This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.cer (raw, json) Hash identifier: dKuLBRhyLZtivV2YTY/CVY3dqf15UhTNAFwVZZVRSYc= Subject key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EEC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft caRepository: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 15:16:57 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.184.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28396 (0x6eec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 26 15:16:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:f6:83:7a:0e:00:06:00:03:d5:ad:67:54: 59:54:3c:94:a8:f2:99:38:ad:de:ae:55:58:95:55: 01:2c:dc:2a:80:a0:4f:d5:bc:a5:34:7d:80:af:3c: 21:9f:e5:9d:fa:5d:83:d9:84:0d:97:48:3b:f0:32: 3f:7e:fc:e8:db:d3:81:6f:4c:01:6d:0e:89:de:54: 68:f4:65:47:64:93:d2:5b:ca:13:db:7b:31:38:be: 45:51:1b:df:dc:ac:10:e0:3e:2e:f7:71:50:2d:f6: 11:be:ed:a6:12:40:b3:f8:95:7d:00:2f:3c:b2:46: df:5d:05:40:30:99:21:c6:4e:4d:93:9a:bc:dd:92: 07:bd:28:87:57:ff:eb:3d:7e:cb:ad:39:0a:3a:0c: a0:d8:2c:88:54:33:e1:d6:b2:79:88:86:86:63:25: 71:80:e1:47:40:eb:60:2b:39:d8:c4:4d:b9:78:da: 81:2f:fb:9b:97:b3:b7:86:20:cf:57:a0:9d:fa:42: 5a:a2:a1:4c:5b:f0:24:5b:a5:b0:79:d7:ed:e3:f4: 88:52:7e:c6:3d:32:cd:56:91:34:c8:3f:78:cb:0a: a2:f5:49:0c:bd:4c:f0:03:a0:7b:8c:1f:0d:1f:8d: ba:8a:b6:96:c9:80:79:29:c3:4c:02:d9:d6:00:02: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.184.0/23 Signature Algorithm: sha256WithRSAEncryption 12:db:4c:1d:97:1a:9a:8f:fe:e9:eb:45:93:f6:b1:9d:a8:b5: d6:c0:fb:fe:24:20:2b:21:ce:1e:75:8f:34:6b:19:33:b7:45: d4:8b:5c:f2:87:13:db:88:a5:5c:6d:6d:ef:b5:ac:2e:fc:38: 27:dc:9a:57:b9:2b:9e:f6:58:c1:7e:f1:4c:a8:0e:21:c3:d1: 12:51:45:bd:ab:31:c9:d8:4e:55:56:8d:4f:77:00:9e:df:9c: 92:4c:95:7b:e1:8e:22:bf:6e:f5:92:77:fa:72:68:40:44:46: 43:e6:02:82:ac:f6:5e:26:2e:6a:fc:1a:f3:8f:6c:81:8e:ce: bc:b2:0a:03:fe:67:45:c1:cf:6b:90:9f:bb:d4:b1:b9:3e:c0: b1:03:71:05:55:2f:bf:9f:62:72:be:f5:07:77:15:d5:57:ec: e0:28:09:d5:f1:41:88:e5:0d:f3:80:16:c0:c6:30:51:65:9c: 1e:30:f0:59:21:41:fc:57:2b:38:52:99:e0:2a:3f:6e:41:6b: 7a:b0:89:c0:73:df:29:68:39:3b:e9:60:62:92:e9:78:43:46: 7d:b2:e6:ea:6d:af:5e:c4:23:da:a3:90:19:6b:15:7a:76:ab: 02:8e:21:94:32:81:ef:15:d8:1b:4f:27:f9:23:34:d9:d7:e0: 58:11:2f:8a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI2MTUxNjU3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2MDY5QTExMC8GA1UEBRMoRDkwODM5M0M1QkE4MDM1QUY2OEI3RUMw MDk1NThFODEyRUQwOTVFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANbR9oN6DgAGAAPVrWdUWVQ8lKjymTit3q5VWJVVASzcKoCgT9W8pTR9gK88IZ/l nfpdg9mEDZdIO/AyP3786NvTgW9MAW0Oid5UaPRlR2ST0lvKE9t7MTi+RVEb39ys EOA+LvdxUC32Eb7tphJAs/iVfQAvPLJG310FQDCZIcZOTZOavN2SB70oh1f/6z1+ y605CjoMoNgsiFQz4dayeYiGhmMlcYDhR0DrYCs52MRNuXjagS/7m5ezt4Ygz1eg nfpCWqKhTFvwJFulsHnX7eP0iFJ+xj0yzVaRNMg/eMsKovVJDL1M8AOge4wfDR+N uoq2lsmAeSnDTALZ1gAC0fECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTZCDk8W6gD WvaLfsAJVY6BLtCV4DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA2OUEvMkVCNjA3OTY5QkYwMTFFRjgxQzkwMjY3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYwNjlBLzJFQjYwNzk2OUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVv QTFyMmkzN0FDVldPZ1M3UWxlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/uDANBgkqhkiG9w0BAQsFAAOCAQEAEttMHZcamo/+6etFk/ax nai11sD7/iQgKyHOHnWPNGsZM7dF1Itc8ocT24ilXG1t77WsLvw4J9yaV7krnvZY wX7xTKgOIcPRElFFvasxydhOVVaNT3cAnt+ckkyVe+GOIr9u9ZJ3+nJoQERGQ+YC gqz2XiYuavwa849sgY7OvLIKA/5nRcHPa5Cfu9SxuT7AsQNxBVUvv59icr71B3cV 1Vfs4CgJ1fFBiOUN84AWwMYwUWWcHjDwWSFB/FcrOFKZ4Co/bkFrerCJwHPfKWg5 O+lgYpLpeENGfbLm6m2vXsQj2qOQGWsVenarAo4hlDKB7xXYG08n+SM02dfgWBEv ig== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:24 2025 by rpki-client