This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer File: 3XyND0ePm-ar9znAT1tb5NyfYfg.cer (raw, json) Hash identifier: thtzrTNQD9Jo6VJNUDsjvvlXDuuxZIN2OoEla+Gq1W0= Subject key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6ECB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 03:35:18 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 160.187.34.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28363 (0x6ecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 25 03:35:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:9f:b3:26:96:c9:06:5b:b2:72:0e:69:c0: 6e:6c:99:3e:67:f9:4f:8a:2d:71:ba:ae:08:31:9c: 8f:18:d1:cb:9e:69:76:43:0b:9b:3b:2e:d6:11:18: 8d:1d:cd:9f:39:d7:d2:3d:0d:d2:b6:37:55:5e:bf: e0:a8:08:01:d7:fc:26:87:8c:24:ac:6e:38:d1:1b: 2a:fe:52:c2:55:fb:70:7c:85:da:b4:b5:2e:de:7c: 1c:1c:4e:9d:a3:32:63:84:9e:ac:da:1f:3a:9c:f1: 11:a4:74:86:54:bb:19:87:95:97:22:47:d1:36:17: 81:b6:70:c1:ba:e3:90:0f:5b:c1:b3:84:21:c2:4b: 84:fd:57:16:4f:13:3a:a4:e2:7f:8a:9e:61:81:3e: de:72:43:c4:24:07:77:51:2f:1f:b5:c1:dd:58:86: 55:7d:48:ee:dd:e4:4d:d4:47:2e:d8:4c:36:2b:ef: fa:be:4f:51:7e:6b:b4:fc:f1:f4:cc:d1:d5:8b:2a: c5:42:15:8c:7f:03:47:b0:c6:7d:ce:de:6d:4f:c2: 23:c6:91:4d:6b:97:b0:09:ca:22:b2:64:56:d8:65: 47:dd:3d:30:2e:e8:b8:c2:db:2d:58:24:4f:ce:8a: ff:9a:34:f6:e7:ee:f0:98:ca:6b:f1:81:92:95:ab: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.34.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:48:d7:33:b5:f5:2d:14:95:92:26:70:e1:f2:88:58:32:9a: 3f:59:6a:e0:e4:f1:7f:f2:cd:89:76:ef:13:bb:d1:1a:fa:b0: 74:c4:e7:2d:e3:d0:63:63:c3:7b:96:c1:bb:fe:49:74:bc:6a: 9d:1f:97:4b:d3:11:ed:3f:87:8d:b5:bd:c9:1f:93:03:d3:67: 43:a1:16:8b:34:7b:c5:a5:52:c0:52:01:a9:92:7c:e6:aa:7b: 84:50:cb:f4:de:3c:c8:72:fa:3c:6d:95:0c:a5:02:f4:03:6d: 79:77:dd:ac:1c:34:b5:14:2e:5c:db:f6:86:c8:fc:d9:f8:8c: db:5b:4f:0d:4c:5c:38:75:21:04:b7:ce:e9:df:1f:1c:fc:53: 02:c6:13:22:72:67:2e:38:39:87:5a:ee:72:81:30:e5:1d:f4: 1f:f3:b6:ee:9b:51:ed:6c:f6:d8:e4:a8:a7:ec:c6:d0:7c:e8: d8:5a:7e:16:f0:2f:4d:68:47:22:22:2f:25:6d:12:0b:dc:7c: 72:2a:bc:95:54:88:33:e9:96:4d:72:5d:90:d2:5c:97:04:65: 7c:b6:56:a4:3d:3f:d6:a1:a5:11:33:f1:45:cc:b2:12:cc:eb: f4:f5:57:75:fa:fc:8f:bf:3f:5b:d2:a0:8d:a0:ae:e9:0b:da: 57:a9:f2:d5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI1MDMzNTE4WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCMUU1NTExMC8GA1UEBRMoREQ3QzhEMEY0NzhGOUJFNkFCRjczOUMw NEY1QjVCRTREQzlGNjFGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANgYn7MmlskGW7JyDmnAbmyZPmf5T4otcbquCDGcjxjRy55pdkMLmzsu1hEYjR3N nznX0j0N0rY3VV6/4KgIAdf8JoeMJKxuONEbKv5SwlX7cHyF2rS1Lt58HBxOnaMy Y4SerNofOpzxEaR0hlS7GYeVlyJH0TYXgbZwwbrjkA9bwbOEIcJLhP1XFk8TOqTi f4qeYYE+3nJDxCQHd1EvH7XB3ViGVX1I7t3kTdRHLthMNivv+r5PUX5rtPzx9MzR 1YsqxUIVjH8DR7DGfc7ebU/CI8aRTWuXsAnKIrJkVthlR909MC7ouMLbLVgkT86K /5o09ufu8JjKa/GBkpWrs3sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTdfI0PR4+b 5qv3OcBPW1vk3J9h+DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFFNTUvNEMwOTg2MkU3OEZBMTFFRkE0NEZFNTg2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIxRTU1LzRDMDk4NjJFNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQ bS1hcjl6bkFUMXRiNU55ZllmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC7IjANBgkqhkiG9w0BAQsFAAOCAQEAbkjXM7X1LRSVkiZw4fKI WDKaP1lq4OTxf/LNiXbvE7vRGvqwdMTnLePQY2PDe5bBu/5JdLxqnR+XS9MR7T+H jbW9yR+TA9NnQ6EWizR7xaVSwFIBqZJ85qp7hFDL9N48yHL6PG2VDKUC9ANteXfd rBw0tRQuXNv2hsj82fiM21tPDUxcOHUhBLfO6d8fHPxTAsYTInJnLjg5h1rucoEw 5R30H/O27ptR7Wz22OSop+zG0Hzo2Fp+FvAvTWhHIiIvJW0SC9x8ciq8lVSIM+mW TXJdkNJclwRlfLZWpD0/1qGlETPxRcyyEszr9PVXdfr8j78/W9KgjaCu6QvaV6ny 1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:31 2025 by rpki-client