This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer File: fTWFKD3zPrULnDiNWc14bLudw54.cer (raw, json) Hash identifier: xyRvzojm2DKf70rAtFkgxTj64pQWqR4TxClML5gxs0Q= Subject key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E14 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft caRepository: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 23:42:22 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.206.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28180 (0x6e14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 13 23:42:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:c8:9a:a3:52:6d:a7:5c:91:95:08:95:2a: 97:bd:20:71:0c:b0:6f:76:5b:0e:b2:10:e9:52:cd: f9:53:ff:52:7d:72:92:5b:d0:1f:ca:8d:9a:7d:ce: 48:b0:47:f2:ce:35:c6:56:0c:14:b5:69:e5:ea:79: 22:fb:99:db:ec:e6:6f:8a:1d:bc:52:e5:54:46:35: 54:35:df:e2:a2:42:1f:e8:9a:6a:f6:6d:4d:03:fc: cf:47:96:b4:f2:d7:8e:44:26:53:fe:ae:9d:3b:81: 27:ac:f4:ee:96:84:e4:60:58:a0:6e:0d:a3:99:e7: af:f2:d0:ef:a8:9c:e2:f7:0c:a0:f8:79:60:3a:1a: dd:b3:cf:f6:58:eb:f6:a9:2b:c3:f9:cd:33:9a:20: ef:2d:1d:1b:3f:eb:24:16:4a:e2:b7:99:c9:e4:4a: 3c:58:f0:35:84:09:75:e6:5f:22:a3:12:cf:eb:54: 08:bd:b1:e7:bf:de:ea:d8:92:d1:54:ab:b8:8c:41: 4a:62:c4:4b:e2:e7:9a:f8:d9:72:0d:f7:5f:6d:97: 47:fa:6e:44:6b:48:3f:68:8c:a3:86:66:7f:e3:f7: 87:9a:ad:aa:7e:07:81:ab:09:35:65:b7:d9:87:5f: 5a:17:0a:53:03:d7:05:42:c2:14:29:57:ac:25:02: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.206.0/23 Signature Algorithm: sha256WithRSAEncryption 71:bc:f4:ca:76:d9:f4:37:10:dc:4f:0b:11:03:73:8b:29:c3: e8:aa:da:f4:85:c8:dc:b5:23:69:3a:71:2d:46:11:1c:05:58: 91:99:fc:48:5c:aa:ad:de:ee:91:bc:1e:11:0f:26:38:5f:cb: d7:2a:a1:14:2a:4c:0e:67:1a:24:0f:84:1c:2f:e1:af:49:8b: 73:3b:1c:fe:c9:05:8f:c1:6f:0e:31:c7:dd:23:b2:61:ae:3b: f0:6d:3b:af:c3:43:75:5e:b9:c5:d7:d7:d6:74:60:42:d7:8e: 8a:4d:38:4f:f3:cb:52:ea:ac:5e:08:ae:d1:51:7b:0e:43:0a: 04:a9:e3:5d:a2:d9:60:6d:79:15:a7:13:f5:aa:18:81:92:0c: 4b:1d:aa:8a:fa:a5:f1:83:7b:51:93:25:8a:ac:2e:a7:6e:a4: 5b:1b:62:f2:a2:0b:17:9c:b2:3b:0f:6b:23:23:13:2a:9b:1b: 3b:92:88:23:ef:32:cb:1f:09:ce:fd:8b:9f:82:ce:ae:64:61: 22:c0:b0:da:bc:a8:ab:85:b9:de:60:72:d4:31:f8:d1:f8:80: 3b:8f:46:a6:30:81:7c:14:d8:be:05:84:d8:5a:db:80:a2:4b: e1:95:55:62:a7:36:4c:80:38:2b:cd:26:86:85:dc:6e:8b:8a: c8:34:3a:3c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEzMjM0MjIyWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzNTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhE NTlDRDc4NkNCQjlEQzM5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMwMyJqjUm2nXJGVCJUql70gcQywb3ZbDrIQ6VLN+VP/Un1yklvQH8qNmn3OSLBH 8s41xlYMFLVp5ep5IvuZ2+zmb4odvFLlVEY1VDXf4qJCH+iaavZtTQP8z0eWtPLX jkQmU/6unTuBJ6z07paE5GBYoG4No5nnr/LQ76ic4vcMoPh5YDoa3bPP9ljr9qkr w/nNM5og7y0dGz/rJBZK4reZyeRKPFjwNYQJdeZfIqMSz+tUCL2x57/e6tiS0VSr uIxBSmLES+LnmvjZcg33X22XR/puRGtIP2iMo4Zmf+P3h5qtqn4HgasJNWW32Ydf WhcKUwPXBULCFClXrCUCWp8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR9NYUoPfM+ tQucOI1ZzXhsu53DnjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzUyRDEvNjRBNUFCODRDMEVBMTFGMDlCQTlEQjc0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM1MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6 UHJVTG5EaU5XYzE0Ykx1ZHc1NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8zjANBgkqhkiG9w0BAQsFAAOCAQEAcbz0ynbZ9DcQ3E8LEQNz iynD6Kra9IXI3LUjaTpxLUYRHAVYkZn8SFyqrd7ukbweEQ8mOF/L1yqhFCpMDmca JA+EHC/hr0mLczsc/skFj8FvDjHH3SOyYa478G07r8NDdV65xdfX1nRgQteOik04 T/PLUuqsXgiu0VF7DkMKBKnjXaLZYG15FacT9aoYgZIMSx2qivql8YN7UZMliqwu p26kWxti8qILF5yyOw9rIyMTKpsbO5KII+8yyx8Jzv2Ln4LOrmRhIsCw2ryoq4W5 3mBy1DH40fiAO49GpjCBfBTYvgWE2FrbgKJL4ZVVYqc2TIA4K80mhoXcbouKyDQ6 PA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:32 2025 by rpki-client