This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer (raw, json) Hash identifier: /y8uFigtN3XgTKhrVzGAWN/H6kCtHnweUzP4fiGRV78= Subject key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6D9A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft caRepository: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 13:08:31 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 130.220.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28058 (0x6d9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 6 13:08:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:ef:7c:5b:ff:91:55:15:f9:09:1b:3d:d8: 1f:38:5c:9c:fa:ad:cc:a9:09:23:ba:6e:0e:15:fa: 12:88:b3:bd:3a:c0:5d:f4:6c:4b:20:cb:99:c8:de: 85:66:d0:7f:f9:4e:a8:2b:ca:e5:aa:2e:6b:b9:c2: 48:2e:bd:11:0b:7d:3a:b2:e3:ee:51:b3:8a:1c:87: 8c:0c:fe:4e:53:19:07:d7:a8:f0:0f:aa:72:dd:a2: 74:a8:c4:25:9f:97:8d:06:0c:de:05:70:82:5e:11: 8d:75:cf:f5:bd:19:9c:4f:15:bb:c7:ce:61:f7:cd: e7:13:ff:e9:e2:70:c6:c9:a5:b7:10:10:7c:65:82: 99:08:07:38:f2:ba:4d:c2:b7:3d:70:ad:a3:54:24: 13:74:17:dd:55:be:ac:2c:82:30:ec:db:ce:07:ed: fc:c7:83:ef:5f:99:e0:61:c7:48:2e:6f:8d:8a:43: fe:ef:b3:53:bb:b0:66:60:b7:7b:01:97:60:03:41: c6:d6:71:04:cd:a4:8d:74:7b:b5:c1:83:59:ad:d8: ab:e5:98:8d:fa:ad:cf:17:fc:92:72:71:78:ca:5f: 69:36:0e:9e:f3:09:5a:d6:fc:21:7c:8e:75:c9:34: cf:6a:e2:f4:fa:66:a9:11:2c:d4:18:30:a4:84:f1: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 130.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 51:b1:1d:64:ac:85:5d:5b:03:4a:a8:53:b3:c8:8d:70:37:8f: 94:10:74:08:f0:d2:45:e5:c7:53:e0:d1:50:61:0e:61:40:49: ec:bd:4c:f1:a1:72:00:82:4d:0d:6a:ac:e4:86:84:63:91:a1: 81:b3:3f:f2:e5:db:ff:70:0d:2d:6a:f1:5b:bd:cb:1c:39:44: 57:95:d1:c5:be:76:b0:81:d3:46:12:a5:df:57:a6:e6:1d:e5: 36:b6:eb:28:47:c4:c9:ce:90:5e:df:2e:f6:d5:f0:7e:b0:95: 07:6c:bd:ab:ce:fb:f0:a7:2e:88:7e:17:c0:a8:7b:9c:07:20: 00:8f:28:02:b8:49:b6:fc:01:22:1b:44:40:16:89:51:bc:db: cc:75:0e:36:8a:a2:95:28:50:e1:b1:ca:f4:24:24:d0:e0:24: db:fc:47:ce:9d:be:39:7e:28:71:e7:8e:63:74:ea:ae:16:ca: 72:e3:90:31:e5:91:02:8e:f2:f7:93:f2:c3:65:65:56:e8:84: bb:a5:bd:22:cb:68:de:2b:67:70:41:82:f8:d6:9b:9b:04:e2: 14:51:9b:63:29:10:16:53:37:96:ab:25:75:55:3d:b1:19:94: 74:3f:e3:b8:67:bc:27:6e:b8:8e:ed:77:86:74:a5:0b:50:26: a9:4c:df:50 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICbZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA2MTMwODMxWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyRjNCNjExMC8GA1UEBRMoMkIxMzFBQTEwRDdFNkJGRUEzNjdFODFC NzNEN0ZEQjBBQzAxRDY3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ7+73xb/5FVFfkJGz3YHzhcnPqtzKkJI7puDhX6EoizvTrAXfRsSyDLmcjehWbQ f/lOqCvK5aoua7nCSC69EQt9OrLj7lGzihyHjAz+TlMZB9eo8A+qct2idKjEJZ+X jQYM3gVwgl4RjXXP9b0ZnE8Vu8fOYffN5xP/6eJwxsmltxAQfGWCmQgHOPK6TcK3 PXCto1QkE3QX3VW+rCyCMOzbzgft/MeD71+Z4GHHSC5vjYpD/u+zU7uwZmC3ewGX YANBxtZxBM2kjXR7tcGDWa3Yq+WYjfqtzxf8knJxeMpfaTYOnvMJWtb8IXyOdck0 z2ri9PpmqREs1BgwpITxKlECAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQrExqhDX5r /qNn6Btz1/2wrAHWeDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYzQjYvNTBGMDExQzg0OEJBMTFFRkJENDUxNjNEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJGM0I2LzUwRjAxMUM4NDhCQTExRUZCRDQ1MTYzREM0RjlBRTAyL0t4TWFvUTEt YV82alotZ2JjOWY5c0t3QjFuZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAILcMA0GCSqGSIb3DQEBCwUAA4IBAQBRsR1krIVdWwNKqFOzyI1w N4+UEHQI8NJF5cdT4NFQYQ5hQEnsvUzxoXIAgk0NaqzkhoRjkaGBsz/y5dv/cA0t avFbvcscOURXldHFvnawgdNGEqXfV6bmHeU2tusoR8TJzpBe3y721fB+sJUHbL2r zvvwpy6IfhfAqHucByAAjygCuEm2/AEiG0RAFolRvNvMdQ42iqKVKFDhscr0JCTQ 4CTb/EfOnb45fihx545jdOquFspy45Ax5ZECjvL3k/LDZWVW6IS7pb0iy2jeK2dw QYL41pubBOIUUZtjKRAWUzeWqyV1VT2xGZR0P+O4Z7wnbriO7XeGdKULUCapTN9Q -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:33 2025 by rpki-client