This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer File: k-bMnLyUxrTox9mGQYMN5mORud8.cer (raw, json) Hash identifier: nKh8kyft6mfjnqcKZYDw/cmO9TytSKETbVBneUmsmNo= Subject key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DC7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 05:53:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.172.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28103 (0x6dc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 10 05:53:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d7:bb:76:b3:76:21:08:13:1f:7f:65:44:44: de:0b:8e:9c:b9:17:55:34:2e:b4:b4:17:1f:f1:31: e5:80:eb:3e:85:0c:4e:28:c6:9e:01:9d:b6:a2:26: f8:d2:39:bb:b6:73:ef:47:9f:68:23:79:ab:52:4a: 80:5e:87:bb:63:1b:31:e9:3b:27:7f:5a:c8:e8:da: d4:d5:6b:14:a6:fd:41:45:15:16:ae:dd:b9:88:e2: 54:9c:a0:d1:3d:fa:6d:92:b8:df:2e:c7:a2:60:1a: 49:0e:56:e5:2e:b5:c4:f1:76:e5:d4:2d:82:bf:44: 8d:61:4b:65:28:66:01:22:ea:3b:3c:bc:48:e3:bc: 50:3a:59:96:3c:16:cc:ed:84:87:b3:46:39:b1:4d: ab:58:15:72:05:a9:de:06:d3:da:46:e5:8e:c4:9d: 7b:4c:14:79:68:9a:bf:27:c1:95:f0:2e:ee:f4:b9: b3:8a:34:21:55:87:72:35:de:b1:85:79:c4:95:b0: b4:f9:4a:01:6f:a1:10:b4:0d:fb:bc:15:0f:4e:0e: f4:89:69:bd:86:da:6f:ad:57:cb:f2:75:f6:83:ac: 27:ca:98:40:47:5a:a1:dc:26:db:0e:0b:da:5c:d5: dd:c6:5d:ec:e2:af:21:42:c5:63:f6:81:57:23:ef: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.172.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:8f:e2:37:17:82:37:2f:b8:0d:06:0d:1a:3e:d0:f5:72:1a: 09:72:9b:9c:ec:7c:34:ad:89:de:db:57:f5:ce:88:b3:bc:c4: db:00:74:1b:2e:23:1e:47:8d:c3:62:0e:30:e6:5c:d3:4a:37: 3b:52:3f:10:ad:3a:db:bd:3e:cf:23:86:3d:7b:75:87:60:02: ca:49:5b:71:67:bf:51:b6:68:52:7b:54:b3:02:81:7b:40:94: 3b:54:50:b9:09:d2:cf:c4:78:f5:74:36:50:3e:a7:28:a6:ac: cf:2d:fd:a9:9b:4a:70:00:96:97:ed:8a:05:5c:cb:f9:39:5a: 14:47:a6:67:58:7a:50:eb:23:42:bd:db:73:11:0c:56:3e:a7: e1:ad:a0:2f:ae:6a:e4:f7:0a:6d:d7:73:c6:8d:06:8f:4c:e4: a9:86:96:d2:87:a6:b3:42:3d:7d:b2:5b:c2:e0:3f:17:d4:60: a1:36:2a:a9:b3:e4:7b:ba:42:7c:cd:31:54:c1:ef:c1:bc:e4: 51:c8:8e:08:48:e9:b7:ea:9e:e6:77:5f:e8:34:00:25:cf:9b: c9:51:cb:7a:82:b4:9b:06:66:b4:e5:44:34:02:19:0f:3a:02: 8f:df:a5:3c:32:68:ef:0c:ef:fb:91:7a:29:65:35:7a:24:be: 36:5e:03:6c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEwMDU1MzExWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzNTdGQzExMC8GA1UEBRMoOTNFNkNDOUNCQzk0QzZCNEU4QzdEOTg2 NDE4MzBERTY2MzkxQjlERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APvXu3azdiEIEx9/ZURE3guOnLkXVTQutLQXH/Ex5YDrPoUMTijGngGdtqIm+NI5 u7Zz70efaCN5q1JKgF6Hu2MbMek7J39ayOja1NVrFKb9QUUVFq7duYjiVJyg0T36 bZK43y7HomAaSQ5W5S61xPF25dQtgr9EjWFLZShmASLqOzy8SOO8UDpZljwWzO2E h7NGObFNq1gVcgWp3gbT2kbljsSde0wUeWiavyfBlfAu7vS5s4o0IVWHcjXesYV5 xJWwtPlKAW+hELQN+7wVD04O9IlpvYbab61Xy/J19oOsJ8qYQEdaodwm2w4L2lzV 3cZd7OKvIULFY/aBVyPv3aECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBST5sycvJTG tOjH2YZBgw3mY5G53zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU3RkMvODg0NTcyRDRCREY5MTFGMEIzRTA1MjZDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM1N0ZDLzg4NDU3MkQ0QkRGOTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlV eHJUb3g5bUdRWU1ONW1PUnVkOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8rDANBgkqhkiG9w0BAQsFAAOCAQEAHo/iNxeCNy+4DQYNGj7Q 9XIaCXKbnOx8NK2J3ttX9c6Is7zE2wB0Gy4jHkeNw2IOMOZc00o3O1I/EK06270+ zyOGPXt1h2ACyklbcWe/UbZoUntUswKBe0CUO1RQuQnSz8R49XQ2UD6nKKaszy39 qZtKcACWl+2KBVzL+TlaFEemZ1h6UOsjQr3bcxEMVj6n4a2gL65q5PcKbddzxo0G j0zkqYaW0oems0I9fbJbwuA/F9RgoTYqqbPke7pCfM0xVMHvwbzkUciOCEjpt+qe 5ndf6DQAJc+byVHLeoK0mwZmtOVENAIZDzoCj9+lPDJo7wzv+5F6KWU1eiS+Nl4D bA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:28 2025 by rpki-client