This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer File: adZjNUxrsvo0MdQq-FaCEER_2-E.cer (raw, json) Hash identifier: kmJaHMjDYbodH6/braRYsgk8CK4Fupj3DqvaApUPTa0= Subject key identifier: 69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6CEA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft caRepository: rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 28 Oct 2025 07:44:10 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: IP: 165.101.106.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27882 (0x6cea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Oct 28 07:44:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A9150F54, serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:6c:26:46:af:71:f5:2f:91:2e:eb:4b:e9: 47:75:0b:2f:62:d2:a7:75:59:2b:59:a5:49:99:58: ec:3d:d9:09:89:fc:69:4c:13:14:7a:9e:b0:a3:cf: c9:7a:0f:a5:03:d6:f9:a5:02:58:ac:91:66:65:34: aa:26:2a:8c:4f:ca:12:5a:71:b8:ee:07:c2:53:a2: 82:ff:85:9d:1e:a0:79:23:bc:ba:78:a2:d5:2c:b2: e9:b9:bd:27:d3:b5:8b:48:85:91:59:8b:21:ca:8d: 5b:e8:fd:05:d6:af:00:05:7d:8f:c4:a3:8b:81:77: f8:8c:24:f4:cf:77:b6:04:f2:d4:9d:93:d6:47:f0: 3d:35:78:24:87:25:cf:75:73:26:6e:93:8f:35:d4: 42:bc:fe:87:13:1a:43:7c:c8:b5:03:3a:2b:cc:71: 55:26:1d:86:70:23:cd:76:bd:fe:16:f6:ef:dc:64: 61:6e:bc:86:c6:60:54:00:c6:7b:f6:c7:6e:04:70: 23:4b:09:af:91:3f:44:e1:be:37:e2:26:a5:79:86: 71:da:3f:2f:20:73:47:f3:07:3a:de:d5:3d:fc:dd: be:4d:14:8b:a2:6b:38:bc:2d:e1:de:29:0f:bd:b5: ae:94:51:3d:3b:55:79:30:bd:d7:42:20:4d:02:20: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.106.0/24 Signature Algorithm: sha256WithRSAEncryption 65:a3:0f:65:b6:c7:16:d8:f4:f1:3b:1d:dc:e0:32:46:9d:c9: fc:5e:52:b5:af:c7:05:62:09:db:14:80:5f:a8:14:08:e0:6d: 5c:26:4a:d5:21:59:88:e5:11:df:0a:01:9e:89:76:41:2a:73: cc:52:7f:70:93:70:e1:12:a0:b5:da:56:c6:1c:d9:a6:b6:c6: b0:12:a4:b8:5a:e7:ef:31:cd:b2:fc:5c:6f:3b:ae:d2:8d:48: 24:af:33:1a:0c:c4:90:c3:87:ad:37:0b:64:3b:b5:e9:cf:a3: bb:e6:d0:95:b0:05:98:97:c0:ff:57:f3:95:03:b3:23:f8:80: 9a:40:94:97:85:26:4c:b3:b8:af:8a:f6:90:d1:74:5b:af:86: 86:e2:12:56:a0:4d:0b:4f:8d:ca:2f:9e:f7:6a:7b:79:64:70: d9:cb:ac:fe:a8:dd:d6:84:f7:61:df:b7:c1:66:f6:f1:93:a4: 7d:13:af:a0:4a:ce:5d:fe:b6:21:d3:68:8c:8f:d4:d2:23:f6: 21:99:98:09:a6:37:f9:88:0f:5c:fd:73:cc:55:d4:66:1d:03: ab:6a:db:80:e0:6e:4f:07:b0:02:5d:0c:8a:c6:65:31:2a:8b: 3c:68:b0:1a:fc:95:f3:ce:44:a3:69:9b:5e:95:05:cb:2e:f9: 1f:7e:31:42 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMDI4MDc0NDEwWhcNMjYwOTMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1MEY1NDExMC8GA1UEBRMoNjlENjYzMzU0QzZCQjJGQTM0MzFENDJB Rjg1NjgyMTA0NDdGREJFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANS3bCZGr3H1L5Eu60vpR3ULL2LSp3VZK1mlSZlY7D3ZCYn8aUwTFHqesKPPyXoP pQPW+aUCWKyRZmU0qiYqjE/KElpxuO4HwlOigv+FnR6geSO8unii1Syy6bm9J9O1 i0iFkVmLIcqNW+j9BdavAAV9j8Sji4F3+Iwk9M93tgTy1J2T1kfwPTV4JIclz3Vz Jm6TjzXUQrz+hxMaQ3zItQM6K8xxVSYdhnAjzXa9/hb279xkYW68hsZgVADGe/bH bgRwI0sJr5E/ROG+N+ImpXmGcdo/LyBzR/MHOt7VPfzdvk0Ui6JrOLwt4d4pD721 rpRRPTtVeTC910IgTQIg2nUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRp1mM1TGuy +jQx1Cr4VoIQRH/b4TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBGNTQvRTExNjNFMENCM0QxMTFGMDg4ODZBNzVCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUwRjU0L0UxMTYzRTBDQjNEMTExRjA4ODg2QTc1QkM0RjlBRTAyL2FkWmpOVXhy c3ZvME1kUXEtRmFDRUVSXzItRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKVlajANBgkqhkiG9w0BAQsFAAOCAQEAZaMPZbbHFtj08Tsd3OAy Rp3J/F5Sta/HBWIJ2xSAX6gUCOBtXCZK1SFZiOUR3woBnol2QSpzzFJ/cJNw4RKg tdpWxhzZprbGsBKkuFrn7zHNsvxcbzuu0o1IJK8zGgzEkMOHrTcLZDu16c+ju+bQ lbAFmJfA/1fzlQOzI/iAmkCUl4UmTLO4r4r2kNF0W6+GhuISVqBNC0+Nyi+e92p7 eWRw2cus/qjd1oT3Yd+3wWb28ZOkfROvoErOXf62IdNojI/U0iP2IZmYCaY3+YgP XP1zzFXUZh0Dq2rbgOBuTwewAl0MisZlMSqLPGiwGvyV885Eo2mbXpUFyy75H34x Qg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:28 2025 by rpki-client