This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer File: _UmlE0ai96yBGwCtYuvvDpSiobI.cer (raw, json) Hash identifier: IeU3rove1FWyD/dDIybDXuww5ANc5XJIv4qW7rnQ78E= Subject key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E7E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 01:44:10 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.96.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28286 (0x6e7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 20 01:44:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:a2:03:87:75:f1:75:e9:82:7e:e1:50:bc: a5:d7:91:e7:2d:2f:a4:1e:1a:c2:b4:6a:79:60:7e: 52:25:01:46:8b:77:4d:01:ab:97:0c:9e:ac:e1:60: f4:d9:a8:49:24:10:6e:a5:46:46:5c:c2:7e:41:0a: a4:2f:2c:96:3d:58:3f:df:24:86:6c:19:c0:8e:d7: 26:fb:e6:46:e8:40:98:10:9f:30:17:98:20:6a:24: 22:ca:60:b4:4a:85:0e:b7:a7:be:8b:68:3b:9f:72: ee:75:ec:e8:5b:59:bc:70:23:0f:b3:13:3e:5f:3e: f4:0b:ea:17:f2:2e:0e:d8:f1:b8:c6:ff:32:5c:4a: 66:1c:84:96:66:0c:3c:fa:5a:76:5b:a2:40:94:35: 26:ef:be:11:9b:0d:15:39:9d:26:83:ba:65:b8:5d: d7:84:e8:51:66:80:2e:50:49:12:37:1e:34:0f:79: 24:fa:a3:a4:f8:87:ef:c5:38:38:6a:b6:cd:c8:a0: ab:2f:61:83:dc:83:08:ae:65:e0:03:2d:a3:9f:9c: f3:c4:6b:ae:4f:76:8e:95:cc:73:a4:18:fb:96:04: a9:78:b6:4e:b9:ab:00:d3:93:60:69:be:00:78:2d: 0d:17:a7:95:0c:96:f2:63:a3:d9:79:8b:68:b1:97: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.96.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:af:83:0c:97:ee:b7:ae:80:a3:76:9e:1b:92:9c:c8:30:43: 36:07:59:2e:02:a6:45:83:20:15:a4:ea:9c:67:03:77:ec:d7: 95:a0:a5:77:64:ab:2b:10:1e:6b:14:db:84:b3:56:00:bf:b8: 76:4f:22:09:e2:1b:7b:6a:c1:11:8d:07:8d:ef:10:b3:37:96: d7:36:cc:ba:80:dc:46:56:b4:48:a2:30:02:b5:14:10:2d:34: f7:ad:4c:64:31:98:e9:09:ec:bf:28:88:92:22:fb:b3:c7:42: 15:f8:fc:20:4e:5c:90:09:c5:1e:71:c1:19:ad:81:35:2d:b5: fd:06:9c:ea:75:51:3e:db:5a:ef:a8:b3:f9:1c:f2:b6:7c:2a: f1:3e:4c:b2:27:e3:59:c4:c2:bb:05:00:f5:4e:92:1c:c9:42: d8:90:19:7d:28:a2:4a:fb:0a:bc:7f:e5:2f:e1:24:8f:b5:64: e5:6c:46:9a:e8:90:d9:f1:7b:19:ff:cc:97:55:ca:56:81:27: a0:b4:6a:a9:51:a0:42:e6:21:80:df:ba:22:f6:cb:97:46:c5: 22:64:73:3d:d5:96:99:3c:96:df:32:cf:e0:31:f8:1d:38:4d: f1:0c:7c:50:14:34:a9:8c:f8:df:94:7d:7d:de:57:77:0b:34: f3:8f:41:0e -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTIwMDE0NDEwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2NTJCNTExMC8GA1UEBRMoRkQ0OUE1MTM0NkEyRjdBQzgxMUIwMEFE NjJFQkVGMEU5NEEyQTFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALufogOHdfF16YJ+4VC8pdeR5y0vpB4awrRqeWB+UiUBRot3TQGrlwyerOFg9Nmo SSQQbqVGRlzCfkEKpC8slj1YP98khmwZwI7XJvvmRuhAmBCfMBeYIGokIspgtEqF DrenvotoO59y7nXs6FtZvHAjD7MTPl8+9AvqF/IuDtjxuMb/MlxKZhyElmYMPPpa dluiQJQ1Ju++EZsNFTmdJoO6Zbhd14ToUWaALlBJEjceNA95JPqjpPiH78U4OGq2 zcigqy9hg9yDCK5l4AMto5+c88Rrrk92jpXMc6QY+5YEqXi2TrmrANOTYGm+AHgt DRenlQyW8mOj2XmLaLGXbd0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT9SaUTRqL3 rIEbAK1i6+8OlKKhsjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyQjUvNjY3OUQ4QkVDNUIyMTFGMDg2MjI3OTJCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1MkI1LzY2NzlEOEJFQzVCMjExRjA4NjIyNzkyQkM0RjlBRTAyL19VbWxFMGFp OTZ5Qkd3Q3RZdXZ2RHBTaW9iSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8YDANBgkqhkiG9w0BAQsFAAOCAQEAb6+DDJfut66Ao3aeG5Kc yDBDNgdZLgKmRYMgFaTqnGcDd+zXlaCld2SrKxAeaxTbhLNWAL+4dk8iCeIbe2rB EY0Hje8QszeW1zbMuoDcRla0SKIwArUUEC00961MZDGY6QnsvyiIkiL7s8dCFfj8 IE5ckAnFHnHBGa2BNS21/Qac6nVRPtta76iz+Rzytnwq8T5MsifjWcTCuwUA9U6S HMlC2JAZfSiiSvsKvH/lL+Ekj7Vk5WxGmuiQ2fF7Gf/Ml1XKVoEnoLRqqVGgQuYh gN+6IvbLl0bFImRzPdWWmTyW3zLP4DH4HThN8Qx8UBQ0qYz435R9fd5Xdws0849B Dg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:28 2025 by rpki-client