This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer (raw, json) Hash identifier: X7twP1tDP8uiWzsTZJ2CUYowIdNLrq4XWMyNK7f1yrg= Subject key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EFD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft caRepository: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 12:28:49 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.129.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28413 (0x6efd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 27 12:28:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:bb:16:de:2e:4b:cc:16:2b:4c:64:f9:41: ca:36:f9:65:a7:9d:f5:78:75:1b:f3:3e:bd:99:2f: f7:57:15:fa:8c:0d:6b:2f:57:36:a2:ff:35:fb:db: dd:12:0b:5a:7e:88:11:67:25:22:79:a1:77:18:db: 83:6e:60:5f:58:65:d3:6c:b0:83:a9:3e:88:e4:a9: 83:d1:5f:d4:ab:d8:a5:38:fc:9f:74:7f:c7:bc:5f: 89:66:21:a4:a8:85:b8:e2:a3:23:36:38:94:88:ef: f4:e7:5e:7c:2e:77:c7:de:4d:2f:58:5e:67:55:f6: 98:76:5f:ee:1a:28:77:34:cf:05:ca:2c:fd:56:e7: 90:96:d5:ea:2a:60:5d:d6:38:f7:bf:45:71:ff:08: 47:ea:7d:39:f0:de:a0:c4:c4:5f:a5:ca:81:73:1a: c9:e5:fb:31:96:fd:41:b7:b1:ba:94:0e:c0:d6:fd: 26:ac:56:46:82:1f:06:ed:55:e8:a8:6e:87:f7:f7: 72:c5:e0:45:dc:70:b7:0c:7d:36:40:d1:06:df:7e: e6:68:e8:bd:11:01:ae:22:82:bf:20:10:db:da:fd: 05:0e:00:4c:5e:83:29:8e:28:1f:1b:7a:ab:6f:79: 2e:b4:0d:c9:e6:b3:b2:a2:3f:3f:81:89:b6:36:6a: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.129.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ad:5f:cd:1d:b1:ea:01:79:11:48:46:6e:13:34:04:88:30: 50:53:4c:22:87:a3:cd:ef:25:3b:13:5f:05:65:80:7a:49:e2: 70:c2:c8:ae:5c:4b:24:a6:ec:a7:40:f3:a7:1e:be:fe:e7:a7: 90:28:07:b5:10:89:04:44:9c:16:9a:66:d5:3a:c0:44:1a:f8: 52:91:2c:ac:a4:07:59:d2:bf:01:4b:28:26:c9:00:60:c2:60: 59:f7:03:a5:02:13:70:e8:c4:e0:96:5d:b6:a4:25:aa:a6:b8: b4:e7:5a:34:b9:55:03:36:86:51:a3:d1:a4:fd:11:df:ba:70: 7d:81:d1:bf:d1:61:db:9e:22:98:b9:8e:fa:8e:59:4a:93:9b: 87:98:74:33:f7:30:9c:3a:34:cb:ef:d6:fd:a6:d3:29:ab:0b: 49:0f:a1:e6:93:eb:f3:3c:b2:42:95:85:2b:26:9b:55:ca:0c: 52:70:cf:2d:95:cc:1d:4b:2b:70:38:b7:6b:26:35:98:9a:58: f1:28:d5:bd:c4:09:f7:90:4c:4c:29:fc:07:e5:e8:b9:f0:db: 34:8a:72:70:77:30:82:6f:6b:ca:02:9f:08:3a:f6:14:6a:60: 96:f0:31:b2:f1:8f:4e:e8:ff:5c:72:6d:f3:da:01:2f:52:1d: c9:a7:d0:a1 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI3MTIyODQ5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTExQjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDcz RTY2MjVCMUExNkU3NTIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOvLuxbeLkvMFitMZPlByjb5Zaed9Xh1G/M+vZkv91cV+owNay9XNqL/Nfvb3RIL Wn6IEWclInmhdxjbg25gX1hl02ywg6k+iOSpg9Ff1KvYpTj8n3R/x7xfiWYhpKiF uOKjIzY4lIjv9OdefC53x95NL1heZ1X2mHZf7hoodzTPBcos/VbnkJbV6ipgXdY4 979Fcf8IR+p9OfDeoMTEX6XKgXMayeX7MZb9QbexupQOwNb9JqxWRoIfBu1V6Khu h/f3csXgRdxwtwx9NkDRBt9+5mjovREBriKCvyAQ29r9BQ4ATF6DKY4oHxt6q295 LrQNyeazsqI/P4GJtjZqMtMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRkUVU+Cdwk 3dvFQHPmYlsaFudSEzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QUMvQkMxRjdEQjZCOTIxMTFGMEJGNEQzOTQwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCNUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25j Sk4zYnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8gTANBgkqhkiG9w0BAQsFAAOCAQEAnK1fzR2x6gF5EUhGbhM0 BIgwUFNMIoejze8lOxNfBWWAeknicMLIrlxLJKbsp0Dzpx6+/uenkCgHtRCJBESc Fppm1TrARBr4UpEsrKQHWdK/AUsoJskAYMJgWfcDpQITcOjE4JZdtqQlqqa4tOda NLlVAzaGUaPRpP0R37pwfYHRv9Fh254imLmO+o5ZSpObh5h0M/cwnDo0y+/W/abT KasLSQ+h5pPr8zyyQpWFKyabVcoMUnDPLZXMHUsrcDi3ayY1mJpY8SjVvcQJ95BM TCn8B+XoufDbNIpycHcwgm9rygKfCDr2FGpglvAxsvGPTuj/XHJt89oBL1IdyafQ oQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:25 2025 by rpki-client