This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer (raw, json) Hash identifier: n7hv/pXnUYNjruB2IQW6P1Cnx8NaKbitbpO8fKCW3EY= Subject key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F34 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft caRepository: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 08:52:25 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.38.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28468 (0x6f34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 1 08:52:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:18:48:a2:f7:01:62:2a:ae:da:54:f8:94: 64:d8:2d:0a:60:12:51:3b:bf:2b:c0:18:d5:7d:d9: 27:12:a0:ea:ba:a2:0a:f7:dd:37:a4:fb:b7:d6:8f: fd:a1:ec:16:ec:81:ba:e5:c9:38:f8:df:53:41:c2: 09:95:1d:a2:fe:1c:77:61:41:86:23:f3:99:39:38: 7c:00:f2:05:b2:b4:7b:e7:df:35:e3:9d:68:d0:be: 32:6d:f3:1b:3b:61:ef:a8:be:4d:fd:6f:1b:44:61: 55:80:b6:ce:78:af:6a:67:e7:a3:67:69:e6:4f:7d: 09:83:7e:c4:03:0a:89:a5:24:6f:0b:e3:7a:13:3e: 80:a7:0a:5e:19:b3:d1:9b:0b:e9:84:c8:42:8f:69: 04:dd:a8:5c:4e:d8:4e:04:a6:46:52:55:ac:fe:7e: 09:90:2c:13:24:0c:46:f7:ff:14:9d:87:33:2d:3a: 91:6a:a9:7f:34:aa:34:cb:7c:7f:6e:b8:bf:a8:d2: 67:6b:4a:40:61:1f:eb:1d:4d:49:27:17:ae:cc:93: de:c3:b2:35:dc:4d:49:c7:25:93:f1:67:4d:32:b0: 51:7c:9b:3e:6d:c4:4c:be:76:a7:46:39:52:04:c9: c6:fb:fd:73:8c:4c:11:b6:1c:c3:80:bf:8e:5b:7f: d3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.38.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:14:09:a2:f7:0d:6b:68:ae:a4:48:f9:fa:17:5e:2a:41:4f: ed:13:f5:01:4b:d4:d2:cf:81:93:37:d2:a8:60:0f:0d:05:7e: f5:07:89:ae:66:4d:43:a2:4c:7d:23:55:72:b8:af:49:5f:4e: 89:55:3f:e3:c8:9f:90:47:e0:d2:16:1f:59:65:57:f0:da:12: a1:e1:8c:5f:c9:50:4b:bb:a0:de:31:b1:ea:54:92:38:65:d6: 8b:19:75:46:bc:be:e4:89:5c:19:f1:84:59:f5:12:77:e0:18: 5d:08:ef:77:49:24:2b:39:1d:dc:18:9d:c3:5a:a0:ca:8a:bd: d6:7e:12:d4:15:4c:9f:f8:65:8b:80:2e:56:3d:5d:a2:d5:b6: e5:77:a0:43:fc:44:38:15:db:8c:aa:f6:20:ad:6d:d8:10:17: 7d:2a:66:5b:a0:28:65:91:c5:d7:7a:d6:f1:39:70:63:23:25: a1:ec:cc:e8:01:5c:c0:31:30:35:49:cd:e0:c1:b7:be:96:3c: c9:87:a3:f7:07:45:30:0e:1f:1e:d7:63:1b:69:bb:92:5f:0b: a7:4c:ee:04:72:78:34:4b:ea:57:c5:1e:92:fd:ff:74:a1:34: 18:6c:65:b0:8a:2a:13:5e:f1:95:74:89:d4:0e:b5:33:a1:96: 2f:6a:3b:03 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAxMDg1MjI1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4RTFDNDExMC8GA1UEBRMoQkQ4OTc4MTY1NkQ5RDE1ODM0N0I3QjE0 QzA0QUQ5RUE0NDFDQzk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMyWGEii9wFiKq7aVPiUZNgtCmASUTu/K8AY1X3ZJxKg6rqiCvfdN6T7t9aP/aHs FuyBuuXJOPjfU0HCCZUdov4cd2FBhiPzmTk4fADyBbK0e+ffNeOdaNC+Mm3zGzth 76i+Tf1vG0RhVYC2znivamfno2dp5k99CYN+xAMKiaUkbwvjehM+gKcKXhmz0ZsL 6YTIQo9pBN2oXE7YTgSmRlJVrP5+CZAsEyQMRvf/FJ2HMy06kWqpfzSqNMt8f264 v6jSZ2tKQGEf6x1NSScXrsyT3sOyNdxNScclk/FnTTKwUXybPm3ETL52p0Y5UgTJ xvv9c4xMEbYcw4C/jlt/0/cCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS9iXgWVtnR WDR7exTAStnqRBzJlzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxQzQvMEM3MUU3RkFDRTkzMTFGMDg4QUIxNTI0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFMUM0LzBDNzFFN0ZBQ0U5MzExRjA4OEFCMTUyNEM0RjlBRTAyL3ZZbDRGbGJa MFZnMGUzc1V3RXJaNmtRY3laYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPJjANBgkqhkiG9w0BAQsFAAOCAQEAfBQJovcNa2iupEj5+hde KkFP7RP1AUvU0s+BkzfSqGAPDQV+9QeJrmZNQ6JMfSNVcrivSV9OiVU/48ifkEfg 0hYfWWVX8NoSoeGMX8lQS7ug3jGx6lSSOGXWixl1Rry+5IlcGfGEWfUSd+AYXQjv d0kkKzkd3Bidw1qgyoq91n4S1BVMn/hli4AuVj1dotW25XegQ/xEOBXbjKr2IK1t 2BAXfSpmW6AoZZHF13rW8TlwYyMloezM6AFcwDEwNUnN4MG3vpY8yYej9wdFMA4f HtdjG2m7kl8Lp0zuBHJ4NEvqV8Uekv3/dKE0GGxlsIoqE17xlXSJ1A61M6GWL2o7 Aw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:33 2025 by rpki-client