This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer File: whcUQpGt4TEa-2LQLllQN8jatdw.cer (raw, json) Hash identifier: owWVeJc9XPxld0oFdpiRkZU7Ijk1ObB4bjR5iONF66k= Subject key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DCD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 10:42:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.115.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28109 (0x6dcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 10 10:42:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:57:2c:82:23:94:20:c7:0a:5d:b2:f2:48: 4b:62:13:26:dd:16:f4:65:5d:62:e1:15:41:16:b3: fa:5f:6e:2f:a1:0a:25:48:06:35:25:a2:e0:73:e4: 92:81:c6:5b:e2:0f:2c:53:b9:12:cb:cf:2b:cf:d0: 4f:9b:52:6f:be:84:0f:89:e8:e9:2c:73:c3:3d:6e: 5e:5d:ea:c8:d1:f3:a8:4c:fb:ea:93:84:a5:e7:d5: f6:e7:2c:8f:4f:1b:b3:7d:b5:93:fd:72:b4:40:28: 91:00:24:55:d3:f4:f9:71:3a:b4:d0:06:20:03:f9: a2:61:54:e7:71:56:21:f4:28:b4:23:c6:fd:c3:0e: 14:3b:95:9a:8b:18:8f:a3:7c:c4:57:32:6d:f2:89: 8d:62:30:cd:10:3c:99:60:fd:03:a0:f7:89:c6:cd: a3:85:02:48:be:77:cf:43:b4:7f:f3:2c:ea:6c:96: 3d:d5:7e:c1:12:1e:e6:9c:4f:ef:8f:7b:33:16:64: 6d:94:2d:af:0e:20:23:a4:0f:38:d1:ee:92:a8:66: ce:6a:b9:38:fe:20:08:73:24:8b:ad:6a:03:43:22: 15:f2:e0:ae:1f:ce:dd:d5:fe:50:5a:9a:3c:43:91: 11:8f:70:fa:5c:f4:db:15:7d:6e:7f:f4:1e:4a:6f: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.115.0/24 Signature Algorithm: sha256WithRSAEncryption c1:72:32:1f:67:a2:d8:68:23:91:1a:f4:ee:2d:65:bc:b5:1f: 56:df:28:d8:e5:6d:09:87:f8:ca:e4:8d:e2:f1:71:5d:eb:cc: 2b:7f:1b:c8:9e:61:60:ff:a9:d0:6b:85:34:53:c9:62:7d:3c: 4b:6e:8d:6d:92:d5:04:2e:06:20:3f:38:8e:40:d8:de:cd:30: 78:2c:a5:f7:60:9d:73:fe:bc:20:15:0a:d7:9a:6c:d1:4d:f2: de:97:cc:ee:30:76:ef:a7:44:00:66:69:06:09:f5:3c:c9:ee: 19:af:df:54:48:ea:45:5e:fc:ac:5d:f2:a2:e8:f2:8f:f8:b0: 69:67:2a:75:cd:f7:55:14:80:c0:c0:29:5a:64:5e:f5:7a:e5: 9a:a7:70:e1:bb:7c:ec:d8:7f:bc:77:ad:3e:a4:a2:ac:dc:0c: 58:48:45:d2:73:0d:36:e5:fd:c6:29:37:b4:1d:f3:2f:60:49: 85:1f:99:27:52:da:b6:b5:25:70:c7:5c:4b:41:94:11:03:95: e6:fe:a0:80:81:fa:18:1c:c4:35:4b:47:63:52:41:c4:d1:68: 0d:f8:a7:89:12:3a:36:0f:4d:9c:37:ce:13:65:36:a8:9e:ee: 24:51:64:e2:ce:9f:9a:02:ff:7e:00:62:d7:60:d0:a6:bc:b2: 17:4f:3d:2d -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEwMTA0MjQ2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFM0U4QjExMC8GA1UEBRMoQzIxNzE0NDI5MUFERTEzMTFBRkI2MkQw MkU1OTUwMzdDOERBQjVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMdKVyyCI5QgxwpdsvJIS2ITJt0W9GVdYuEVQRaz+l9uL6EKJUgGNSWi4HPkkoHG W+IPLFO5EsvPK8/QT5tSb76ED4no6Sxzwz1uXl3qyNHzqEz76pOEpefV9ucsj08b s321k/1ytEAokQAkVdP0+XE6tNAGIAP5omFU53FWIfQotCPG/cMOFDuVmosYj6N8 xFcybfKJjWIwzRA8mWD9A6D3icbNo4UCSL53z0O0f/Ms6myWPdV+wRIe5pxP7497 MxZkbZQtrw4gI6QPONHukqhmzmq5OP4gCHMki61qA0MiFfLgrh/O3dX+UFqaPEOR EY9w+lz02xV9bn/0Hkpv4ssCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTCFxRCka3h MRr7YtAuWVA3yNq13DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNFOEIvRkM3NTM4NkFCRTIxMTFGMEFGRDVCNTE5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUzRThCL0ZDNzUzODZBQkUyMTExRjBBRkQ1QjUxOUM0RjlBRTAyL3doY1VRcEd0 NFRFYS0yTFFMbGxRTjhqYXRkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8czANBgkqhkiG9w0BAQsFAAOCAQEAwXIyH2ei2GgjkRr07i1l vLUfVt8o2OVtCYf4yuSN4vFxXevMK38byJ5hYP+p0GuFNFPJYn08S26NbZLVBC4G ID84jkDY3s0weCyl92Cdc/68IBUK15ps0U3y3pfM7jB276dEAGZpBgn1PMnuGa/f VEjqRV78rF3youjyj/iwaWcqdc33VRSAwMApWmRe9Xrlmqdw4bt87Nh/vHetPqSi rNwMWEhF0nMNNuX9xik3tB3zL2BJhR+ZJ1LatrUlcMdcS0GUEQOV5v6ggIH6GBzE NUtHY1JBxNFoDfiniRI6Ng9NnDfOE2U2qJ7uJFFk4s6fmgL/fgBi12DQpryyF089 LQ== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:30 2025 by rpki-client