This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer File: Nh-touCojPKH9M5sw7RGLJEzC_w.cer (raw, json) Hash identifier: IY1tf4WbUFdG2/962+rHhtHLYkNWOLvUxv4H186lYIg= Subject key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F4B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:17:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 143.174.192.0/19 IP: 192.150.234.0 -- 192.150.237.255 IP: 192.199.32.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28491 (0x6f4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 12:17:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:40:70:c8:ef:f7:e6:8d:09:bd:1b:e4:35: d2:a6:1d:96:cd:3b:1b:ed:d0:c7:bb:9f:ee:21:91: 40:22:50:fe:95:e4:54:bb:5e:53:23:5d:65:cc:67: e5:6d:74:82:a6:9e:33:2d:88:a0:fd:f5:59:d2:0b: 99:c6:b9:1a:c6:46:47:f5:99:9c:e6:da:40:cc:7f: 6a:f9:79:b8:11:19:08:47:74:b8:95:81:8a:41:77: 9e:a2:e2:9e:b4:ba:c6:c1:d3:77:b2:ef:36:c3:8f: 6e:8f:1f:0f:e0:47:b3:1c:38:9a:2b:ff:f4:ff:14: a3:4a:67:80:ea:79:b7:7d:c4:0f:c7:81:7a:62:c9: c5:59:1f:65:23:2f:e9:9a:c7:f9:ce:a7:18:df:f8: d7:2d:86:22:29:b7:e7:03:79:e7:ea:af:9d:fd:21: 5f:f3:db:67:d6:de:0c:53:63:9a:33:4c:fa:18:5b: 06:ab:53:6c:cd:b3:30:81:21:15:b9:62:6e:a5:99: b8:a0:44:2c:57:12:de:17:25:d0:ee:0c:21:14:18: 28:3c:46:af:d8:61:d5:95:a8:18:24:08:24:d9:a0: a5:1d:56:7b:1f:a6:17:73:35:b6:7a:db:85:2c:ed: ae:4c:ae:b9:90:f9:b4:05:9d:39:db:b1:b1:2a:da: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.174.192.0/19 192.150.234.0-192.150.237.255 192.199.32.0/20 Signature Algorithm: sha256WithRSAEncryption 77:2c:33:67:19:b5:c6:a9:1d:fe:de:f2:9a:09:af:ac:6c:8c: 5c:93:90:0d:a5:df:63:8a:5d:4c:13:f8:06:16:c1:04:da:26: 9f:27:71:8e:81:7c:0c:4a:6c:18:b9:93:7e:d5:df:c4:57:3f: 4a:c6:f6:12:64:80:f9:68:21:54:0d:e3:8b:d3:54:d7:fa:e3: e7:98:cc:89:18:45:2b:28:5a:b5:9e:b0:aa:a4:96:f7:43:67: 87:1e:b4:14:95:27:86:eb:3b:a5:4f:91:da:3b:ad:e4:21:f9: 6c:30:d2:27:96:16:cf:30:c7:6f:4a:d5:3a:ba:68:b6:51:b1: 67:8c:b9:1d:bb:fd:c5:dd:cd:2f:79:e5:15:1e:c7:28:82:5d: 63:5b:21:7a:a1:97:6e:85:55:b4:66:a0:68:72:b9:58:be:6a: 96:b3:b8:4e:9e:40:9b:47:60:2a:76:55:29:10:8d:64:a6:28: 6e:5b:ad:14:28:f0:d0:1d:8b:79:72:fa:a2:da:44:0c:df:e7: 7e:ab:88:f8:9f:57:c3:32:e8:43:fb:b2:54:62:b4:ae:ed:4f: 45:0a:92:42:02:be:ac:3d:7a:25:f9:b3:0d:a6:9a:82:e6:ed: 2b:16:6b:48:76:f8:63:13:e5:0a:6d:c0:5c:e3:76:17:b9:84: 37:a9:cf:2f -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgICb0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTIxNzUyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGODM1NzExMC8GA1UEBRMoMzYxRkFEQTJFMEE4OENGMjg3RjRDRTZD QzNCNDQ2MkM5MTMzMEJGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOvXQHDI7/fmjQm9G+Q10qYdls07G+3Qx7uf7iGRQCJQ/pXkVLteUyNdZcxn5W10 gqaeMy2IoP31WdILmca5GsZGR/WZnObaQMx/avl5uBEZCEd0uJWBikF3nqLinrS6 xsHTd7LvNsOPbo8fD+BHsxw4miv/9P8Uo0pngOp5t33ED8eBemLJxVkfZSMv6ZrH +c6nGN/41y2GIim35wN55+qvnf0hX/PbZ9beDFNjmjNM+hhbBqtTbM2zMIEhFbli bqWZuKBELFcS3hcl0O4MIRQYKDxGr9hh1ZWoGCQIJNmgpR1Wex+mF3M1tnrbhSzt rkyuuZD5tAWdOduxsSra7mUCAwEAAaOCAwcwggMDMB0GA1UdDgQWBBQ2H62i4KiM 8of0zmzDtEYskTML/DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgzNTcvMTRBNzhGMkNERjhBMTFFRjg3NDcyQjc0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY4MzU3LzE0QTc4RjJDREY4QTExRUY4NzQ3MkI3NEM0RjlBRTAyL05oLXRvdUNv alBLSDlNNXN3N1JHTEpFekNfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQkMCIw IAQCAAEwGgMEBY+uwDAMAwQBwJbqAwQBwJbsAwQEwMcgMA0GCSqGSIb3DQEBCwUA A4IBAQB3LDNnGbXGqR3+3vKaCa+sbIxck5ANpd9jil1ME/gGFsEE2iafJ3GOgXwM SmwYuZN+1d/EVz9KxvYSZID5aCFUDeOL01TX+uPnmMyJGEUrKFq1nrCqpJb3Q2eH HrQUlSeG6zulT5HaO63kIflsMNInlhbPMMdvStU6umi2UbFnjLkdu/3F3c0veeUV Hscogl1jWyF6oZduhVW0ZqBocrlYvmqWs7hOnkCbR2AqdlUpEI1kpihuW60UKPDQ HYt5cvqi2kQM3+d+q4j4n1fDMuhD+7JUYrSu7U9FCpJCAr6sPXol+bMNppqC5u0r FmtIdvhjE+UKbcBc43YXuYQ3qc8v -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:14 2025 by rpki-client