This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer File: sE3Hq0gjM4kMKKdlddit5kKcP8s.cer (raw, json) Hash identifier: pEexMgf2iIsZp0xvXhaM+yxGUGrMOI3hJcVGoU23H78= Subject key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E36 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 06:12:37 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.180.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28214 (0x6e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 17 06:12:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:ac:34:50:e3:c6:34:37:15:fb:f2:63:0a: 3c:10:26:d1:be:d0:34:dc:e1:ab:45:dc:db:b2:36: 57:8b:0f:d3:79:f5:b1:14:59:3e:99:53:7d:3c:b1: 3f:c5:ff:93:96:ac:44:3e:08:a5:13:62:bb:6b:93: 16:e2:98:e9:a2:92:29:78:ed:aa:d4:8a:f1:aa:e6: ec:c8:7e:8c:83:a6:19:66:15:86:21:94:7b:2e:37: 5a:b4:3f:78:76:39:1b:66:c3:1e:ed:57:9c:48:71: d6:34:9b:db:85:a8:a0:7c:50:36:23:47:0c:df:cb: 80:26:ae:2e:07:38:9f:50:a8:80:ce:0e:28:1c:27: 72:cf:14:8d:a1:ec:bc:d5:6c:1f:e9:23:8a:fb:a6: 77:0e:03:8a:63:63:07:aa:32:6c:ed:52:40:cd:ca: 51:8f:4b:31:91:92:ca:da:5f:9d:48:52:09:95:2a: 37:e4:1f:4b:b1:c7:0f:b8:23:ed:91:e8:0e:2d:3e: 08:6b:72:8e:8a:ce:5d:cd:f8:41:72:3d:1f:b5:b3: 35:52:32:eb:1a:13:ad:93:ee:54:7b:c9:20:e4:f3: 88:1e:3b:29:06:c5:e9:d6:f2:c2:68:da:80:5b:1f: f9:db:22:d6:37:3d:93:90:d0:99:26:28:ef:4a:8d: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.180.0/23 Signature Algorithm: sha256WithRSAEncryption bd:d0:65:53:40:e6:64:c8:ec:76:91:de:36:02:2e:43:60:f0: f8:5a:0c:93:9e:fd:56:59:d4:31:eb:a7:5f:33:64:97:0d:d3: db:12:de:b9:03:76:9e:66:9a:34:47:de:83:ea:98:94:93:a7: 3f:06:86:c8:60:6a:52:17:ff:40:2c:0c:14:6e:f3:03:df:c2: db:a0:d4:af:ec:a6:2d:c2:22:ec:23:83:96:e3:9c:ba:63:b4: ec:51:48:27:22:e6:43:53:e2:2b:38:dc:7a:22:fd:50:e2:e5: 21:4c:34:cb:2f:2d:a7:ca:25:30:fb:a6:1b:1b:b2:d4:dc:02: 9f:b2:fb:d9:f3:3a:4f:97:cb:11:d7:7e:c2:60:2d:6d:17:79: ce:91:e6:59:af:41:92:f9:93:27:dc:26:2b:1f:84:44:f3:0d: 6c:c7:f6:b1:d8:2b:22:9c:08:b8:1e:4b:22:99:68:15:a6:02: 3a:36:03:17:cb:ae:78:84:6b:f6:25:86:c7:ba:96:87:5a:05: e0:72:16:0f:ce:5c:a4:64:12:26:08:02:a1:68:ff:c5:00:bc: 03:8f:c2:af:7b:b1:3b:55:b9:eb:11:db:22:c6:92:df:77:2e: 34:00:aa:a4:37:9b:9d:d0:42:05:9c:48:98:ce:31:e5:a9:80: 18:97:d7:71 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE3MDYxMjM3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGRkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1 NzVEOEFERTY0MjlDM0ZDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANTFrDRQ48Y0NxX78mMKPBAm0b7QNNzhq0Xc27I2V4sP03n1sRRZPplTfTyxP8X/ k5asRD4IpRNiu2uTFuKY6aKSKXjtqtSK8arm7Mh+jIOmGWYVhiGUey43WrQ/eHY5 G2bDHu1XnEhx1jSb24WooHxQNiNHDN/LgCauLgc4n1CogM4OKBwncs8UjaHsvNVs H+kjivumdw4DimNjB6oybO1SQM3KUY9LMZGSytpfnUhSCZUqN+QfS7HHD7gj7ZHo Di0+CGtyjorOXc34QXI9H7WzNVIy6xoTrZPuVHvJIOTziB47KQbF6dbywmjagFsf +dsi1jc9k5DQmSYo70qNxy8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSwTcerSCMz iQwop2V12K3mQpw/yzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkZCQUYvNjgyQjM5QTZDMzdDMTFGMDlEQzVBNTMyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZGQkFGLzY4MkIzOUE2QzM3QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdq TTRrTUtLZGxkZGl0NWtLY1A4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8tDANBgkqhkiG9w0BAQsFAAOCAQEAvdBlU0DmZMjsdpHeNgIu Q2Dw+FoMk579VlnUMeunXzNklw3T2xLeuQN2nmaaNEfeg+qYlJOnPwaGyGBqUhf/ QCwMFG7zA9/C26DUr+ymLcIi7CODluOcumO07FFIJyLmQ1PiKzjceiL9UOLlIUw0 yy8tp8olMPumGxuy1NwCn7L72fM6T5fLEdd+wmAtbRd5zpHmWa9BkvmTJ9wmKx+E RPMNbMf2sdgrIpwIuB5LIploFaYCOjYDF8uueIRr9iWGx7qWh1oF4HIWD85cpGQS JggCoWj/xQC8A4/Cr3uxO1W56xHbIsaS33cuNACqpDebndBCBZxImM4x5amAGJfX cQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:35 2025 by rpki-client