This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer File: f3dZIELjyHvlbu2B2cyw6XQCzdc.cer (raw, json) Hash identifier: T2bMMFHSup0kTbNQyQScgS7ZhOrcjXjqKjRHzD7WmjQ= Subject key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4E6B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 17:52:58 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 86.48.240.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20075 (0x4e6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 18 17:52:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:c4:27:13:ce:3e:4e:62:01:7a:8a:d9:36: 41:33:16:b1:01:0f:41:bb:71:60:69:8a:c4:d3:80: 40:0c:d0:33:96:4c:63:51:70:38:af:33:48:1e:ef: 26:49:fa:a9:98:fd:49:f8:e8:89:05:2b:6d:05:69: 68:d0:50:59:7c:8a:98:75:c6:cc:d1:e3:72:2a:ca: e9:b6:f0:44:37:50:be:05:ef:5b:41:2f:6d:a6:3d: bf:43:34:46:0d:2c:c6:9e:d5:6b:3b:be:21:05:26: 00:56:fe:e9:ab:2f:27:3d:19:de:0c:9e:c3:1c:ee: 5a:8b:cb:fd:a1:c2:5f:ee:0e:15:d3:43:f4:3c:22: d4:4f:12:4b:3b:f1:58:13:c6:5f:76:24:8a:50:11: 5a:65:34:68:26:8f:81:fa:c7:3c:07:d5:70:20:48: 96:e0:b8:48:24:ce:7a:83:6f:85:7a:ce:6c:f5:54: 76:9e:e7:1f:9b:61:f8:54:0b:6a:0f:9b:0b:35:b0: 38:16:bb:66:38:7f:4f:72:f6:dd:cb:df:a3:bc:40: 40:94:64:3d:97:31:2f:3b:a7:61:63:34:fb:92:c0: 0d:a9:cb:9f:94:94:3c:e3:9f:3d:f2:a5:33:e2:39: 8e:8b:09:2b:10:13:03:4e:92:d7:33:07:86:b6:4d: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 86.48.240.0/20 Signature Algorithm: sha256WithRSAEncryption 24:7c:a9:1e:bc:77:e3:27:a8:8f:d2:78:22:32:0c:7b:a1:82: 66:77:63:6a:b9:6f:8c:8d:30:45:1e:cb:ac:00:b7:87:c3:5e: 94:35:c1:8f:0b:ff:6d:d6:23:1c:ca:2a:0e:ce:f8:9f:8b:38: b6:2d:97:f5:50:3b:24:b3:ef:f1:84:95:25:fa:fb:d8:18:4a: bc:ae:f4:ae:28:f5:0f:93:58:c5:23:5a:01:b9:8f:a1:9f:94: c7:c4:f9:93:37:c9:6b:b1:15:88:ab:c1:21:26:bb:6b:cb:f9: ac:97:5c:5e:01:22:fd:3a:65:3b:8d:81:a5:7f:6e:f0:28:af: e5:0d:89:e4:40:49:09:74:14:71:4e:6a:d2:fe:7f:52:3d:4c: 3d:0e:a1:bb:b3:9f:38:5a:13:5f:1b:36:b5:35:5e:06:64:57: b5:fa:f9:da:c8:ec:20:b3:1d:b4:62:83:ba:74:54:2f:b4:55: 00:3d:16:d4:8a:69:12:f1:68:fa:a5:5f:20:02:ee:f6:54:e4: a2:31:60:a1:04:79:07:3b:7b:4a:aa:9c:dd:46:e6:ed:b6:3c: ce:95:1a:6b:31:bf:27:f2:f8:cb:c8:e6:41:60:59:21:7f:10: bd:fe:d3:6b:2f:76:70:31:03:ff:c3:a7:0a:4b:1a:11:b2:88: dd:f6:e8:51 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICTmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMTE4MTc1MjU4WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgx RDlDQ0IwRTk3NDAyQ0RENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOspxCcTzj5OYgF6itk2QTMWsQEPQbtxYGmKxNOAQAzQM5ZMY1FwOK8zSB7vJkn6 qZj9SfjoiQUrbQVpaNBQWXyKmHXGzNHjcirK6bbwRDdQvgXvW0EvbaY9v0M0Rg0s xp7Vazu+IQUmAFb+6asvJz0Z3gyewxzuWovL/aHCX+4OFdND9Dwi1E8SSzvxWBPG X3YkilARWmU0aCaPgfrHPAfVcCBIluC4SCTOeoNvhXrObPVUdp7nH5th+FQLag+b CzWwOBa7Zjh/T3L23cvfo7xAQJRkPZcxLzunYWM0+5LADanLn5SUPOOfPfKlM+I5 josJKxATA06S1zMHhrZNybUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR/d1kgQuPI e+Vu7YHZzLDpdALN1zAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJBNDcvMTU5MDdDMjJCODIxMTFFRkFBRTZGNTY3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkyQTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxq eUh2bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBFYw8DANBgkqhkiG9w0BAQsFAAOCAQEAJHypHrx34yeoj9J4IjIM e6GCZndjarlvjI0wRR7LrAC3h8NelDXBjwv/bdYjHMoqDs74n4s4ti2X9VA7JLPv 8YSVJfr72BhKvK70rij1D5NYxSNaAbmPoZ+Ux8T5kzfJa7EViKvBISa7a8v5rJdc XgEi/TplO42BpX9u8Civ5Q2J5EBJCXQUcU5q0v5/Uj1MPQ6hu7OfOFoTXxs2tTVe BmRXtfr52sjsILMdtGKDunRUL7RVAD0W1IppEvFo+qVfIALu9lTkojFgoQR5Bzt7 Sqqc3Ubm7bY8zpUaazG/J/L4y8jmQWBZIX8Qvf7Tay92cDED/8OnCksaEbKI3fbo UQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:28 2025 by rpki-client