This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer File: NU4yud4OVpoZUal7kyAZ9oijUKw.cer (raw, json) Hash identifier: lTS9CV6/yz86UDmappLblBDbYtgof7OXulu0L4/1iwk= Subject key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F4F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft caRepository: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:46:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 65.181.104.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28495 (0x6f4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 12:46:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b5:ee:34:5a:28:11:5a:5c:67:7c:ae:b9:81: f7:a0:72:b8:72:00:ef:a1:af:84:4f:6a:a7:9b:a7: 59:e3:9b:ac:b4:96:0c:91:db:83:b7:35:c0:28:92: 9d:a6:96:81:49:f4:13:8b:e5:69:1e:57:78:ab:ab: 23:80:93:08:da:20:9a:cb:0b:30:8b:8f:74:81:15: 6e:5c:6f:ad:71:f8:e4:65:90:bb:b3:09:44:0e:0a: d2:89:b2:f9:ba:bf:1a:c6:37:6b:05:a4:f2:2b:94: b1:74:85:39:b1:f8:1d:79:39:9a:23:c0:25:18:80: 75:a5:ea:6a:65:dd:4c:48:e5:22:7d:1b:21:b5:2b: 30:dd:f6:e4:b4:8e:f9:86:ce:ec:50:fd:c2:fb:7d: 81:4f:7c:1a:3d:93:9c:45:b0:d3:0e:90:e1:2c:a7: ce:c4:77:30:74:50:aa:62:9b:2b:41:5a:60:39:21: 14:01:93:f4:40:2d:a7:19:f3:55:13:af:22:0c:d4: 36:c8:6c:6c:b5:60:cc:5c:68:27:5f:7f:35:c3:c1: 67:ce:d8:32:ee:6b:49:71:29:f7:a9:e3:56:4b:c9: cd:13:e5:67:41:d8:81:6a:4d:bb:e9:c5:70:7f:95: f1:41:64:17:cb:cb:fb:22:dc:24:22:37:5c:19:36: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 65.181.104.0/22 Signature Algorithm: sha256WithRSAEncryption ab:b6:11:ac:79:06:4b:76:bb:f8:20:a4:4c:58:fe:d7:d0:76: 55:53:48:cc:3a:a4:d0:21:ec:0a:63:6c:3d:54:71:07:58:39: 5e:89:d2:f4:93:77:a6:8e:c8:27:d5:10:5e:64:f5:7c:2a:db: 7f:54:e1:56:c7:0f:54:43:6e:e0:57:ff:be:fa:05:3a:10:0d: cb:b1:b8:40:4b:96:d3:98:e6:22:32:e3:13:22:03:c6:07:4c: a0:97:8f:17:6c:5f:84:06:3c:68:72:a2:a4:f3:e9:91:3e:11: 42:62:58:b0:ac:91:51:41:81:f5:69:6c:42:c7:b0:81:3b:5b: 1f:83:f0:95:1b:b5:0b:52:8a:1f:35:60:40:75:61:0c:ac:5d: 58:fc:78:c3:79:96:4b:70:49:ea:10:0f:96:c9:7b:b2:12:72: 70:97:40:1b:69:63:d2:16:0a:90:ac:74:ad:99:66:89:83:38: b0:b3:e1:40:99:6b:59:e4:c3:ec:fa:fb:e9:0f:06:bd:89:07: e9:bd:b4:8d:c1:d6:35:77:98:f1:fa:6c:f6:65:b3:4c:ef:52: 1f:68:20:9d:d7:6c:f8:2d:8c:3f:8f:a9:9c:d7:47:be:6e:34: 05:f4:02:80:81:f4:6a:f5:78:05:96:ea:f9:0d:de:96:1e:4f: 08:90:66:d9 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTI0NjIwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyNDQyQTExMC8GA1UEBRMoMzU0RTMyQjlERTBFNTY5QTE5NTFBOTdC OTMyMDE5RjY4OEEzNTBBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APe17jRaKBFaXGd8rrmB96ByuHIA76GvhE9qp5unWeObrLSWDJHbg7c1wCiSnaaW gUn0E4vlaR5XeKurI4CTCNogmssLMIuPdIEVblxvrXH45GWQu7MJRA4K0omy+bq/ GsY3awWk8iuUsXSFObH4HXk5miPAJRiAdaXqamXdTEjlIn0bIbUrMN325LSO+YbO 7FD9wvt9gU98Gj2TnEWw0w6Q4SynzsR3MHRQqmKbK0FaYDkhFAGT9EAtpxnzVROv IgzUNshsbLVgzFxoJ19/NcPBZ87YMu5rSXEp96njVkvJzRPlZ0HYgWpNu+nFcH+V 8UFkF8vL+yLcJCI3XBk2LUUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ1TjK53g5W mhlRqXuTIBn2iKNQrDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvNTVFQkI4NTg0RTNCMTFGMDlDMTI1NTQ3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI0NDJBLzU1RUJCODU4NEUzQjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRP VnBvWlVhbDdreUFaOW9palVLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAkG1aDANBgkqhkiG9w0BAQsFAAOCAQEAq7YRrHkGS3a7+CCkTFj+ 19B2VVNIzDqk0CHsCmNsPVRxB1g5XonS9JN3po7IJ9UQXmT1fCrbf1ThVscPVENu 4Ff/vvoFOhANy7G4QEuW05jmIjLjEyIDxgdMoJePF2xfhAY8aHKipPPpkT4RQmJY sKyRUUGB9WlsQsewgTtbH4PwlRu1C1KKHzVgQHVhDKxdWPx4w3mWS3BJ6hAPlsl7 shJycJdAG2lj0hYKkKx0rZlmiYM4sLPhQJlrWeTD7Pr76Q8GvYkH6b20jcHWNXeY 8fps9mWzTO9SH2ggndds+C2MP4+pnNdHvm40BfQCgIH0avV4BZbq+Q3elh5PCJBm 2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:25 2025 by rpki-client