This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer File: t_uD0cnC98OLcAJxRkrCM2Ti59c.cer (raw, json) Hash identifier: akcnMLgEJfBhSGOguaYv+duJdzZvuSh+aVhkzBsQ9Bs= Subject key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E00 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft caRepository: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 04:25:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.198.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28160 (0x6e00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 13 04:25:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:8a:c1:89:9d:ee:9e:5b:0e:75:98:69:73: b4:6e:0f:58:22:87:ba:b0:0d:fe:1c:0c:0a:e6:8a: ad:43:9c:d4:3f:13:21:68:77:4c:8e:82:bb:c7:01: e6:34:b8:6e:4e:39:ef:5c:5f:e2:f7:a2:8a:17:82: 7c:51:78:c1:4a:24:f9:3d:8f:99:3f:96:4e:48:e0: 33:46:14:02:a3:65:93:2d:93:1a:a4:be:4b:20:02: e2:7a:fa:72:ae:64:38:da:ca:3a:a0:c6:47:d4:44: f2:b6:fd:9f:2f:a9:f4:1c:37:34:5a:67:71:81:53: b7:61:1b:25:13:cd:52:58:d7:da:dd:af:5e:78:89: 0f:4d:aa:81:d5:20:78:74:28:8f:87:ca:4a:75:a6: 96:ae:42:d2:47:7a:de:d6:2c:d8:02:94:00:43:df: 28:db:d2:3a:3e:bb:11:ea:51:94:05:ad:91:4c:fa: 8b:b1:7b:0c:b8:c7:ed:a5:ff:6b:2b:e2:f8:4d:f3: 60:ef:68:f5:b3:0e:2b:eb:ba:a6:5c:5e:cd:3a:42: 00:53:ff:51:f4:05:27:de:63:8d:f1:dc:98:de:97: 37:a6:ee:91:8d:65:95:64:cd:f8:d4:b4:27:56:f2: b0:78:9f:cf:7a:2a:91:bb:8e:d9:f8:bd:98:fe:c6: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.198.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:9f:c1:48:31:67:da:5d:25:47:2d:a5:ba:ef:8c:58:25:24: 7a:22:97:c6:e2:0e:74:91:bc:9f:3a:16:17:f2:1f:9a:48:49: ec:0e:19:1f:ec:eb:70:96:ea:05:33:ae:f9:14:5b:71:63:44: 31:07:7f:35:64:5d:12:06:8d:06:ad:d7:11:2f:79:d1:9c:3d: 0f:4f:d1:49:31:40:4b:2e:e9:8d:15:1d:64:5c:6c:b7:f6:b8: 10:af:25:c0:9f:26:bd:e8:61:9f:c9:87:3b:63:68:f5:7e:c1: ca:f0:c9:05:db:10:1d:ea:09:35:79:a4:18:23:7a:f2:7e:be: 0a:22:e4:8a:df:6f:bb:25:96:ae:45:9c:9f:18:8a:7c:c1:90: 1a:6c:1d:10:16:11:cc:e1:20:ac:3e:07:20:7f:6a:b8:0a:e5: 19:1e:91:b4:bd:de:9a:28:58:ec:96:dc:61:88:1a:b3:e0:69: b2:64:16:7e:3b:94:66:03:5b:5e:46:4f:87:16:78:d0:fc:0f: 93:c9:18:75:41:c0:4a:da:b0:76:7c:44:1b:d2:05:27:cb:fd: ef:02:fb:a2:12:79:76:33:5a:95:2c:06:c1:65:02:7c:63:bc: c4:79:18:b3:17:e9:ba:23:19:9e:70:2c:2b:dd:16:24:9c:9f: 40:ea:0e:62 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEzMDQyNTIwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1RTM4QTExMC8GA1UEBRMoQjdGQjgzRDFDOUMyRjdDMzhCNzAwMjcx NDY0QUMyMzM2NEUyRTdENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOhzisGJne6eWw51mGlztG4PWCKHurAN/hwMCuaKrUOc1D8TIWh3TI6Cu8cB5jS4 bk4571xf4veiiheCfFF4wUok+T2PmT+WTkjgM0YUAqNlky2TGqS+SyAC4nr6cq5k ONrKOqDGR9RE8rb9ny+p9Bw3NFpncYFTt2EbJRPNUljX2t2vXniJD02qgdUgeHQo j4fKSnWmlq5C0kd63tYs2AKUAEPfKNvSOj67EepRlAWtkUz6i7F7DLjH7aX/ayvi +E3zYO9o9bMOK+u6plxezTpCAFP/UfQFJ95jjfHcmN6XN6bukY1llWTN+NS0J1by sHifz3oqkbuO2fi9mP7G8c0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS3+4PRycL3 w4twAnFGSsIzZOLn1zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUzOEEvQTQwRDQ1RjBDMDQ3MTFGMEE3MEY3Qjc4QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVFMzhBL0E0MEQ0NUYwQzA0NzExRjBBNzBGN0I3OEM0RjlBRTAyL3RfdUQwY25D OThPTGNBSnhSa3JDTTJUaTU5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8xjANBgkqhkiG9w0BAQsFAAOCAQEAO5/BSDFn2l0lRy2luu+M WCUkeiKXxuIOdJG8nzoWF/IfmkhJ7A4ZH+zrcJbqBTOu+RRbcWNEMQd/NWRdEgaN Bq3XES950Zw9D0/RSTFASy7pjRUdZFxst/a4EK8lwJ8mvehhn8mHO2No9X7ByvDJ BdsQHeoJNXmkGCN68n6+CiLkit9vuyWWrkWcnxiKfMGQGmwdEBYRzOEgrD4HIH9q uArlGR6RtL3emihY7JbcYYgas+BpsmQWfjuUZgNbXkZPhxZ40PwPk8kYdUHAStqw dnxEG9IFJ8v97wL7ohJ5djNalSwGwWUCfGO8xHkYsxfpuiMZnnAsK90WJJyfQOoO Yg== -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:05 2025 by rpki-client