This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer File: vCXNTkiu32CLScwphHLFwG6L9vs.cer (raw, json) Hash identifier: /AonX3jLtkOkJvwybEXj7eyijEIRsggtnV9g4bhRP5Q= Subject key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DA6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 02:40:21 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 138.252.168.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28070 (0x6da6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 7 02:40:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:ee:1e:89:ed:74:2d:42:1e:aa:bf:a1:59: 11:3a:c0:e5:7e:24:78:01:8e:5e:7a:a9:78:da:16: b8:d2:b2:ec:c1:ae:bd:62:7d:e7:71:3c:dc:53:3b: a9:fb:4b:d3:84:6a:1e:62:d1:47:bb:15:32:a8:b8: ff:4c:e6:ca:3e:1c:2f:30:3b:df:a2:01:14:ec:3a: fe:fe:f6:a3:b1:03:51:6f:5a:81:15:e9:09:0a:f6: 96:2d:ad:2a:18:26:63:77:19:c1:84:ba:ea:6f:6d: 0a:e9:54:f3:17:4c:88:cd:d1:cf:d1:24:e9:65:30: 88:f7:98:00:1c:5d:d1:99:da:be:a6:fa:92:12:7c: 8d:6d:2e:b2:bf:30:e6:67:0b:2a:76:c8:a4:1e:bb: 70:e2:08:06:d8:4d:63:88:ec:48:93:c7:41:52:6b: 74:3e:f4:38:7f:47:89:28:5d:21:01:54:ee:c2:d2: b8:ea:34:70:25:ea:55:c9:d0:67:2c:ee:cb:d4:8d: 4f:84:b2:6c:71:95:b7:f6:68:f0:c2:4d:96:dd:c6: a4:0d:9c:ad:30:ba:5f:0a:83:1b:de:e8:00:ff:45: 47:4d:25:9a:3c:1c:ca:33:98:69:b1:7f:f1:8e:7e: 20:ef:d0:09:28:3e:fa:e8:fd:be:31:db:da:41:d6: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.168.0/23 Signature Algorithm: sha256WithRSAEncryption 52:6e:89:87:3c:b0:53:84:23:72:72:82:3a:45:51:c4:3e:97: 43:77:92:b2:8e:ef:27:5d:75:68:44:46:8b:ad:ff:24:c0:c4: d9:ce:04:75:68:61:3d:7b:47:08:d1:d3:ff:c4:a9:ad:ae:49: 8e:d6:ee:69:37:da:4f:ff:c2:c4:1d:98:70:71:b1:40:82:b4: 6e:4b:9b:09:d3:7f:71:2f:42:e8:da:c0:a6:f5:55:99:14:36: b1:6a:43:0a:79:b9:c0:27:ad:55:54:6a:3a:ae:38:1a:0c:80: c9:99:f6:05:f2:ff:80:b9:f2:7d:15:f0:fd:58:dc:b3:85:22: e6:fc:f4:a2:f5:88:7c:75:f7:ce:02:6c:6e:f8:d8:db:44:47: af:f3:fc:5f:80:e1:bb:1a:59:74:a0:a0:6f:2e:47:07:4e:e5: 48:e6:8b:e8:d9:8f:1a:8d:56:71:e8:ff:d7:ca:80:49:50:cc: 84:74:83:1a:1b:82:85:d9:76:9c:ea:e2:b5:01:4b:fa:e6:d0: 24:7a:96:ac:98:f1:63:4d:c0:97:a0:31:40:e9:4e:ec:88:4f: db:ca:da:a5:9d:4d:49:0b:ce:b4:c1:71:1f:10:19:67:17:44: f0:4e:d0:30:d9:b3:ea:fc:0f:18:f3:6d:80:36:8f:cd:7b:4b: e3:9e:09:ea -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA3MDI0MDIxWhcNMjYwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFNDcwMDExMC8GA1UEBRMoQkMyNUNENEU0OEFFREY2MDhCNDlDQzI5 ODQ3MkM1QzA2RThCRjZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMDU7h6J7XQtQh6qv6FZETrA5X4keAGOXnqpeNoWuNKy7MGuvWJ953E83FM7qftL 04RqHmLRR7sVMqi4/0zmyj4cLzA736IBFOw6/v72o7EDUW9agRXpCQr2li2tKhgm Y3cZwYS66m9tCulU8xdMiM3Rz9Ek6WUwiPeYABxd0Znavqb6khJ8jW0usr8w5mcL KnbIpB67cOIIBthNY4jsSJPHQVJrdD70OH9HiShdIQFU7sLSuOo0cCXqVcnQZyzu y9SNT4SybHGVt/Zo8MJNlt3GpA2crTC6XwqDG97oAP9FR00lmjwcyjOYabF/8Y5+ IO/QCSg++uj9vjHb2kHWapMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS8Jc1OSK7f YItJzCmEcsXAbov2+zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ3MDAvMTg2RjJDMkFCQjgzMTFGMDg4OTY5NzY1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU0NzAwLzE4NkYyQzJBQkI4MzExRjA4ODk2OTc2NUM0RjlBRTAyL3ZDWE5Ua2l1 MzJDTFNjd3BoSExGd0c2TDl2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8qDANBgkqhkiG9w0BAQsFAAOCAQEAUm6JhzywU4QjcnKCOkVR xD6XQ3eSso7vJ111aERGi63/JMDE2c4EdWhhPXtHCNHT/8Spra5JjtbuaTfaT//C xB2YcHGxQIK0bkubCdN/cS9C6NrApvVVmRQ2sWpDCnm5wCetVVRqOq44GgyAyZn2 BfL/gLnyfRXw/Vjcs4Ui5vz0ovWIfHX3zgJsbvjY20RHr/P8X4DhuxpZdKCgby5H B07lSOaL6NmPGo1Wcej/18qASVDMhHSDGhuChdl2nOritQFL+ubQJHqWrJjxY03A l6AxQOlO7IhP28rapZ1NSQvOtMFxHxAZZxdE8E7QMNmz6vwPGPNtgDaPzXtL454J 6g== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:32 2025 by rpki-client