This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer File: ysouRCIiw-2H53WblewRGMOLhbY.cer (raw, json) Hash identifier: /45Zl7nT2b6kozqvW9w/YZzMXQcpVRGfPh7RA88XHps= Subject key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E02 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 11:20:51 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.186.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28162 (0x6e02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 13 11:20:51 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:64:01:f3:dd:48:a8:eb:f6:27:a9:51:f7: f7:e5:cf:36:08:9b:57:ad:4f:4f:30:67:20:ee:70: 40:b9:f9:74:2e:f0:04:fd:6b:61:dc:fe:c8:5e:c5: 6a:e3:33:29:33:ac:7c:71:b4:24:cb:e2:24:3b:84: 30:84:a3:ba:55:28:1d:8b:ff:ed:01:55:b1:63:2e: 23:dd:fe:e9:3e:ae:d0:fb:03:2e:84:74:15:94:74: 08:e9:0d:96:e8:c9:da:08:4c:29:10:74:f4:ef:0a: a1:d7:38:8c:45:da:aa:22:82:97:92:c9:85:a7:8e: b3:d9:5a:d5:b6:43:fa:38:dd:0f:91:9c:1c:fc:03: e7:73:7b:7c:23:7e:4c:4c:ec:06:e9:10:95:55:ec: 9e:f8:9d:39:48:4d:20:47:0c:9a:1b:13:e0:19:e9: 13:dd:c5:bc:db:d4:29:87:55:f9:70:d0:bc:cb:36: 3b:17:79:4b:00:24:7e:76:a8:12:84:5c:22:64:45: 34:54:98:69:72:5e:42:c5:03:54:3f:60:3f:f2:81: e7:d8:2c:ba:05:fb:92:e2:a6:91:bc:30:de:a5:b0: 69:c8:21:15:b6:6f:9e:52:f7:51:48:f7:fc:69:e3: e0:99:64:94:c8:31:f5:89:d4:ec:6e:c4:ab:ac:1d: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.186.0/23 Signature Algorithm: sha256WithRSAEncryption 75:22:8c:13:d2:aa:57:75:80:db:c9:74:ff:a3:74:a1:9e:fd: de:9e:3f:b0:55:3a:b2:5e:34:47:d6:a3:58:9c:72:ac:f2:d6: 02:a4:a0:e3:36:b0:59:6b:43:53:70:b7:28:fd:19:86:9f:9b: 8b:02:ae:28:60:15:5d:a1:05:ee:fb:10:2d:b2:f5:e2:72:ce: ba:ad:25:cd:ec:1e:39:12:15:fe:4d:5a:73:33:ef:1c:32:2c: c0:89:13:66:37:76:99:5c:1c:6e:8e:19:b0:5c:e1:29:32:3d: bd:67:49:b4:94:49:e0:1e:b0:2f:62:bd:04:b5:d7:6e:03:f4: 99:8a:25:31:7d:fd:e4:a3:de:ff:b5:7e:49:29:3c:0a:5a:8a: 35:c3:63:97:60:f1:98:70:76:0b:35:d9:05:34:bf:2c:d1:a3: 08:96:6e:96:56:a4:ee:b3:87:2e:01:2f:8c:bc:b9:b0:9b:da: 51:1d:c7:d7:95:53:00:02:0b:f9:8f:e9:88:41:ac:59:68:f5: 29:dc:18:c4:ce:77:9c:28:04:c4:5f:51:63:18:ae:62:73:12: 9a:6c:4a:54:e8:40:6a:64:71:77:fb:47:2f:a3:c3:8d:05:e8: 10:f1:92:22:1f:07:a2:a5:7b:7d:a9:38:18:9a:0f:46:f4:83: a2:5a:91:2b -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEzMTEyMDUxWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFOUE0NDExMC8GA1UEBRMoQ0FDQTJFNDQyMjIyQzNFRDg3RTc3NTlC OTVFQzExMThDMzhCODVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALnXZAHz3Uio6/YnqVH39+XPNgibV61PTzBnIO5wQLn5dC7wBP1rYdz+yF7FauMz KTOsfHG0JMviJDuEMISjulUoHYv/7QFVsWMuI93+6T6u0PsDLoR0FZR0COkNlujJ 2ghMKRB09O8Kodc4jEXaqiKCl5LJhaeOs9la1bZD+jjdD5GcHPwD53N7fCN+TEzs BukQlVXsnvidOUhNIEcMmhsT4BnpE93FvNvUKYdV+XDQvMs2Oxd5SwAkfnaoEoRc ImRFNFSYaXJeQsUDVD9gP/KB59gsugX7kuKmkbww3qWwacghFbZvnlL3UUj3/Gnj 4JlklMgx9YnU7G7Eq6wdvrcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTKyi5EIiLD 7YfndZuV7BEYw4uFtjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlBNDQvQ0RBOTVCNDhDMDgyMTFGMEI4RkU3MjI2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU5QTQ0L0NEQTk1QjQ4QzA4MjExRjBCOEZFNzIyNkM0RjlBRTAyL3lzb3VSQ0lp dy0ySDUzV2JsZXdSR01PTGhiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8ujANBgkqhkiG9w0BAQsFAAOCAQEAdSKME9KqV3WA28l0/6N0 oZ793p4/sFU6sl40R9ajWJxyrPLWAqSg4zawWWtDU3C3KP0Zhp+biwKuKGAVXaEF 7vsQLbL14nLOuq0lzeweORIV/k1aczPvHDIswIkTZjd2mVwcbo4ZsFzhKTI9vWdJ tJRJ4B6wL2K9BLXXbgP0mYolMX395KPe/7V+SSk8ClqKNcNjl2DxmHB2CzXZBTS/ LNGjCJZullak7rOHLgEvjLy5sJvaUR3H15VTAAIL+Y/piEGsWWj1KdwYxM53nCgE xF9RYxiuYnMSmmxKVOhAamRxd/tHL6PDjQXoEPGSIh8HoqV7fak4GJoPRvSDolqR Kw== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:27 2025 by rpki-client