This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer File: qjXi-Xe1XnL5FjW_fVO861NHmDs.cer (raw, json) Hash identifier: 6n5L8GKxrEx9bmqq4//xSdzYKsaK3eG7dJtvnoINZKQ= Subject key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F04 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 20:42:47 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.224.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28420 (0x6f04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 27 20:42:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:82:57:ab:93:b6:98:6e:bc:e5:c1:c9:5c: e8:9b:c1:f0:a5:1d:c8:2a:82:8f:4c:88:f7:1c:ea: 71:c1:23:3b:81:84:92:ad:f6:96:12:c9:55:b6:0b: 3a:69:da:8b:67:7a:6d:ba:a0:63:cc:2f:89:68:9f: 75:c5:44:13:3f:28:c8:8f:68:ad:4b:8d:1b:45:18: 74:d8:5b:8a:e5:1a:23:27:c6:28:1e:e6:33:f7:6d: e7:47:7c:af:3d:f8:12:26:06:bf:77:ce:77:8c:3c: 12:fb:ba:91:a3:de:f7:84:c7:71:1b:2e:64:77:6d: 61:37:ca:0b:ad:90:91:b9:48:a7:40:02:72:61:ff: 73:c0:dd:8f:6b:af:57:dd:4f:99:20:05:f4:9c:80: 82:fa:06:92:e4:55:61:6d:87:fd:b8:a5:9d:d4:7f: 87:a2:ba:b8:b6:82:8d:fe:52:4c:22:db:df:5f:0e: 74:bb:87:32:aa:50:7a:23:3f:d5:af:0f:e0:8d:d6: d5:03:ba:7a:9b:89:7b:77:19:d4:3e:e0:83:57:ed: 9b:dc:89:08:ef:88:a5:e6:00:f1:42:8d:66:ce:ff: d1:7e:c0:16:d0:6b:49:10:29:76:61:d6:aa:d9:f5: 43:26:c6:a5:15:04:ea:9a:2c:34:a7:cf:b3:78:cd: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.224.0/23 Signature Algorithm: sha256WithRSAEncryption 98:5f:3c:bd:d2:bf:2e:f2:a2:ad:7e:a4:f1:5f:72:f3:5a:73: 88:b7:ab:08:7a:3e:d7:fa:fa:11:25:10:eb:4e:da:df:f2:a8: 58:16:64:9c:2a:44:31:a4:f4:f3:a7:c2:c1:b1:7b:ba:99:72: 0a:f0:b0:52:58:7e:c7:3a:f8:54:fd:44:e2:a8:63:bc:94:d9: 0c:d1:48:3a:83:7d:cd:66:01:de:12:73:ab:59:01:ab:0f:97: a5:b5:bf:21:78:8e:41:c5:ce:b8:a2:bd:a0:65:1f:34:1f:0e: 28:2e:2a:2d:12:12:2b:9e:2b:c4:da:e0:8a:f6:3c:96:01:34: 84:4e:78:91:71:a0:d9:e4:ac:8b:2f:d9:e9:92:c7:a6:d0:52: 8f:f1:9a:9f:39:1f:a8:b8:fd:28:e3:46:81:59:4c:77:4e:16: 36:d1:05:68:51:59:b1:09:f1:66:bc:7f:0b:b3:0e:14:6c:db: f4:5a:3b:6f:9c:43:80:7c:b8:41:97:a4:d7:9e:c9:e7:3f:21: 9d:47:0f:22:b5:5e:2f:f3:91:f0:60:d9:84:1f:23:87:c5:a0: 4c:ae:85:34:59:39:9f:fb:a7:42:a2:37:8b:1b:16:89:11:3b: 3f:63:cb:36:6d:a7:06:41:76:30:e4:87:7e:16:75:fe:b9:e3: ac:4f:99:4c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI3MjA0MjQ3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFEMkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJG N0Q1M0JDRUI1MzQ3OTgzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOCDglerk7aYbrzlwclc6JvB8KUdyCqCj0yI9xzqccEjO4GEkq32lhLJVbYLOmna i2d6bbqgY8wviWifdcVEEz8oyI9orUuNG0UYdNhbiuUaIyfGKB7mM/dt50d8rz34 EiYGv3fOd4w8Evu6kaPe94THcRsuZHdtYTfKC62QkblIp0ACcmH/c8Ddj2uvV91P mSAF9JyAgvoGkuRVYW2H/bilndR/h6K6uLaCjf5STCLb318OdLuHMqpQeiM/1a8P 4I3W1QO6epuJe3cZ1D7gg1ftm9yJCO+IpeYA8UKNZs7/0X7AFtBrSRApdmHWqtn1 QybGpRUE6posNKfPs3jNIgECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSqNeL5d7Ve cvkWNb99U7zrU0eYOzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJDMzgvMDRCQUE2MTRBOThDMTFFRjkzNTBGQjYzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQyQzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUx WG5MNUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/4DANBgkqhkiG9w0BAQsFAAOCAQEAmF88vdK/LvKirX6k8V9y 81pziLerCHo+1/r6ESUQ607a3/KoWBZknCpEMaT086fCwbF7uplyCvCwUlh+xzr4 VP1E4qhjvJTZDNFIOoN9zWYB3hJzq1kBqw+XpbW/IXiOQcXOuKK9oGUfNB8OKC4q LRISK54rxNrgivY8lgE0hE54kXGg2eSsiy/Z6ZLHptBSj/GanzkfqLj9KONGgVlM d04WNtEFaFFZsQnxZrx/C7MOFGzb9Fo7b5xDgHy4QZek157J5z8hnUcPIrVeL/OR 8GDZhB8jh8WgTK6FNFk5n/unQqI3ixsWiRE7P2PLNm2nBkF2MOSHfhZ1/rnjrE+Z TA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:18:37 2025 by rpki-client