This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer File: D2tHILCjVyLYXzRG79R0C9NBg04.cer (raw, json) Hash identifier: R9GoUfLhq8yigyH/Umbjb0dHxO8D6i8AD8/TR9zquRU= Subject key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F3B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft caRepository: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 19:09:19 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 160.30.186.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28475 (0x6f3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 1 19:09:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:e3:39:49:e0:96:57:64:ba:67:a5:2f:3c: f4:da:28:ee:77:35:8a:99:40:2c:ae:a0:3e:a8:56: 9b:dd:27:50:04:b3:d1:ed:17:d0:0d:cf:6d:05:22: 3c:86:cc:aa:dc:63:fe:79:f1:86:c1:77:84:57:cd: e5:32:bd:2c:d2:7d:e9:78:5d:0a:68:a1:be:94:0c: 94:9b:c0:e4:61:f4:ca:c1:9d:d4:b2:f2:cc:e0:66: 9b:64:f7:07:ce:b3:7c:d1:df:ff:69:f8:e4:ff:d7: 8b:55:03:7a:0b:5f:d4:21:ee:fd:e4:88:26:72:b7: b1:6f:79:2b:a7:f3:2c:e2:33:3d:83:14:a6:f6:e6: 2f:9f:e4:42:7b:7e:1e:ae:f4:06:d3:09:a9:e0:c2: 0b:c6:4b:db:e8:60:23:0a:15:ee:17:0f:27:ab:ab: e9:3f:7f:dc:92:68:40:41:0d:0d:d3:50:40:0f:19: da:99:06:f0:bf:ba:a2:70:ce:40:27:96:0a:d9:a3: 7d:27:60:ad:e0:f4:c5:24:74:0e:41:48:5d:66:36: 6a:9a:57:0b:ee:c5:6c:a6:90:08:24:b4:e1:48:c0: c4:6b:49:7c:6f:18:ff:99:40:79:7d:47:6f:cb:49: 43:d4:3f:08:71:34:85:c5:f8:37:d8:71:e2:4f:af: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.186.0/23 Signature Algorithm: sha256WithRSAEncryption a3:e1:c0:ae:44:c9:26:27:1d:a2:ce:1a:70:05:7f:5f:36:f8: 4d:49:1c:a8:5b:86:2d:9a:c8:c6:e1:3b:3f:30:c1:c3:c2:ac: 87:46:89:55:37:cf:d0:09:5d:2f:f8:12:22:ea:06:8e:a0:61: f2:c0:d3:c5:6c:db:83:78:4c:e6:7f:76:35:04:f0:20:22:e2: 50:ed:22:5c:0a:40:8f:87:86:96:d6:af:29:33:94:2b:82:eb: ba:0a:e6:5d:4b:12:de:43:f5:b4:18:8b:b6:ac:ea:e5:d2:11: 22:d8:f0:b7:f1:52:ab:f9:3f:5c:7e:ad:64:bc:73:7e:7a:ee: 9a:95:4e:96:3c:f7:85:b7:c5:ee:67:09:71:82:7e:32:86:db: 56:0f:41:42:9f:71:c0:4f:09:36:c1:e6:f5:6a:d6:f8:4d:63: 1e:ea:07:e6:a9:42:5b:d8:7f:43:0e:7b:a1:75:dd:86:68:6c: 9e:86:24:a4:d5:7c:c2:f9:2f:d7:f2:ad:83:db:25:8d:6d:61: de:d3:28:90:fe:e7:ff:91:08:24:d3:d6:a3:37:eb:f9:7c:c5: 92:f8:cc:31:dc:d6:9a:f5:82:35:ee:f4:86:20:15:46:5d:af: 59:7c:d1:81:76:38:18:1f:3c:ac:6d:30:b4:5d:59:f5:19:28: 04:95:fd:71 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAxMTkwOTE5WhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4NTBBRDExMC8GA1UEBRMoMEY2QjQ3MjBCMEEzNTcyMkQ4NUYzNDQ2 RUZENDc0MEJEMzQxODM0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALv04zlJ4JZXZLpnpS889Noo7nc1iplALK6gPqhWm90nUASz0e0X0A3PbQUiPIbM qtxj/nnxhsF3hFfN5TK9LNJ96XhdCmihvpQMlJvA5GH0ysGd1LLyzOBmm2T3B86z fNHf/2n45P/Xi1UDegtf1CHu/eSIJnK3sW95K6fzLOIzPYMUpvbmL5/kQnt+Hq70 BtMJqeDCC8ZL2+hgIwoV7hcPJ6ur6T9/3JJoQEENDdNQQA8Z2pkG8L+6onDOQCeW CtmjfSdgreD0xSR0DkFIXWY2appXC+7FbKaQCCS04UjAxGtJfG8Y/5lAeX1Hb8tJ Q9Q/CHE0hcX4N9hx4k+v8PUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQPa0cgsKNX IthfNEbv1HQL00GDTjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUwQUQvNjBFQkUxQUM2NDM0MTFFRjg0MkZDNjIwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg1MEFELzYwRUJFMUFDNjQzNDExRUY4NDJGQzYyMEM0RjlBRTAyL0QydEhJTENq VnlMWVh6Ukc3OVIwQzlOQmcwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAeujANBgkqhkiG9w0BAQsFAAOCAQEAo+HArkTJJicdos4acAV/ Xzb4TUkcqFuGLZrIxuE7PzDBw8Ksh0aJVTfP0AldL/gSIuoGjqBh8sDTxWzbg3hM 5n92NQTwICLiUO0iXApAj4eGltavKTOUK4LrugrmXUsS3kP1tBiLtqzq5dIRItjw t/FSq/k/XH6tZLxzfnrumpVOljz3hbfF7mcJcYJ+MobbVg9BQp9xwE8JNsHm9WrW +E1jHuoH5qlCW9h/Qw57oXXdhmhsnoYkpNV8wvkv1/Ktg9sljW1h3tMokP7n/5EI JNPWozfr+XzFkvjMMdzWmvWCNe70hiAVRl2vWXzRgXY4GB88rG0wtF1Z9RkoBJX9 cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:11 2025 by rpki-client