This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer (raw, json) Hash identifier: FHeVZoGqoHChD+UqxFbyVO4n/g7cM9QJntNvAhnsalo= Subject key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4E58 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft caRepository: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 16:05:52 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 56868 IP: 82.158.128.0/19 IP: 212.117.48.0/20 IP: 2001:7fa:2::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20056 (0x4e58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 13 16:05:52 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:48:c4:77:1f:a2:b3:25:74:08:6d:08:9e: 91:f2:a9:f9:af:a5:f6:43:50:14:de:8c:96:4c:42: bf:e3:09:9d:08:0c:9b:9d:b6:3b:aa:24:73:76:78: 48:c6:7e:e5:6a:79:9a:66:3d:5d:90:4e:0c:3b:cb: 31:67:79:fb:d6:66:46:53:4e:97:5e:86:f5:23:e5: 94:5d:0a:dc:92:ee:8e:a4:f4:44:83:a7:ac:8d:86: d2:92:5c:cd:f7:8d:f2:83:d9:65:fa:c9:4c:f4:2e: 71:2a:1b:1c:d0:b2:1e:82:fd:5c:52:7b:77:89:84: 3b:6a:55:67:17:4a:0c:e9:96:2d:1f:26:1d:9f:60: 06:96:fe:ae:03:0a:d6:d3:57:47:02:e3:24:65:53: f1:14:52:76:75:3a:21:f3:2f:59:89:f1:7c:d7:3e: 03:09:b9:b7:6b:b8:35:bd:bf:12:c9:a8:7b:8c:5e: 3c:45:b1:da:6b:ee:23:14:03:66:f2:7d:0f:6e:0c: 9d:75:ba:08:b3:ec:18:98:93:31:1a:7f:ab:f8:e3: ec:a7:ff:f8:87:14:0e:0b:05:01:c1:e9:a5:83:f4: 8a:ee:b4:82:e6:b1:cb:fa:dc:af:a7:df:3f:c0:e7: 04:c2:49:0b:e5:c0:00:a7:9e:13:af:66:76:fe:87: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 56868 sbgp-ipAddrBlock: critical IPv4: 82.158.128.0/19 212.117.48.0/20 IPv6: 2001:7fa:2::/48 Signature Algorithm: sha256WithRSAEncryption ac:b3:4a:97:53:a4:7e:dc:65:c4:e0:df:77:ac:bc:34:b1:a0: 91:10:5a:e2:92:6c:f9:ca:57:9f:9e:1b:7e:f9:0e:f9:4d:0d: aa:cb:78:e5:33:c8:95:5c:18:c9:88:82:bc:1c:62:6b:9d:af: 92:bf:b0:7c:d0:3c:d1:45:34:bf:93:a6:d0:0a:22:18:f0:3b: 54:4c:61:53:cd:cb:f4:12:05:73:31:bf:92:c8:69:51:d7:d1: 1a:79:8c:96:55:b5:76:8b:12:01:c1:50:22:51:ec:d3:e3:97: 1a:cb:2f:a4:04:97:75:f1:5c:ee:cf:6f:97:17:e6:16:93:e3: ee:c0:de:00:81:5b:aa:5f:36:ce:80:cc:ce:d9:3d:73:e7:2c: d1:10:14:78:f0:a3:47:d8:0f:2b:ff:6f:22:0e:a0:43:fc:70: 15:12:14:ad:26:f1:94:da:a6:cc:43:b7:b3:18:18:a7:2f:2a: 2c:fe:c4:83:f0:ab:9e:23:51:7b:21:d9:5d:35:06:46:36:9f: 07:25:64:a4:01:79:05:0d:5d:86:01:25:ba:ac:25:c5:b8:0e: d4:32:9a:29:4d:cb:55:12:bd:62:db:e5:6e:33:83:e8:c3:55: e4:8d:65:05:5f:e3:19:e0:28:dd:75:eb:f0:95:31:cf:fd:c3: 35:7f:82:e0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICTlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMTEzMTYwNTUyWhcNMjYwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4NjIxNDExMC8GA1UEBRMoREQ0OTMwRTNFNDJERkUzQkZGRjQ4MUIx Nzk3NzBEMUFCMTU3NUJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOkQSMR3H6KzJXQIbQiekfKp+a+l9kNQFN6MlkxCv+MJnQgMm522O6okc3Z4SMZ+ 5Wp5mmY9XZBODDvLMWd5+9ZmRlNOl16G9SPllF0K3JLujqT0RIOnrI2G0pJczfeN 8oPZZfrJTPQucSobHNCyHoL9XFJ7d4mEO2pVZxdKDOmWLR8mHZ9gBpb+rgMK1tNX RwLjJGVT8RRSdnU6IfMvWYnxfNc+Awm5t2u4Nb2/Esmoe4xePEWx2mvuIxQDZvJ9 D24MnXW6CLPsGJiTMRp/q/jj7Kf/+IcUDgsFAcHppYP0iu60guaxy/rcr6ffP8Dn BMJJC+XAAKeeE69mdv6Ha+0CAwEAAaOCAyYwggMiMB0GA1UdDgQWBBTdSTDj5C3+ O//0gbF5dw0asVdbwzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvRDc4NTk5QkMzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg2MjE0L0Q3ODU5OUJDMzMxQTExRTRBRjJBQjM3Q0M0RjlBRTAyLzNVa3c0LVF0 X2p2XzlJR3hlWGNOR3JGWFc4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA3iQwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBAVSnoADBATUdTAw DwQCAAIwCQMHACABB/oAAjANBgkqhkiG9w0BAQsFAAOCAQEArLNKl1OkftxlxODf d6y8NLGgkRBa4pJs+cpXn54bfvkO+U0Nqst45TPIlVwYyYiCvBxia52vkr+wfNA8 0UU0v5Om0AoiGPA7VExhU83L9BIFczG/kshpUdfRGnmMllW1dosSAcFQIlHs0+OX GssvpASXdfFc7s9vlxfmFpPj7sDeAIFbql82zoDMztk9c+cs0RAUePCjR9gPK/9v Ig6gQ/xwFRIUrSbxlNqmzEO3sxgYpy8qLP7Eg/CrniNReyHZXTUGRjafByVkpAF5 BQ1dhgEluqwlxbgO1DKaKU3LVRK9YtvlbjOD6MNV5I1lBV/jGeAo3XXr8JUxz/3D NX+C4A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:14 2025 by rpki-client