This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.cer (raw, json) Hash identifier: DOYMR4+VJSuE89FveFkCahCgi4KAy9k0+yrHzh4r41w= Subject key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F1F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 18:22:12 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 160.187.188.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28447 (0x6f1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 30 18:22:12 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:2e:cd:92:d8:0a:4c:73:c9:3f:f1:59:68: da:d4:ca:68:95:47:ce:e2:ff:a3:32:f2:41:59:5b: f1:f6:d2:c1:ff:05:0b:f9:fe:0c:3a:0f:68:14:b0: 77:5c:84:b3:db:c9:f8:78:d5:33:1c:a8:56:c3:b2: 7e:f5:25:89:de:7a:40:0a:35:d7:46:65:7e:93:6b: e6:63:79:a2:59:55:41:85:ca:9a:fe:27:4b:c5:02: f0:07:fa:b1:20:82:33:04:37:94:b1:10:78:da:62: 4d:68:09:9e:f7:80:3b:34:83:79:56:1e:2e:6e:44: 11:c5:82:e2:e4:31:e9:b4:e6:e9:62:b0:73:52:30: 5a:e9:d2:f6:1d:d3:2d:37:0d:9c:35:a9:c1:7c:70: fa:c6:6e:20:39:66:67:92:a6:a9:55:b3:a9:42:03: 88:e4:f5:46:76:4c:f1:48:6f:29:ae:01:4a:cf:d5: 0b:1c:7b:f3:d8:72:af:7c:d4:3e:d8:6d:4b:1d:f9: f0:00:9c:45:4f:da:c5:d9:ba:f0:05:3e:12:bc:f8: 1e:e7:a6:7f:17:38:53:a3:8e:42:35:f3:e5:0e:13: 16:d6:ff:f6:37:66:bc:2c:6e:53:28:0a:5e:65:a4: 6b:21:9c:80:02:e4:89:2b:f6:23:79:fc:0d:d4:4b: 19:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.188.0/23 Signature Algorithm: sha256WithRSAEncryption ae:79:75:0a:cb:d9:a2:7c:91:92:61:fd:5d:e3:89:11:c2:26: ab:48:06:34:d3:95:93:a2:dd:33:e9:a0:2c:a1:b8:f4:18:0c: b3:5f:26:ff:ea:54:a7:ab:54:40:57:61:ae:bb:cc:52:38:72: 60:a8:8c:d7:d5:a8:fe:9e:0c:4f:a3:de:b5:7d:3a:25:ef:bd: 20:58:aa:70:81:f1:5d:2d:e1:ed:00:f5:61:3c:b6:80:8f:d8: f6:78:57:a7:11:62:ef:58:d4:8b:56:73:74:0e:61:6e:8d:4b: 84:8b:bd:90:1e:c3:7e:1e:12:be:3b:8e:82:f8:d3:cf:93:6e: f2:63:fb:84:c6:a9:c9:14:9a:58:fa:7a:ed:b7:43:ae:dd:19: 71:f8:06:a9:85:91:06:3e:b7:b9:40:9a:62:ad:8b:e0:48:d4: 6a:02:bc:1d:19:13:d5:f6:6a:e3:23:da:9c:e7:af:09:0a:67: 06:aa:20:bd:46:b0:d2:06:db:dc:34:63:40:b9:3f:9a:b2:13: 89:d8:f7:bf:42:f1:aa:a1:fa:20:7a:16:c2:91:80:c9:a9:6a: 51:39:d7:10:8a:b1:02:5f:fb:d3:22:9a:9b:e6:68:6a:50:e5: 60:ef:57:25:17:f1:f6:fa:32:07:3f:d6:f5:04:3d:37:58:36: ae:2b:ab:5a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTMwMTgyMjEyWhcNMjYwMzMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBMUUxQzExMC8GA1UEBRMoRTQyMUU1OTc4NEFCNkZENzAwMENEMTU5 NzEwMUVDMzYwREQ5NDA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALq1Ls2S2ApMc8k/8Vlo2tTKaJVHzuL/ozLyQVlb8fbSwf8FC/n+DDoPaBSwd1yE s9vJ+HjVMxyoVsOyfvUlid56QAo110ZlfpNr5mN5ollVQYXKmv4nS8UC8Af6sSCC MwQ3lLEQeNpiTWgJnveAOzSDeVYeLm5EEcWC4uQx6bTm6WKwc1IwWunS9h3TLTcN nDWpwXxw+sZuIDlmZ5KmqVWzqUIDiOT1RnZM8UhvKa4BSs/VCxx789hyr3zUPtht Sx358ACcRU/axdm68AU+Erz4Huemfxc4U6OOQjXz5Q4TFtb/9jdmvCxuUygKXmWk ayGcgALkiSv2I3n8DdRLGc8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTkIeWXhKtv 1wAM0VlxAew2DdlAZjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFFMUMvMjUyMjJEODA5MjAwMTFFRjlFMEMzRDZCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUExRTFDLzI1MjIyRDgwOTIwMDExRUY5RTBDM0Q2QkM0RjlBRTAyLzVDSGxsNFNy YjljQURORlpjUUhzTmczWlFHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC7vDANBgkqhkiG9w0BAQsFAAOCAQEArnl1CsvZonyRkmH9XeOJ EcImq0gGNNOVk6LdM+mgLKG49BgMs18m/+pUp6tUQFdhrrvMUjhyYKiM19Wo/p4M T6PetX06Je+9IFiqcIHxXS3h7QD1YTy2gI/Y9nhXpxFi71jUi1ZzdA5hbo1LhIu9 kB7Dfh4SvjuOgvjTz5Nu8mP7hMapyRSaWPp67bdDrt0ZcfgGqYWRBj63uUCaYq2L 4EjUagK8HRkT1fZq4yPanOevCQpnBqogvUaw0gbb3DRjQLk/mrITidj3v0LxqqH6 IHoWwpGAyalqUTnXEIqxAl/70yKam+ZoalDlYO9XJRfx9voyBz/W9QQ9N1g2riur Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:24 2025 by rpki-client