This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer (raw, json) Hash identifier: Z6WVRPdwvYqR09LROyyf7+kiv5V+MV/eEYNqiH2rNCE= Subject key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E94 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft caRepository: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 02:35:15 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.248.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28308 (0x6e94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 21 02:35:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:50:17:66:2b:98:4b:1d:fa:2b:51:ce:e9: 08:65:c6:d7:db:a8:67:06:f6:20:30:f5:5c:17:f0: f3:09:13:49:e0:15:4b:ba:04:07:24:1c:71:9b:52: 00:b1:47:c5:e3:f7:14:a0:c5:28:aa:d5:06:cd:2d: d9:4c:42:e7:4a:c2:0f:c0:5e:b4:4c:65:5c:e5:24: 3a:cc:35:ad:30:95:a7:82:80:1f:31:84:e5:f3:35: f0:e1:56:20:c2:75:e2:50:dc:bc:a2:1d:30:c8:77: 53:58:f7:6b:f1:5f:3d:ae:db:7d:a5:3d:ac:cd:2e: 28:69:1e:a2:fa:0b:81:c5:90:aa:a0:d5:72:d1:ae: ea:06:b1:65:55:64:73:b8:86:99:01:dd:83:01:83: dc:59:2c:1d:cd:fd:4a:47:3d:10:2c:15:53:01:0b: 7f:79:2c:1a:23:fe:77:78:d1:04:60:52:f4:b3:b4: 48:c2:e0:91:9f:89:09:76:9b:f8:3a:84:fa:ac:ca: 29:df:0a:e2:6f:c2:a3:48:e9:01:a4:88:97:ee:7a: 5a:01:72:54:59:cf:51:48:1e:1c:f0:30:52:4f:10: 5e:71:55:97:c2:4e:30:3c:45:11:36:4d:31:87:13: f0:ee:c4:8e:22:19:cf:38:d2:08:6d:14:e9:f1:ae: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.248.0/23 Signature Algorithm: sha256WithRSAEncryption 05:1c:07:c5:11:42:4d:13:7f:a5:8f:b6:a3:48:1a:ac:6a:b1: 05:f1:0b:dc:c4:56:19:eb:62:47:6a:5e:3d:22:dd:37:9b:2c: 3d:e3:dd:cb:8b:8e:c6:a2:a2:68:35:7c:a5:e5:16:df:cd:db: 27:7d:f2:66:08:36:be:e7:1a:60:85:e9:53:ad:42:7d:fb:f6: db:4f:ed:53:ed:ee:df:88:a7:26:d7:04:b7:9c:24:00:14:f2: 8f:f7:cf:cb:3c:b8:44:da:69:a1:62:86:fe:f9:03:c9:89:57: 73:fb:61:58:46:ab:d1:f7:bc:87:93:30:d4:41:2e:44:6d:1e: 6b:9e:e7:04:8a:24:36:73:21:ec:57:d7:38:87:77:cc:18:e9: c0:19:2d:e7:46:8a:b8:db:d2:72:a2:93:bc:3d:0c:7c:17:db: f5:81:db:ad:2b:8d:ae:e0:20:2c:8e:7b:ed:20:52:6c:b8:37: 18:66:a6:41:57:45:af:eb:40:8a:bd:17:a3:c5:cf:80:5c:97: 83:cd:97:4a:0c:72:bc:fe:4f:fe:c7:9f:a5:e5:9d:92:21:a3: 47:7b:03:a8:a7:dd:7a:9e:77:a7:a4:0b:05:c6:28:9f:74:7f: 30:5a:c8:5b:3a:f2:84:3f:02:ef:3c:39:f1:1e:4d:4f:95:6c: be:cf:b2:b4 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTIxMDIzNTE1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzQ0UxODExMC8GA1UEBRMoQ0Y5QTNGMzE2NDgzQTJBNzk0NDExRDU5 MTQ2RjlGQzU2NDA5MTk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMUbUBdmK5hLHforUc7pCGXG19uoZwb2IDD1XBfw8wkTSeAVS7oEByQccZtSALFH xeP3FKDFKKrVBs0t2UxC50rCD8BetExlXOUkOsw1rTCVp4KAHzGE5fM18OFWIMJ1 4lDcvKIdMMh3U1j3a/FfPa7bfaU9rM0uKGkeovoLgcWQqqDVctGu6gaxZVVkc7iG mQHdgwGD3FksHc39Skc9ECwVUwELf3ksGiP+d3jRBGBS9LO0SMLgkZ+JCXab+DqE +qzKKd8K4m/Co0jpAaSIl+56WgFyVFnPUUgeHPAwUk8QXnFVl8JOMDxFETZNMYcT 8O7EjiIZzzjSCG0U6fGuZSkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTPmj8xZIOi p5RBHVkUb5/FZAkZlzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NFMTgvQjM3NTJBQjJDNjgyMTFGMEI3NkUxNzQ2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNDRTE4L0IzNzUyQUIyQzY4MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NE b3FlVVFSMVpGRy1meFdRSkdaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8+DANBgkqhkiG9w0BAQsFAAOCAQEABRwHxRFCTRN/pY+2o0ga rGqxBfEL3MRWGetiR2pePSLdN5ssPePdy4uOxqKiaDV8peUW383bJ33yZgg2vuca YIXpU61Cffv220/tU+3u34inJtcEt5wkABTyj/fPyzy4RNppoWKG/vkDyYlXc/th WEar0fe8h5Mw1EEuRG0ea57nBIokNnMh7FfXOId3zBjpwBkt50aKuNvScqKTvD0M fBfb9YHbrSuNruAgLI577SBSbLg3GGamQVdFr+tAir0Xo8XPgFyXg82XSgxyvP5P /sefpeWdkiGjR3sDqKfdep53p6QLBcYon3R/MFrIWzryhD8C7zw58R5NT5Vsvs+y tA== -----END CERTIFICATE-----Generated at Wed Dec 3 13:13:45 2025 by rpki-client