This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer (raw, json) Hash identifier: Cz4Cg/gMzxkJx9iG2mLXYXyJOKlSm42oTCFcom3KUok= Subject key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EBD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 17:59:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.187.170.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28349 (0x6ebd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 24 17:59:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:a9:b8:29:1c:9a:59:48:17:4c:9c:ac:f9: d4:c8:c4:7f:71:4d:1a:26:cd:78:22:b7:af:1c:a8: b3:6c:fa:d4:c0:e5:cd:b7:a8:65:0c:4e:75:b2:da: ca:90:8f:9a:e2:36:b6:5c:b8:1f:11:f4:84:36:c6: 73:26:1e:ee:8f:3b:d9:2c:1b:d9:30:2c:d1:93:4a: 31:a6:93:bf:01:82:ba:cd:80:4a:2f:40:78:d6:08: bc:60:de:0d:a2:19:4a:d3:b1:15:70:bb:49:47:b9: 66:de:b0:9e:e1:15:ee:56:22:86:ca:ca:56:01:4a: eb:86:1b:e4:a2:d2:d8:9f:6c:08:40:19:f4:81:a3: e5:22:87:c6:3e:2c:23:09:09:37:70:84:d5:bc:b0: a6:35:a8:75:71:b3:33:7b:46:df:92:3d:15:41:50: 96:37:a6:6f:23:09:13:2b:d6:84:f1:af:08:b7:f8: 9f:e9:c8:9f:1c:e0:52:3d:dc:8f:9f:7b:bb:c5:03: 00:82:4f:9d:ad:eb:d6:50:88:62:d9:f0:0a:81:1c: 22:fd:29:f4:b4:77:ee:6e:85:cf:b3:c5:da:e5:98: ec:8f:15:08:35:c0:63:27:15:44:32:be:18:e6:49: d8:6f:91:47:11:90:3a:86:f8:88:89:8e:02:6d:0c: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.170.0/23 Signature Algorithm: sha256WithRSAEncryption 47:57:43:b3:ea:3f:8b:04:2b:2d:0a:01:52:ec:1c:09:80:3f: ce:7e:e9:10:f7:6b:da:7d:16:c8:9d:18:02:cc:ea:03:c2:ce: fa:3c:6f:3e:cb:0f:59:2f:57:21:7d:c4:71:a1:ca:91:71:2c: 52:52:16:e6:a8:d3:a9:b0:3d:90:78:ec:35:d4:73:85:f6:06: 24:c2:81:77:d0:ee:71:23:96:49:64:65:ae:e4:0d:cc:83:5b: fc:c1:61:7a:80:de:0b:dc:c4:f5:43:a2:8e:00:31:34:ae:b2: 30:7f:29:fb:56:72:1f:df:4f:63:ee:b1:ad:0e:48:c4:f6:55: 8c:46:59:7f:72:46:ce:ca:52:5b:5c:d7:96:1d:d4:6b:a4:58: 00:62:1f:18:92:eb:51:02:c7:60:5b:a7:b9:8d:f2:59:09:64: f7:5f:5f:b4:77:53:06:06:9e:f4:53:ae:21:2c:ee:fb:23:f8: a1:26:78:2a:6f:ee:7c:27:41:b4:b3:f2:e7:af:24:5b:90:09: 25:18:78:7e:c9:40:13:c5:98:69:a1:ec:e1:9a:1c:54:70:ed: 6d:73:21:10:eb:dc:c3:b6:04:0c:94:c7:c3:74:a1:c0:ce:25: 1c:b1:06:b4:8e:bb:66:67:d6:fa:0c:b8:de:be:c2:a6:00:11: f4:7a:48:20 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI0MTc1OTIwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDMkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdE RTU3QUZERTFCRTE2N0Q0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMBqqbgpHJpZSBdMnKz51MjEf3FNGibNeCK3rxyos2z61MDlzbeoZQxOdbLaypCP muI2tly4HxH0hDbGcyYe7o872Swb2TAs0ZNKMaaTvwGCus2ASi9AeNYIvGDeDaIZ StOxFXC7SUe5Zt6wnuEV7lYihsrKVgFK64Yb5KLS2J9sCEAZ9IGj5SKHxj4sIwkJ N3CE1bywpjWodXGzM3tG35I9FUFQljembyMJEyvWhPGvCLf4n+nInxzgUj3cj597 u8UDAIJPna3r1lCIYtnwCoEcIv0p9LR37m6Fz7PF2uWY7I8VCDXAYycVRDK+GOZJ 2G+RRxGQOob4iImOAm0MQ+cCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQBfY24p4h0 qy+a2X3lev3hvhZ9RDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJGOEMvNTU3OUI5QjA4NkUwMTFFRjlCNkIxNzdFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMyRjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJ ZEtzdm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC7qjANBgkqhkiG9w0BAQsFAAOCAQEAR1dDs+o/iwQrLQoBUuwc CYA/zn7pEPdr2n0WyJ0YAszqA8LO+jxvPssPWS9XIX3EcaHKkXEsUlIW5qjTqbA9 kHjsNdRzhfYGJMKBd9DucSOWSWRlruQNzINb/MFheoDeC9zE9UOijgAxNK6yMH8p +1ZyH99PY+6xrQ5IxPZVjEZZf3JGzspSW1zXlh3Ua6RYAGIfGJLrUQLHYFunuY3y WQlk919ftHdTBgae9FOuISzu+yP4oSZ4Km/ufCdBtLPy568kW5AJJRh4fslAE8WY aaHs4ZocVHDtbXMhEOvcw7YEDJTHw3ShwM4lHLEGtI67ZmfW+gy43r7CpgAR9HpI IA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:51 2025 by rpki-client