This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer File: iigtHI-Qww1lnm2MC5vkIhwlMZw.cer (raw, json) Hash identifier: bRam9xZckUrQM1SSJ+pVsqm2o7k5+kiA9M9RaTffLl8= Subject key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F39 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft caRepository: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 17:00:15 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 139.80.0.0/16 IP: 192.101.16.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28473 (0x6f39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 1 17:00:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:54:1c:41:40:fe:c2:2e:3a:35:9a:96:3b: f2:06:ed:1a:ae:6d:e7:4c:3f:ac:48:37:0f:80:21: 38:89:a9:bf:43:c3:e9:11:d6:43:d8:08:71:6b:b4: 3f:a3:2f:2c:51:5a:37:5c:23:f1:79:7a:c7:5e:0c: c7:db:ea:cd:0a:65:8c:2d:bd:be:6b:0d:26:48:61: f4:3e:98:d7:07:a7:44:56:e1:21:dd:3a:03:b5:ed: c4:ef:a3:aa:4f:db:5b:c2:ba:5f:60:41:46:c1:58: 0a:00:d9:a6:85:9f:9c:c4:23:c3:a2:2e:a1:78:61: c0:3f:17:be:10:a0:4d:01:d3:e2:04:f9:26:4a:31: 47:d9:d6:9f:9b:d9:69:8e:96:ca:57:69:69:65:f6: 8a:5b:db:b5:6d:bc:bd:de:6a:fa:7d:6c:e3:dd:cd: c2:d8:29:91:c8:26:45:d9:2f:68:d3:ae:34:4e:eb: bd:fa:82:c4:4d:bc:10:3a:08:2c:e4:ad:14:99:ab: 42:ef:12:82:d0:25:6a:3c:95:04:30:c9:14:f4:b9: e4:50:fa:5a:d8:15:ac:0d:2d:06:3d:cf:27:60:a9: 25:b4:b4:1a:97:a8:0c:57:f7:8b:21:70:f7:68:22: 09:64:4f:8c:e7:8f:b6:18:3a:3f:cb:dd:09:63:8b: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.80.0.0/16 192.101.16.0/24 Signature Algorithm: sha256WithRSAEncryption ae:36:ca:eb:5c:58:8e:65:c9:b3:2e:c3:32:15:f2:ab:fa:b2: 27:6f:d5:e9:38:ab:d3:f2:97:d3:7e:29:d1:2b:7a:fd:04:4a: 2a:d8:01:4d:6c:4a:b8:4d:a6:6c:1f:2f:1f:ac:50:79:59:47: 00:fd:ea:19:69:27:73:96:8b:5e:21:a0:1b:6b:68:97:a1:c9: e5:f3:e0:ad:10:e9:b1:ca:2f:8b:cb:84:a4:52:78:fb:e6:37: ad:cd:8c:c4:12:ed:2e:f6:58:93:3b:6c:c2:ad:73:97:a4:ea: d2:37:a1:42:99:c2:b2:90:60:d9:52:5e:3e:86:d6:02:0a:77: e9:72:92:b6:d8:d9:26:a3:a5:b0:11:b3:50:12:6d:55:cb:29: 64:a7:cd:39:60:e3:d1:ae:e1:ce:72:9c:b1:ce:d3:85:f8:ba: 82:97:30:84:3e:a7:64:bf:f1:8c:a9:94:b0:fb:9f:63:cf:38: 8a:a2:67:05:99:f3:62:d2:da:a3:1b:06:98:1a:2d:5f:89:b1: 0e:d6:d4:a4:31:2b:20:ea:20:af:97:24:c8:fc:27:fc:9e:32: f8:a8:62:33:2b:7a:98:26:46:cb:a0:c5:4a:49:8a:6f:ef:bc: 3d:d3:1d:98:ba:84:38:3a:f4:6a:12:17:9f:e3:f6:40:51:e3: 0c:9e:5f:70 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICbzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAxMTcwMDE1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1RkRBNzExMC8GA1UEBRMoOEEyODJEMUM4RjkwQzMwRDY1OUU2RDhD MEI5QkU0MjIxQzI1MzE5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANiIVBxBQP7CLjo1mpY78gbtGq5t50w/rEg3D4AhOImpv0PD6RHWQ9gIcWu0P6Mv LFFaN1wj8Xl6x14Mx9vqzQpljC29vmsNJkhh9D6Y1wenRFbhId06A7XtxO+jqk/b W8K6X2BBRsFYCgDZpoWfnMQjw6IuoXhhwD8XvhCgTQHT4gT5JkoxR9nWn5vZaY6W yldpaWX2ilvbtW28vd5q+n1s493NwtgpkcgmRdkvaNOuNE7rvfqCxE28EDoILOSt FJmrQu8SgtAlajyVBDDJFPS55FD6WtgVrA0tBj3PJ2CpJbS0GpeoDFf3iyFw92gi CWRPjOePthg6P8vdCWOL8YECAwEAAaOCAvgwggL0MB0GA1UdDgQWBBSKKC0cj5DD DWWebYwLm+QiHCUxnDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEQTcvNDVCQ0ZDMzBGRDI5MTFFRUE2MjlBRTYyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVGREE3LzQ1QkNGQzMwRkQyOTExRUVBNjI5QUU2MkM0RjlBRTAyL2lpZ3RISS1R d3cxbG5tMk1DNXZrSWh3bE1ady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw EQQCAAEwCwMDAItQAwQAwGUQMA0GCSqGSIb3DQEBCwUAA4IBAQCuNsrrXFiOZcmz LsMyFfKr+rInb9XpOKvT8pfTfinRK3r9BEoq2AFNbEq4TaZsHy8frFB5WUcA/eoZ aSdzloteIaAba2iXocnl8+CtEOmxyi+Ly4SkUnj75jetzYzEEu0u9liTO2zCrXOX pOrSN6FCmcKykGDZUl4+htYCCnfpcpK22Nkmo6WwEbNQEm1Vyylkp805YOPRruHO cpyxztOF+LqClzCEPqdkv/GMqZSw+59jzziKomcFmfNi0tqjGwaYGi1fibEO1tSk MSsg6iCvlyTI/Cf8njL4qGIzK3qYJkbLoMVKSYpv77w90x2YuoQ4OvRqEhef4/ZA UeMMnl9w -----END CERTIFICATE-----Generated at Wed Dec 3 13:18:21 2025 by rpki-client