This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer File: uPcTXGBh-I9CraXVMMFwUK66jYU.cer (raw, json) Hash identifier: 04wnMuFtrmcu55yePjbPgOrZYQLGF3tyVVKumkkIJbY= Subject key identifier: B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F30 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 05:08:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.202.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28464 (0x6f30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 1 05:08:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B7929, serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6e:7d:b9:27:a2:6b:4e:7b:09:c1:60:44:40: cc:4d:39:4b:2a:c3:ba:9a:ff:d8:6c:50:65:70:4b: 9f:bc:5a:ea:98:77:06:12:52:34:a3:bb:ec:f6:24: 39:c5:0f:5f:4d:b5:b7:da:c5:c5:e1:6b:87:6f:63: 06:b1:4d:39:7b:db:29:e6:66:49:f2:cb:2c:c2:5a: 8e:31:9f:cc:d2:94:7b:58:d5:0b:7c:64:73:a5:75: 05:c4:15:ab:c6:13:bc:c4:60:05:e8:9a:9b:d1:e6: 2d:d0:42:9c:aa:e6:eb:c9:b9:59:b5:77:e3:df:60: 0d:b8:8a:ac:d3:e1:4b:83:62:ea:d3:95:ce:d4:3d: 45:d3:3e:1f:e7:fb:f4:6a:62:47:ff:b5:ed:90:73: 50:fc:b6:58:12:66:6d:19:da:9c:c4:8a:0e:07:80: 2b:8c:a5:c9:c4:25:ee:d9:0c:a8:09:00:28:23:8e: cf:bb:13:38:79:2c:ad:b0:25:5c:64:4e:35:14:f2: fa:98:e8:09:69:88:a5:27:34:a1:41:1d:d9:6f:09: 13:13:ba:2d:95:4f:6a:16:30:15:67:66:03:da:1d: ff:d5:eb:e4:c8:03:50:65:1d:cf:e9:3e:0e:58:62: 00:81:ea:1d:ee:62:b2:63:51:b9:5a:79:f3:7c:1d: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.202.0/24 Signature Algorithm: sha256WithRSAEncryption 98:33:c1:ba:91:f5:d6:ce:c2:a4:16:95:6a:11:dd:52:74:85: 3e:d2:d1:8a:5a:41:9f:fb:dd:57:a1:9d:eb:df:53:1f:1a:f1: 03:9c:8f:88:bb:14:eb:3a:9b:15:21:2b:15:6a:aa:fc:b8:fe: 3e:69:8e:9a:06:92:48:d2:4a:58:de:39:2b:d0:ac:7b:41:c0: 79:ba:0f:74:58:d6:f4:09:a7:2a:11:31:3c:e7:3b:4c:30:1b: da:f0:37:48:82:e6:2f:63:81:e8:92:0a:11:c7:42:d2:38:a8: 42:f8:ab:0a:8f:04:51:75:bc:23:d6:99:93:06:e8:f4:36:1e: a7:89:12:b7:ef:62:64:5b:20:5c:56:24:32:c8:43:79:ac:ec: 6f:43:90:2b:a2:3b:13:f3:fe:bc:3d:e4:cc:fa:75:93:4f:32: 39:fb:78:7e:2a:87:b0:4f:08:41:a8:0c:9d:a0:01:e8:e5:e9: 77:c9:19:f4:71:a3:ba:a3:40:df:31:2e:7b:07:16:95:44:13: 7d:d8:48:9a:3b:03:4d:ee:d4:cd:9f:42:c0:99:64:b3:54:d8: 28:20:17:d2:83:b4:cb:ea:33:4e:c2:a9:66:a3:3c:8b:cc:60: a6:1e:e0:60:2e:fb:57:46:0e:6c:06:d4:db:f4:2a:06:9b:62: 4c:a7:dc:f5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAxMDUwODEzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCNzkyOTExMC8GA1UEBRMoQjhGNzEzNUM2MDYxRjg4RjQyQURBNUQ1 MzBDMTcwNTBBRUJBOEQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APNufbknomtOewnBYERAzE05SyrDupr/2GxQZXBLn7xa6ph3BhJSNKO77PYkOcUP X021t9rFxeFrh29jBrFNOXvbKeZmSfLLLMJajjGfzNKUe1jVC3xkc6V1BcQVq8YT vMRgBeiam9HmLdBCnKrm68m5WbV3499gDbiKrNPhS4Ni6tOVztQ9RdM+H+f79Gpi R/+17ZBzUPy2WBJmbRnanMSKDgeAK4ylycQl7tkMqAkAKCOOz7sTOHksrbAlXGRO NRTy+pjoCWmIpSc0oUEd2W8JExO6LZVPahYwFWdmA9od/9Xr5MgDUGUdz+k+Dlhi AIHqHe5ismNRuVp583wdGzsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS49xNcYGH4 j0KtpdUwwXBQrrqNhTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc5MjkvQkE2Q0UyRDBDRTczMTFGMDg2NDMyMjE0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3OTI5L0JBNkNFMkQwQ0U3MzExRjA4NjQzMjIxNEM0RjlBRTAyL3VQY1RYR0Jo LUk5Q3JhWFZNTUZ3VUs2NmpZVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8yjANBgkqhkiG9w0BAQsFAAOCAQEAmDPBupH11s7CpBaVahHd UnSFPtLRilpBn/vdV6Gd699THxrxA5yPiLsU6zqbFSErFWqq/Lj+PmmOmgaSSNJK WN45K9Cse0HAeboPdFjW9AmnKhExPOc7TDAb2vA3SILmL2OB6JIKEcdC0jioQvir Co8EUXW8I9aZkwbo9DYep4kSt+9iZFsgXFYkMshDeazsb0OQK6I7E/P+vD3kzPp1 k08yOft4fiqHsE8IQagMnaAB6OXpd8kZ9HGjuqNA3zEuewcWlUQTfdhImjsDTe7U zZ9CwJlks1TYKCAX0oO0y+ozTsKpZqM8i8xgph7gYC77V0YObAbU2/QqBptiTKfc 9Q== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:26 2025 by rpki-client