This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer File: jhITFCkXlrLlK4nYfE7W2dz6Uks.cer (raw, json) Hash identifier: QvyPt9OSLViiW9J1X6XRTdEBQAcuBgP7hCbGDRosmTw= Subject key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E50 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 11:21:45 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 138.252.2.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28240 (0x6e50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 18 11:21:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:f1:69:8a:41:fb:64:fc:f4:cf:54:d3:da: 4a:94:1c:1c:62:e2:6f:59:f6:2f:2f:c9:ca:ce:d0: 69:73:b9:8a:43:3d:87:c2:53:28:37:90:4a:9d:f5: d6:0b:48:ce:82:db:f5:34:c5:7a:dd:2f:4c:a9:40: 6f:a3:39:14:e7:0d:91:05:20:c2:9e:20:7f:11:d7: 99:49:0a:f8:ce:c5:fd:4f:d7:9b:6b:81:16:a6:f6: 49:f7:1f:b8:71:7a:01:6f:ef:f9:78:fd:c3:10:e7: 2e:20:3f:01:40:1c:ee:fd:67:a0:12:7c:f7:7d:46: c5:ee:e2:e0:f2:06:27:fd:7a:b3:f1:4d:bc:6b:33: 67:07:95:2d:05:07:c1:7a:a3:74:91:33:2a:58:44: d2:a2:44:d6:56:af:8a:aa:0c:30:c1:14:dc:d0:1d: 3e:d1:cb:0d:9d:24:d4:7e:3d:25:c5:34:e2:2c:00: a3:59:e7:9f:9a:68:c7:d9:be:05:55:3f:a8:14:b0: f2:5c:3d:eb:44:1f:81:34:0f:17:4b:4b:5d:f7:30: 63:27:7f:7d:20:82:e5:7b:a7:fb:10:3d:7f:4c:ef: 9d:a3:f0:63:89:e6:08:96:36:5a:53:fb:ba:5d:73: 67:ba:fd:5a:7c:f4:0f:fe:c2:ae:5c:dc:89:a3:7f: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.2.0/23 Signature Algorithm: sha256WithRSAEncryption a1:58:50:6c:79:7f:71:d6:c4:80:be:91:8b:60:c5:8a:fc:55: bd:2b:ea:e4:8a:41:ef:91:e5:0f:bd:b2:cd:9d:ca:af:d4:e9: 39:ee:f5:ab:7a:a1:69:6e:77:3c:32:5d:f9:a0:0f:c7:ac:6a: 2b:7b:a4:33:9b:4a:b6:d5:4d:97:07:cd:d4:9b:05:7a:f7:88: 9b:00:ed:07:de:9c:a6:4a:b1:e4:26:81:d8:74:73:06:bd:f9: a8:cd:1d:07:10:62:ab:65:4a:a4:51:5d:95:65:5a:be:df:fc: 85:77:1f:0d:19:32:e3:00:fb:0b:15:af:ec:ec:55:a9:22:82: 3c:99:aa:3a:8a:d2:78:b3:0e:43:7d:90:bf:24:16:ac:09:b2: fe:90:be:62:48:82:42:19:5d:e8:e2:bd:a8:19:1b:74:39:ad: c1:89:b6:d5:20:a4:33:53:a7:30:5f:11:3a:39:5c:b7:4d:51: 47:d4:14:19:57:e6:4f:b8:c0:15:1e:84:f2:4f:d2:f2:cf:27: 5c:cc:e5:1e:6e:92:70:23:a4:ab:c4:27:88:e0:b7:b1:6c:a1: ec:1e:ca:d8:24:39:33:67:42:fe:b8:50:82:8c:e4:f1:ab:94: 20:c2:8c:7e:5a:ca:ee:61:45:9b:14:e2:ac:a2:15:49:9f:70: 75:8d:be:6b -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICblAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE4MTEyMTQ1WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCNkREMDExMC8GA1UEBRMoOEUxMjEzMTQyOTE3OTZCMkU1MkI4OUQ4 N0M0RUQ2RDlEQ0ZBNTI0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKdN8WmKQftk/PTPVNPaSpQcHGLib1n2Ly/Jys7QaXO5ikM9h8JTKDeQSp311gtI zoLb9TTFet0vTKlAb6M5FOcNkQUgwp4gfxHXmUkK+M7F/U/Xm2uBFqb2SfcfuHF6 AW/v+Xj9wxDnLiA/AUAc7v1noBJ8931Gxe7i4PIGJ/16s/FNvGszZweVLQUHwXqj dJEzKlhE0qJE1laviqoMMMEU3NAdPtHLDZ0k1H49JcU04iwAo1nnn5pox9m+BVU/ qBSw8lw960QfgTQPF0tLXfcwYyd/fSCC5Xun+xA9f0zvnaPwY4nmCJY2WlP7ul1z Z7r9Wnz0D/7CrlzciaN/4qkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSOEhMUKReW suUridh8TtbZ3PpSSzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZERDAvQzFDN0NDMTRDNDcwMTFGMDk0NUQ2MjM5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI2REQwL0MxQzdDQzE0QzQ3MDExRjA5NDVENjIzOUM0RjlBRTAyL2poSVRGQ2tY bHJMbEs0bllmRTdXMmR6NlVrcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8AjANBgkqhkiG9w0BAQsFAAOCAQEAoVhQbHl/cdbEgL6Ri2DF ivxVvSvq5IpB75HlD72yzZ3Kr9TpOe71q3qhaW53PDJd+aAPx6xqK3ukM5tKttVN lwfN1JsFeveImwDtB96cpkqx5CaB2HRzBr35qM0dBxBiq2VKpFFdlWVavt/8hXcf DRky4wD7CxWv7OxVqSKCPJmqOorSeLMOQ32QvyQWrAmy/pC+YkiCQhld6OK9qBkb dDmtwYm21SCkM1OnMF8ROjlct01RR9QUGVfmT7jAFR6E8k/S8s8nXMzlHm6ScCOk q8QniOC3sWyh7B7K2CQ5M2dC/rhQgozk8auUIMKMflrK7mFFmxTirKIVSZ9wdY2+ aw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:32 2025 by rpki-client