This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer File: 4bkQuccxDJ9lWU_G6JifyVOzblE.cer (raw, json) Hash identifier: 8DE+0vAcpmWaGrOTcE35BVM7dn86g7YdbqYnFSO2Z8Y= Subject key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E5B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 16:48:54 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 52.128.224.0/19 IP: 148.66.0.0/19 IP: 216.118.224.0/19 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28251 (0x6e5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 18 16:48:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:0d:be:da:a7:ca:34:17:78:2e:e2:5d:88: 22:15:d0:24:1a:ff:8b:b3:6c:f6:ae:2c:d4:8e:e4: 1f:89:d7:cc:ad:34:e3:f8:f4:0d:d2:ff:57:68:0a: 41:44:cf:2b:f1:82:24:48:41:58:bc:45:39:6c:00: 4a:17:36:74:70:fa:37:23:55:22:3d:57:84:3a:f6: 3c:2e:05:88:42:e6:2a:de:49:8c:44:48:ef:38:13: bf:70:cc:97:29:dd:0b:eb:4b:8d:50:94:cd:51:23: c1:7c:5a:d1:be:cb:1f:30:bd:e4:3b:a2:bc:80:2d: 1f:49:cb:f6:bd:42:d9:d0:00:f7:8a:d3:38:9e:c7: 70:46:2c:42:48:ab:cf:49:8d:18:ad:bc:9b:17:57: ef:c4:bb:f2:96:ee:0e:df:ba:f7:47:a2:f0:d8:94: e0:ef:33:7f:b3:f6:9f:b1:8f:2d:b9:c4:9c:f5:7b: ae:2e:48:90:d9:bf:4b:05:34:4e:8e:68:5d:17:ba: 1c:67:32:a5:7e:d5:27:f3:bc:f9:0e:c4:82:fd:c6: ce:e4:b5:3e:c7:ec:25:1a:50:9c:0d:45:ac:cd:07: de:7e:e2:2b:80:7a:19:d5:ee:7e:3e:9e:59:06:c3: 18:a8:49:47:1e:d1:49:22:42:38:ca:91:e0:c6:57: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 52.128.224.0/19 148.66.0.0/19 216.118.224.0/19 Signature Algorithm: sha256WithRSAEncryption 93:25:60:52:fe:e6:14:0c:11:84:19:2a:d9:0a:4e:52:1d:6b: d2:b3:95:58:6b:60:65:a4:7d:30:89:7f:0f:ce:48:d1:ce:c4: ee:68:48:37:a3:73:7e:b2:c3:2f:88:f3:a0:cf:93:35:b9:f1: 5d:6e:4d:ce:55:a0:df:f4:a9:e8:b5:6c:5d:d3:a0:6e:95:7e: ba:41:da:cd:d5:af:59:73:da:c6:99:73:ce:e6:0e:bb:6d:00: b2:ab:99:1a:c4:4d:7b:9e:ff:c5:ae:1d:89:f3:8c:d5:4c:51: b5:9f:49:64:3a:5c:f2:25:ff:75:19:2f:42:fe:1b:e4:2c:69: 41:34:4e:d9:bb:39:11:7d:70:39:58:06:6c:19:2e:41:05:3f: 37:0b:50:c1:6c:d8:37:c9:1e:e4:a7:71:a3:79:5d:35:11:ea: a8:17:06:57:81:7d:4e:60:d8:e3:39:57:d4:92:1f:a0:61:3e: 63:73:94:97:7f:2b:24:2f:da:0e:54:48:12:e7:ef:5c:aa:5b: c6:b4:42:39:61:36:0b:bd:48:d2:2c:6f:65:59:ab:12:dc:20: a0:62:9b:e5:ed:8a:8c:51:a1:e7:6d:73:43:53:ca:e8:6f:40: 59:94:80:8a:e3:73:2d:a6:b6:8f:42:a2:56:1d:15:52:0e:a7: de:96:3e:d5 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICblswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE4MTY0ODU0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3OEVCMDExMC8GA1UEBRMoRTFCOTEwQjlDNzMxMEM5RjY1NTk0RkM2 RTg5ODlGQzk1M0IzNkU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKWYDb7ap8o0F3gu4l2IIhXQJBr/i7Ns9q4s1I7kH4nXzK004/j0DdL/V2gKQUTP K/GCJEhBWLxFOWwAShc2dHD6NyNVIj1XhDr2PC4FiELmKt5JjERI7zgTv3DMlynd C+tLjVCUzVEjwXxa0b7LHzC95DuivIAtH0nL9r1C2dAA94rTOJ7HcEYsQkirz0mN GK28mxdX78S78pbuDt+690ei8NiU4O8zf7P2n7GPLbnEnPV7ri5IkNm/SwU0To5o XRe6HGcypX7VJ/O8+Q7Egv3GzuS1PsfsJRpQnA1FrM0H3n7iK4B6GdXufj6eWQbD GKhJRx7RSSJCOMqR4MZX4usCAwEAAaOCAv8wggL7MB0GA1UdDgQWBBThuRC5xzEM n2VZT8bomJ/JU7NuUTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvRTMyQzg3Q0M1MEQ1MTFFQ0IzRjhENTI5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc4RUIwL0UzMkM4N0NDNTBENTExRUNCM0Y4RDUyOUM0RjlBRTAyLzRia1F1Y2N4 REo5bFdVX0c2SmlmeVZPemJsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEBTSA4AMEBZRCAAMEBdh24DANBgkqhkiG9w0BAQsFAAOCAQEAkyVg Uv7mFAwRhBkq2QpOUh1r0rOVWGtgZaR9MIl/D85I0c7E7mhIN6NzfrLDL4jzoM+T NbnxXW5NzlWg3/Sp6LVsXdOgbpV+ukHazdWvWXPaxplzzuYOu20AsquZGsRNe57/ xa4difOM1UxRtZ9JZDpc8iX/dRkvQv4b5CxpQTRO2bs5EX1wOVgGbBkuQQU/NwtQ wWzYN8ke5Kdxo3ldNRHqqBcGV4F9TmDY4zlX1JIfoGE+Y3OUl38rJC/aDlRIEufv XKpbxrRCOWE2C71I0ixvZVmrEtwgoGKb5e2KjFGh521zQ1PK6G9AWZSAiuNzLaa2 j0KiVh0VUg6n3pY+1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:53 2025 by rpki-client