This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer File: iPsdIcuIPJfCmst31NaIhLOnpgg.cer (raw, json) Hash identifier: lsavJvRuX066mPid01HuZgyEvZX03M2nInLw8xLFrSk= Subject key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EC9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 03:23:49 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.8.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28361 (0x6ec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 25 03:23:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:3c:47:5f:51:14:5f:dc:66:f0:24:c8:0b: ec:f4:bf:27:94:fe:30:24:62:a9:f3:cf:0c:50:34: 00:83:33:03:48:24:e0:58:1e:64:6d:92:a8:f9:f0: 61:0b:9c:93:01:57:7a:bb:81:bb:f3:94:97:12:34: b9:e3:c7:b3:d0:41:2a:e0:f6:ca:6d:d6:be:9b:3b: 35:b8:f1:67:92:48:76:a4:03:03:eb:2c:3c:17:20: d7:cc:cf:b5:82:39:8b:c6:59:88:bb:ab:c0:84:61: 16:9e:b1:12:8e:a8:ec:33:32:10:d1:37:fa:a6:57: 94:6f:ba:d6:18:65:03:c1:2a:d7:8e:14:b1:ed:31: 9e:29:94:6c:7e:45:8e:8f:14:82:8c:31:fe:41:b4: 76:e4:fa:81:53:d3:53:04:2f:f6:50:76:18:50:a0: 93:01:86:2d:b5:1e:e0:28:ed:28:b4:a3:3a:15:71: 7a:d5:ae:58:53:8a:60:ea:e1:76:65:4a:98:04:46: f9:be:be:12:59:4d:17:6b:8d:dc:68:57:ae:9e:4d: e0:b5:03:6d:46:86:a7:c7:02:9d:69:5d:be:f0:83: ce:a5:bf:a2:1c:ab:1e:3f:47:d6:53:04:9a:56:a7: 84:c2:1f:ad:44:2a:07:9c:c7:44:76:b7:68:44:7a: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.8.0/24 Signature Algorithm: sha256WithRSAEncryption 74:2f:dd:8f:50:55:fa:54:df:00:d0:a6:c1:c0:ce:91:2b:83: d3:30:09:94:e7:f4:50:60:d2:28:df:f8:9f:11:d6:d2:ca:0c: 05:dd:68:56:b7:9b:7d:e3:e9:7c:3f:67:9d:86:9d:58:0d:26: 0a:2d:c5:bf:b7:62:1c:6a:88:3e:cb:60:44:30:e3:ad:87:f5: 9b:47:41:65:01:d8:ac:2b:a3:a8:82:ea:ae:e4:3f:4d:b5:21: aa:ce:94:db:c7:48:be:79:04:91:1c:88:24:b8:ad:51:13:76: 71:97:bd:6c:c0:55:29:37:ba:c5:e2:a7:ea:dd:55:96:9e:ab: 6e:1e:c3:29:eb:51:d8:2d:67:5e:78:a8:82:c8:5d:03:30:33: a0:c6:c8:67:48:96:7c:51:75:06:05:dd:26:67:06:df:78:ea: ca:11:f8:89:23:24:d9:e8:6e:d5:38:4a:85:3d:4e:ee:32:1c: aa:aa:db:12:0e:cc:37:8d:70:b6:84:59:cc:47:32:b1:aa:a3: 98:60:9a:a4:6f:d1:f9:ab:77:53:53:21:e5:62:32:75:db:cd: d1:fb:62:88:0e:fa:c7:bd:3e:ae:08:f6:40:38:d7:81:3d:72: a4:87:3a:b7:e9:99:98:1d:49:f5:fe:90:ac:17:8f:41:ed:fa: 28:4c:e0:85 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI1MDMyMzQ5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCNkEwNDExMC8GA1UEBRMoODhGQjFEMjFDQjg4M0M5N0MyOUFDQjc3 RDRENjg4ODRCM0E3QTYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJosPEdfURRf3GbwJMgL7PS/J5T+MCRiqfPPDFA0AIMzA0gk4FgeZG2SqPnwYQuc kwFXeruBu/OUlxI0uePHs9BBKuD2ym3Wvps7NbjxZ5JIdqQDA+ssPBcg18zPtYI5 i8ZZiLurwIRhFp6xEo6o7DMyENE3+qZXlG+61hhlA8Eq144Use0xnimUbH5Fjo8U gowx/kG0duT6gVPTUwQv9lB2GFCgkwGGLbUe4CjtKLSjOhVxetWuWFOKYOrhdmVK mARG+b6+EllNF2uN3GhXrp5N4LUDbUaGp8cCnWldvvCDzqW/ohyrHj9H1lMEmlan hMIfrUQqB5zHRHa3aER6Bw8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSI+x0hy4g8 l8Kay3fU1oiEs6emCDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZBMDQvMjVDNTI3N0VDOUFFMTFGMDk4RTkyNzQ1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI2QTA0LzI1QzUyNzdFQzlBRTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJ UEpmQ21zdDMxTmFJaExPbnBnZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPCDANBgkqhkiG9w0BAQsFAAOCAQEAdC/dj1BV+lTfANCmwcDO kSuD0zAJlOf0UGDSKN/4nxHW0soMBd1oVrebfePpfD9nnYadWA0mCi3Fv7diHGqI PstgRDDjrYf1m0dBZQHYrCujqILqruQ/TbUhqs6U28dIvnkEkRyIJLitURN2cZe9 bMBVKTe6xeKn6t1Vlp6rbh7DKetR2C1nXniogshdAzAzoMbIZ0iWfFF1BgXdJmcG 33jqyhH4iSMk2ehu1ThKhT1O7jIcqqrbEg7MN41wtoRZzEcysaqjmGCapG/R+at3 U1Mh5WIyddvN0ftiiA76x70+rgj2QDjXgT1ypIc6t+mZmB1J9f6QrBePQe36KEzg hQ== -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:28 2025 by rpki-client