This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer File: rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer (raw, json) Hash identifier: /0mBFPqVoEaBX9uUL39y6zN4QoBAyBneonqlaa4zd+8= Subject key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F65 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 17:34:35 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.20.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28517 (0x6f65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 17:34:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:eb:f9:35:f4:44:4b:15:ba:f9:fa:97:7e: c5:18:da:8b:7b:88:3e:aa:a3:39:05:6a:eb:61:30: 66:9b:80:b5:3f:3f:b4:65:cf:e5:14:fb:c6:9a:18: a8:d8:d2:f7:d7:5b:9e:b1:a8:30:cc:60:55:5e:3a: 47:31:1c:b3:0c:92:1b:08:a9:e6:08:d8:b0:2d:6a: 9e:5b:80:91:fc:25:f9:ab:bc:4a:0d:96:62:50:44: 4b:28:cd:0f:6a:5f:69:d2:15:88:6e:01:c8:49:a3: 7a:0b:e3:6b:be:fd:a3:5e:80:06:62:30:bb:e9:f1: 01:97:c2:7b:07:b6:5c:68:51:95:96:e1:38:1f:33: e9:da:f9:56:21:3f:81:ac:9c:74:7b:6b:3e:30:e5: e0:c4:2f:c6:63:f7:be:fd:4b:1d:74:fe:27:8c:3b: 43:4e:d3:ed:ae:1a:92:e0:d7:fc:68:90:76:e0:b1: 83:f8:37:37:25:36:e9:0a:79:b2:23:a4:ad:7b:71: 2d:90:8a:10:52:c5:bd:3c:3b:2f:41:5b:31:31:01: dc:0d:53:2d:d9:d4:5e:47:2f:8c:37:2d:eb:60:c5: 47:33:11:24:70:c0:fe:7f:08:81:6f:66:8a:29:f6: 16:11:72:76:33:63:4a:4a:50:a0:b0:f9:79:1d:15: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.20.0/23 Signature Algorithm: sha256WithRSAEncryption 44:49:a8:34:7c:65:f4:c3:81:dd:45:65:fc:a0:4c:b3:8a:e4: c7:e4:b8:87:8a:f3:61:40:05:22:74:3d:2c:80:f9:c2:b4:45: 83:d6:81:26:e8:9b:32:ba:3b:ae:58:b5:68:fa:d3:ad:79:c2: 7e:02:96:df:1d:f6:85:db:fe:79:4d:6a:c9:c3:66:b1:e4:ca: 22:78:b2:07:ba:60:2f:9a:0b:49:88:ee:dc:2d:b7:be:cb:09: d2:e4:ed:ea:de:cc:a7:25:e5:6f:e7:a1:91:da:94:4c:b0:53: 83:4a:75:16:cc:d5:97:9f:d4:2f:0f:35:92:79:ca:2b:f4:d9: 76:ae:8c:2b:ea:fc:05:58:58:4c:1d:11:2f:5a:ba:6d:fe:04: a5:6c:3f:ea:50:fb:3b:8b:74:18:47:6d:d8:bd:83:10:1f:c6: b9:98:b6:ef:99:2e:a8:ee:1c:6f:b9:b3:39:ee:3f:fb:70:c3: 72:23:b7:95:db:53:b6:71:cb:f4:39:0f:e2:dd:e7:47:52:8d: 4b:0e:4b:b7:a8:b1:c2:2d:0a:27:18:7b:25:f4:47:c8:21:81: 94:d4:7d:89:99:02:c7:8b:67:01:22:b5:e9:a7:21:74:8e:22: a4:23:6a:a2:5b:ab:be:10:3f:a7:f5:a1:fd:28:44:81:3a:e2: d2:c3:da:e4 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTczNDM1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3MkZDNTExMC8GA1UEBRMoQUQ1NDVEMjUwNEZFMURFOTJBRTE3NjZE RjQ2NTc2MzdEQjdBN0U3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMgh6/k19ERLFbr5+pd+xRjai3uIPqqjOQVq62EwZpuAtT8/tGXP5RT7xpoYqNjS 99dbnrGoMMxgVV46RzEcswySGwip5gjYsC1qnluAkfwl+au8Sg2WYlBESyjND2pf adIViG4ByEmjegvja779o16ABmIwu+nxAZfCewe2XGhRlZbhOB8z6dr5ViE/gayc dHtrPjDl4MQvxmP3vv1LHXT+J4w7Q07T7a4akuDX/GiQduCxg/g3NyU26Qp5siOk rXtxLZCKEFLFvTw7L0FbMTEB3A1TLdnUXkcvjDct62DFRzMRJHDA/n8IgW9miin2 FhFydjNjSkpQoLD5eR0VY2sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBStVF0lBP4d 6Srhdm30ZXY323p+dTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJGQzUvRTUzOUNEQTBBQjNGMTFFRkJFMDJDRjE0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcyRkM1L0U1MzlDREEwQUIzRjExRUZCRTAyQ0YxNEM0RjlBRTAyL3JWUmRKUVQt SGVrcTRYWnQ5R1YyTjl0NmZuVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6FDANBgkqhkiG9w0BAQsFAAOCAQEAREmoNHxl9MOB3UVl/KBM s4rkx+S4h4rzYUAFInQ9LID5wrRFg9aBJuibMro7rli1aPrTrXnCfgKW3x32hdv+ eU1qycNmseTKIniyB7pgL5oLSYju3C23vssJ0uTt6t7MpyXlb+ehkdqUTLBTg0p1 FszVl5/ULw81knnKK/TZdq6MK+r8BVhYTB0RL1q6bf4EpWw/6lD7O4t0GEdt2L2D EB/GuZi275kuqO4cb7mzOe4/+3DDciO3ldtTtnHL9DkP4t3nR1KNSw5Lt6ixwi0K Jxh7JfRHyCGBlNR9iZkCx4tnASK16achdI4ipCNqolurvhA/p/Wh/ShEgTri0sPa 5A== -----END CERTIFICATE-----Generated at Wed Dec 3 13:16:39 2025 by rpki-client