This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer File: J23PPyNBrcfQvEbzY0T3FWANmlg.cer (raw, json) Hash identifier: BnIHfBtCaP5ptkjxrl9Xio4PDdJGEdGa+qk2BlDvlFk= Subject key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F9E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 18:38:37 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.34.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28574 (0x6f9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 4 18:38:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:0f:d0:d6:17:ef:d3:c3:33:8e:2e:66:f2: 4e:a3:5a:00:52:ff:3a:ff:87:ad:0b:19:48:8c:1f: 00:6d:84:38:5c:a1:4e:e5:10:ff:63:0b:53:79:73: ef:5e:ec:57:07:8a:09:ff:d4:9e:8d:0a:f4:f6:2e: f7:4b:d5:5a:18:c8:33:e1:ed:ae:9f:f6:80:fa:d0: fc:4d:b5:cf:2c:5f:24:b3:d9:f3:95:d8:70:b1:73: ba:2c:a3:54:5a:7c:12:07:68:d4:9a:56:1b:19:7b: c0:59:16:c7:9e:a5:15:e3:99:30:d7:74:2b:52:88: 4b:a5:65:a6:ae:33:61:61:c6:4b:e7:1c:61:80:d9: 45:e1:bb:ab:7d:d4:c4:96:17:49:fa:34:3f:da:a7: 05:a4:01:57:4b:59:7c:7a:7d:e9:ac:14:7c:33:72: 76:35:73:b1:e8:0a:af:35:00:f7:30:37:4c:85:00: 7d:f3:06:5c:ad:47:d7:d4:01:4c:44:36:09:e6:e6: 40:8e:fa:e9:3e:ea:a8:52:0e:d3:41:b4:b0:98:48: d7:c4:39:a7:35:05:69:39:55:9c:f2:98:e0:ce:ae: e1:72:38:5e:a4:36:e9:4d:4a:ca:51:09:c3:b9:6f: 71:d9:2e:15:6e:83:d0:82:ef:95:cc:ee:eb:f5:e1: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.34.0/24 Signature Algorithm: sha256WithRSAEncryption 93:40:b9:d2:d2:8a:14:88:e0:89:2c:3f:23:f1:22:33:5e:bd: 33:a9:c6:37:14:27:d7:9b:0d:f4:6e:f9:93:34:10:7b:55:bd: 06:b3:c3:27:6c:5a:fc:d3:53:d9:e5:26:7a:bf:c7:63:42:63: 90:df:5c:14:38:98:c8:34:24:71:19:be:5f:0e:76:d8:ac:e5: d5:cb:be:a2:70:a6:5c:09:d7:c7:30:2a:e4:58:2d:cb:59:e5: 31:91:dc:bc:36:b7:2e:3e:f4:10:4a:e2:29:09:a2:3e:b3:59: 7d:66:6e:5a:0b:aa:c6:ee:d7:f2:1f:07:8f:ea:6f:36:b5:8e: 86:86:e3:d3:10:af:1d:7e:f0:be:ed:0b:a6:ba:ac:78:3a:6a: fa:b7:11:71:81:80:b9:39:a7:6c:1d:46:08:ea:b2:9c:b3:f4: 06:ba:ce:d9:2c:9d:9b:be:49:9d:c2:20:cb:99:b6:83:44:cb: 14:28:43:14:fa:c3:72:9f:ce:85:b6:d8:71:5b:9d:61:07:82: ed:68:c7:6b:64:be:82:b2:2b:bb:e5:94:0e:d4:00:d8:d9:91: 7a:8a:4e:72:a7:73:bc:47:32:e4:e6:39:f9:3d:df:2e:29:84: 7d:87:1a:3c:c1:02:f4:08:2e:93:59:0e:e1:96:53:a4:f2:9b: af:70:b3:f8 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA0MTgzODM3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBMDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYz NjM0NEY3MTU2MDBEOUE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM+OD9DWF+/TwzOOLmbyTqNaAFL/Ov+HrQsZSIwfAG2EOFyhTuUQ/2MLU3lz717s VweKCf/Uno0K9PYu90vVWhjIM+Htrp/2gPrQ/E21zyxfJLPZ85XYcLFzuiyjVFp8 Egdo1JpWGxl7wFkWx56lFeOZMNd0K1KIS6Vlpq4zYWHGS+ccYYDZReG7q33UxJYX Sfo0P9qnBaQBV0tZfHp96awUfDNydjVzsegKrzUA9zA3TIUAffMGXK1H19QBTEQ2 CebmQI766T7qqFIO00G0sJhI18Q5pzUFaTlVnPKY4M6u4XI4XqQ26U1KylEJw7lv cdkuFW6D0ILvlczu6/XhK5kCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQnbc8/I0Gt x9C8RvNjRPcVYA2aWDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA0QjkvQ0U4NDA1NjhEMjM1MTFFRjhGRTI5QzVDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEwNEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5C cmNmUXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKD6IjANBgkqhkiG9w0BAQsFAAOCAQEAk0C50tKKFIjgiSw/I/Ei M169M6nGNxQn15sN9G75kzQQe1W9BrPDJ2xa/NNT2eUmer/HY0JjkN9cFDiYyDQk cRm+Xw522Kzl1cu+onCmXAnXxzAq5Fgty1nlMZHcvDa3Lj70EEriKQmiPrNZfWZu Wguqxu7X8h8Hj+pvNrWOhobj0xCvHX7wvu0LprqseDpq+rcRcYGAuTmnbB1GCOqy nLP0BrrO2Sydm75JncIgy5m2g0TLFChDFPrDcp/OhbbYcVudYQeC7WjHa2S+grIr u+WUDtQA2NmReopOcqdzvEcy5OY5+T3fLimEfYcaPMEC9Aguk1kO4ZZTpPKbr3Cz +A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:04 2025 by rpki-client