This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer File: kbKJkWte97NoabO6gQwkWzZOQ8A.cer (raw, json) Hash identifier: odpmo7XAZ+DxYYnZ4sC4iJhtd0EU4VGHDhKqMM4mmSo= Subject key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E6B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 08:37:09 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: IP: 165.101.220.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28267 (0x6e6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 19 08:37:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:93:92:23:fa:69:5a:7d:2c:13:9d:b4:9b: 55:2d:f6:54:52:f3:12:b3:33:58:57:cf:27:35:2b: 5e:b0:cc:38:9c:53:3a:64:81:b8:3f:32:dc:c9:48: 6f:ad:69:d4:cc:78:1c:5b:ab:b0:d2:f8:85:e0:b7: 30:92:22:9e:d9:2a:bc:21:44:88:2f:a8:5e:8c:f7: 83:eb:26:a7:8f:ce:88:51:84:36:48:07:75:ba:75: 40:9c:74:d7:26:f9:d9:56:75:a2:eb:9a:ed:54:96: 79:f5:f4:cc:82:b0:c8:bd:8c:e4:a1:a8:80:ef:17: 0f:7e:47:17:b3:5a:88:fb:cf:c9:6f:20:e1:03:5c: 7f:af:0e:f0:de:19:10:bb:f3:26:6d:fd:dc:2e:d2: ae:f6:b4:4d:0b:e2:81:ae:a2:79:62:57:41:37:fe: a8:24:81:08:0f:e2:16:32:78:bf:2b:d4:4f:c7:5b: 7b:71:ee:b4:90:32:43:81:ee:54:da:7e:b4:38:eb: a0:9b:cc:4b:e4:2e:9c:50:dd:a7:9c:b7:9a:1c:7d: 46:5a:54:2f:cf:47:7e:3b:ec:f5:04:9c:4d:96:13: 56:0b:5c:3e:bc:70:20:16:cb:34:da:82:36:4b:03: 7d:26:96:a2:56:34:75:11:0e:f9:2e:17:9a:a8:21: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.220.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:31:cd:fd:4c:24:81:31:de:5a:f3:10:61:11:9b:81:ff:a6: 0e:47:0d:fb:55:30:b0:92:75:64:6e:37:96:4e:54:93:13:77: 97:1a:8a:88:05:d7:ef:eb:13:6c:9c:96:05:1f:7f:bd:7b:52: 64:9a:d3:a9:5a:30:09:c4:06:a2:5d:d6:3e:ae:d6:14:34:83: c0:01:32:c3:09:7e:8e:8b:f8:0a:03:52:6e:da:f3:00:bb:d6: d7:09:1e:06:de:8a:0e:45:5a:48:4a:b3:d5:1a:65:34:bf:2c: b3:e6:5c:15:e8:be:78:14:3e:e7:54:79:d6:f9:f6:20:bc:ce: 53:ad:91:e6:69:0b:87:d6:2a:31:f5:e2:5e:56:88:d1:c8:7c: 91:c2:1b:66:dc:3e:a0:2f:39:19:10:de:ba:94:7d:34:49:fe: 60:4d:97:0c:cc:3c:79:bc:31:da:52:95:62:e6:25:10:44:27: c1:1e:1d:c1:5e:a4:2b:7d:b7:60:69:65:35:68:c7:5f:83:11: 4c:d8:15:1f:c8:24:44:78:f9:e2:44:dd:4f:3d:d7:0d:c1:eb: 14:87:0d:55:c2:ba:bf:0d:0a:e9:3c:f0:2b:12:2f:19:ca:88: 2c:97:61:73:4c:d7:e2:04:9e:40:17:c6:e7:9f:a4:c2:34:34: 7f:36:d7:99 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE5MDgzNzA5WhcNMjYxMDMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCMkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JB ODEwQzI0NUIzNjRFNDNDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKrjk5Ij+mlafSwTnbSbVS32VFLzErMzWFfPJzUrXrDMOJxTOmSBuD8y3MlIb61p 1Mx4HFursNL4heC3MJIintkqvCFEiC+oXoz3g+smp4/OiFGENkgHdbp1QJx01yb5 2VZ1ouua7VSWefX0zIKwyL2M5KGogO8XD35HF7NaiPvPyW8g4QNcf68O8N4ZELvz Jm393C7Srva0TQviga6ieWJXQTf+qCSBCA/iFjJ4vyvUT8dbe3HutJAyQ4HuVNp+ tDjroJvMS+QunFDdp5y3mhx9RlpUL89Hfjvs9QScTZYTVgtcPrxwIBbLNNqCNksD fSaWolY0dREO+S4Xmqgh7yUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSRsomRa173 s2hps7qBDCRbNk5DwDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJENTYvRURCQkRGRDhDNTIyMTFGMDg3QzdCMjE3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIyRDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3Rl OTdOb2FiTzZnUXdrV3paT1E4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaVl3DANBgkqhkiG9w0BAQsFAAOCAQEAPTHN/UwkgTHeWvMQYRGb gf+mDkcN+1UwsJJ1ZG43lk5UkxN3lxqKiAXX7+sTbJyWBR9/vXtSZJrTqVowCcQG ol3WPq7WFDSDwAEywwl+jov4CgNSbtrzALvW1wkeBt6KDkVaSEqz1RplNL8ss+Zc Fei+eBQ+51R51vn2ILzOU62R5mkLh9YqMfXiXlaI0ch8kcIbZtw+oC85GRDeupR9 NEn+YE2XDMw8ebwx2lKVYuYlEEQnwR4dwV6kK323YGllNWjHX4MRTNgVH8gkRHj5 4kTdTz3XDcHrFIcNVcK6vw0K6TzwKxIvGcqILJdhc0zX4gSeQBfG55+kwjQ0fzbX mQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:34 2025 by rpki-client