:d1:42:11:53:cd:61: e3:94:3d:b8:48:c8:2a:73:6e:3c:b4:55:fb:e8:53:e8:d9:ca: 7f:bb:34:5d:ca:81:58:4d:c9:11:8c:10:8c:6f:77:0c:fa:fd: f3:22:00:af:2d:d4:5c:5e:99:6f:28:b0:4f:5c:cc:c3:8f:3a: 69:82:6f:6c:85:f4:9a:84:dc:f5:25:fa:fd:b1:c5:6d:70:6a: d9:f0:07:6a:fd:28:6f:e5:20:18:99:9d:fa:da:1d:93:62:b5: db:bd:64:08:c0:8e:33:1f:9e:11:68:8a:86:53:88:96:e9:44: 75:bb:1b:43:ad:43:7c:85:9c:1a:24:9e:f8:42:4c:d8:ae:fb: 0a:ab:83:1a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTMzMzA0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGQkQ4OTExMC8GA1UEBRMoNUMzMjdCNEEyMzVCRjg5MEZEMjY5MUZC MDNFOTRBNkYxNkNCRjIzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKMeqcO2pUur5FUSXA1xtj7z5j46DnA09XU5bRrWcRyUHHMdsH2/5Be7ndMBwHlr K/fbUEtfSkXTauPV8j8u1xDyq4BhWqu31IiCd5bPxf/nIf5L60RCvPPT6qZ4gNCp XZffQBFPQV7UfuL11bPYVcXHQu/kuho6AsME/Mk6571NOk1Ubjrc+d4krQihazoF 2Ne0x0HoT2Tggf/TOaFbjpHbK0wTsmizZw79PIcuFpbXSHnzEF1G/dWfKj3HrRSL iAoKGnTKpXcUevsewLdVcJkZHnQpbtj2FhCIuOpawSiRWFqhN2GAvABXBw/7AkFM TnJxcn0seOriPVNCsJ3MaHkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRcMntKI1v4 kP0mkfsD6UpvFsvyPDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkJEODkvNzVCMjg2QzJBRTk2MTFFRDhBOTY1NjY0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZCRDg5Lzc1QjI4NkMyQUU5NjExRUQ4QTk2NTY2NEM0RjlBRTAyL1hESjdTaU5i LUpEOUpwSDdBLWxLYnhiTDhqdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMBm7zANBgkqhkiG9w0BAQsFAAOCAQEAIGAKjDm4iwXI2oUhXKTn hlqc6adSlL9yPqrMZWBvp9Fz/PjBK36SFSjLfoPDSCkQAD4hhDaNdr+h2zWsUq8P nzkjhNmOODUK91kBfo5uEBGp8rVsWgy8lL2FyuckzRD+Se0ehygNWLqwWXxX7uyh JB0BtYZxkTux0UIRU81h45Q9uEjIKnNuPLRV++hT6NnKf7s0XcqBWE3JEYwQjG93 DPr98yIAry3UXF6ZbyiwT1zMw486aYJvbIX0moTc9SX6/bHFbXBq2fAHav0ob+Ug GJmd+todk2K1271kCMCOMx+eEWiKhlOIlulEdbsbQ61DfIWcGiSe+EJM2K77CquD Gg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:49 2025 by rpki-client