This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer File: wtbHmmd8l-xwBjE76RZ-DeZspFI.cer (raw, json) Hash identifier: a3etdBReUDr4tjgTXzBOes/vazgt96KkGnQr7bhCSXE= Subject key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6CF6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 29 Oct 2025 10:27:04 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.112.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27894 (0x6cf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Oct 29 10:27:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ac:b1:5e:cc:44:31:86:cc:c8:9b:5d:5a:6c: 20:0e:12:29:b8:c1:32:7e:7b:ba:93:49:a9:b0:b0: 0f:37:8e:e9:71:c3:cc:b5:57:89:1f:aa:9d:ce:1b: 29:b5:a2:11:34:ef:4c:12:80:86:73:ac:05:1f:2b: 59:8d:fb:c1:d1:38:b3:15:59:5b:09:ce:9f:44:42: cb:0a:9c:21:44:db:a8:a8:b0:05:17:3d:75:87:ed: c9:d9:a0:5a:d8:1c:f6:b9:83:5b:ed:3b:32:ea:9f: e8:2d:e1:d5:02:90:32:26:a4:37:97:6a:7d:c0:cc: d6:85:ee:d4:84:de:a4:4d:1a:2b:41:6b:04:f2:72: 41:da:c3:5b:4c:47:fd:d0:c0:2f:60:15:80:48:12: 61:87:16:ef:e9:8e:94:bd:fc:4b:71:1d:b6:ed:43: b7:fa:31:35:ed:72:a9:41:28:d3:76:70:29:73:e5: 1c:de:73:ad:62:9c:bd:ce:12:01:1a:0d:3f:1e:f7: 5a:4f:76:53:58:f8:3c:6b:d2:01:53:f4:4f:69:04: 8e:ea:1d:57:54:17:d4:41:e1:0b:0e:d6:ca:0c:42: f8:ff:b4:25:fd:b7:9e:4c:31:c7:41:04:6b:d9:2f: 88:50:3a:1c:55:9c:ba:c8:52:d7:84:08:49:64:8d: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.112.0/23 Signature Algorithm: sha256WithRSAEncryption be:9b:a7:b5:c8:21:b8:5d:aa:ea:19:27:40:06:31:a6:8f:ac: e5:08:bb:92:06:60:ce:33:6f:92:52:74:5d:bb:33:d1:1a:ea: 4b:4f:de:74:07:2f:89:12:6f:8b:c0:87:68:a3:d5:a4:a4:7d: 8c:db:88:43:59:ca:2f:02:a4:77:7c:58:06:02:26:3b:1d:71: af:31:d0:28:f6:c0:86:cb:25:b4:ed:4f:21:21:13:04:55:ab: bb:3b:6f:f6:0e:e9:a5:40:83:25:df:c9:7a:04:c0:50:7f:79: 6d:9e:ee:9b:97:79:e5:1d:eb:e6:0e:a0:31:ac:cf:c0:b5:bc: fa:20:13:03:64:cf:05:ac:24:f1:ac:1f:0b:70:fa:47:e6:72: 40:6a:46:bf:40:29:92:9f:91:8e:74:62:3b:1b:3e:8a:ea:79: 9a:f2:c5:5a:cc:0b:41:d7:12:a4:3f:10:fc:25:7e:bf:ab:5f: 96:93:5a:a3:36:fc:1f:a7:04:33:8d:9f:94:95:73:4a:d6:8e: d0:8e:04:0e:4d:36:ab:28:93:ab:81:b4:a6:f1:31:e7:d8:ca: 38:b7:7c:a7:0e:89:6f:ec:f8:f8:67:ea:46:e0:13:42:a4:80: b4:f7:36:69:5a:58:ff:ef:5a:2e:7c:88:36:ff:05:05:07:97: 5a:03:69:36 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMDI5MTAyNzA0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5MkY1QjExMC8GA1UEBRMoQzJENkM3OUE2NzdDOTdFQzcwMDYzMTNC RTkxNjdFMERFNjZDQTQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APCssV7MRDGGzMibXVpsIA4SKbjBMn57upNJqbCwDzeO6XHDzLVXiR+qnc4bKbWi ETTvTBKAhnOsBR8rWY37wdE4sxVZWwnOn0RCywqcIUTbqKiwBRc9dYftydmgWtgc 9rmDW+07Muqf6C3h1QKQMiakN5dqfcDM1oXu1ITepE0aK0FrBPJyQdrDW0xH/dDA L2AVgEgSYYcW7+mOlL38S3Edtu1Dt/oxNe1yqUEo03ZwKXPlHN5zrWKcvc4SARoN Px73Wk92U1j4PGvSAVP0T2kEjuodV1QX1EHhCw7WygxC+P+0Jf23nkwxx0EEa9kv iFA6HFWcushS14QISWSN0XcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTC1seaZ3yX 7HAGMTvpFn4N5mykUjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJGNUIvQ0RBQkYxODJCNEIxMTFGMEFEQzJCMTFGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkyRjVCL0NEQUJGMTgyQjRCMTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4 bC14d0JqRTc2UlotRGVac3BGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8cDANBgkqhkiG9w0BAQsFAAOCAQEAvpuntcghuF2q6hknQAYx po+s5Qi7kgZgzjNvklJ0Xbsz0RrqS0/edAcviRJvi8CHaKPVpKR9jNuIQ1nKLwKk d3xYBgImOx1xrzHQKPbAhssltO1PISETBFWruztv9g7ppUCDJd/JegTAUH95bZ7u m5d55R3r5g6gMazPwLW8+iATA2TPBawk8awfC3D6R+ZyQGpGv0Apkp+RjnRiOxs+ iup5mvLFWswLQdcSpD8Q/CV+v6tflpNaozb8H6cEM42flJVzStaO0I4EDk02qyiT q4G0pvEx59jKOLd8pw6Jb+z4+GfqRuATQqSAtPc2aVpY/+9aLnyINv8FBQeXWgNp Ng== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:33 2025 by rpki-client