This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer File: No88k4tgFBJSGjqBkAmXj8_pHn4.cer (raw, json) Hash identifier: d7B45Po+T+oSS8tC5wyuFMhlPc6dIwit0g0EiJteYi8= Subject key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F7E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft caRepository: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 18:01:35 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 136.158.0.0/16 IP: 136.239.128.0/17 IP: 139.135.128.0/17 IP: 143.9.0.0/16 IP: 143.44.128.0/17 IP: 152.32.64.0 -- 152.32.123.255 IP: 161.49.0.0 -- 161.49.187.255 IP: 161.49.192.0 -- 161.49.231.255 IP: 204.145.0.0/24 IP: 204.145.2.0 -- 204.145.7.255 IP: 206.201.0.0/20 IP: 208.71.224.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28542 (0x6f7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 3 18:01:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:44:70:9d:4d:eb:6f:28:4c:ae:a0:16:ba: fe:b4:01:b2:8c:d8:d8:0b:33:b3:dc:a3:de:17:17: bf:a5:cd:b9:96:5f:5e:a2:0f:4a:cc:6a:4a:71:de: 53:59:a7:d9:37:1b:89:5d:75:71:5a:8d:9e:ff:d3: 79:53:c4:30:a2:0a:15:2f:59:2a:99:0c:9d:eb:bd: a8:86:8b:d8:d0:ab:15:2a:87:b3:1b:7c:3b:fb:99: d8:68:97:74:44:fa:b1:9c:19:fc:d5:96:79:44:b9: c2:cb:f7:9b:8f:61:63:24:21:6f:25:48:5c:f2:a1: 5f:36:11:d1:81:4b:7b:aa:21:1c:35:e6:3a:88:8d: 3d:7d:e9:ab:3e:bf:ba:b6:a1:e8:bb:d5:5c:fb:80: ce:74:e9:ee:69:5e:1e:b8:84:fa:06:da:64:60:2a: a3:f3:69:4c:5c:61:87:5f:6b:9c:2b:ee:d6:65:22: 80:7c:49:28:61:9b:81:79:c3:db:50:34:25:92:e8: 0e:4c:d0:8b:50:0d:b4:99:3d:2c:05:be:bd:40:a0: 9f:56:c7:07:41:44:73:94:4a:66:6b:2f:9d:39:12: c6:84:86:96:ba:9a:3a:27:0b:59:2b:9e:ee:0a:dd: 95:2e:d2:71:20:6a:87:6e:4b:38:f6:21:61:6c:0f: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.158.0.0/16 136.239.128.0/17 139.135.128.0/17 143.9.0.0/16 143.44.128.0/17 152.32.64.0-152.32.123.255 161.49.0.0-161.49.187.255 161.49.192.0-161.49.231.255 204.145.0.0/24 204.145.2.0-204.145.7.255 206.201.0.0/20 208.71.224.0/21 Signature Algorithm: sha256WithRSAEncryption 83:1f:0d:35:a5:41:a0:95:90:24:5b:ba:fe:7d:32:ba:02:aa: 67:11:bc:48:5e:dd:1c:9a:7f:63:3b:d0:6b:75:84:41:ec:f0: a9:53:bc:62:20:6e:ef:4d:b7:c8:02:d7:1c:4e:4d:f3:e7:02: 42:7f:d2:c0:52:e2:de:28:1e:e1:20:4d:ca:c3:d3:47:db:89: c5:1f:ae:f1:87:4b:2d:6b:0a:f5:76:35:c4:74:1c:ec:88:15: 4b:ca:ec:2c:0c:12:4a:07:85:6b:94:0e:0c:46:68:b0:f6:e2: d0:45:4c:5e:04:a3:34:41:b9:92:92:4f:d0:b4:4c:76:88:fe: 14:a4:77:e7:41:76:ee:34:7a:d1:28:7e:f5:56:dc:03:43:81: 64:2a:00:9a:e2:d8:17:f9:47:de:d1:e9:ad:e5:b5:68:04:2d: eb:25:97:8e:91:7a:70:06:29:d9:cb:53:42:95:86:2b:5c:e6: b7:6d:87:88:d3:8d:ac:c3:f4:d4:90:e7:19:09:f7:09:4b:7d: ff:51:df:b3:3c:89:64:7e:84:2c:77:92:4c:da:85:ea:4a:be: 28:e2:16:68:fc:94:a5:d3:cc:11:24:7f:ad:34:1f:4e:67:23: 26:07:56:c3:a1:e1:af:c8:55:d7:28:ff:a3:52:98:3b:0b:61: bb:7e:99:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgICb34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAzMTgwMTM1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2QjE4QjExMC8GA1UEBRMoMzY4RjNDOTM4QjYwMTQxMjUyMUEzQTgx OTAwOTk3OEZDRkU5MUU3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOFXRHCdTetvKEyuoBa6/rQBsozY2Aszs9yj3hcXv6XNuZZfXqIPSsxqSnHeU1mn 2TcbiV11cVqNnv/TeVPEMKIKFS9ZKpkMneu9qIaL2NCrFSqHsxt8O/uZ2GiXdET6 sZwZ/NWWeUS5wsv3m49hYyQhbyVIXPKhXzYR0YFLe6ohHDXmOoiNPX3pqz6/urah 6LvVXPuAznTp7mleHriE+gbaZGAqo/NpTFxhh19rnCvu1mUigHxJKGGbgXnD21A0 JZLoDkzQi1ANtJk9LAW+vUCgn1bHB0FEc5RKZmsvnTkSxoSGlrqaOicLWSue7grd lS7ScSBqh25LOPYhYWwPn6cCAwEAAaOCA1IwggNOMB0GA1UdDgQWBBQ2jzyTi2AU ElIaOoGQCZePz+kefjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZCMThCL0Y5OEI1RjBDMjFGOTExRTg5NkMxREQyM0M0RjlBRTAyL05vODhrNHRn RkJKU0dqcUJrQW1YajhfcEhuNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDB+BggrBgEFBQcBBwEB/wRvMG0w awQCAAEwZQMDAIieAwQHiO+AAwQHi4eAAwMAjwkDBAePLIAwDAMEBpggQAMEApgg eDALAwMAoTEDBAKhMbgwDAMEBqExwAMEA6Ex4AMEAMyRADAMAwQBzJECAwQDzJEA AwQEzskAAwQD0EfgMA0GCSqGSIb3DQEBCwUAA4IBAQCDHw01pUGglZAkW7r+fTK6 AqpnEbxIXt0cmn9jO9BrdYRB7PCpU7xiIG7vTbfIAtccTk3z5wJCf9LAUuLeKB7h IE3Kw9NH24nFH67xh0stawr1djXEdBzsiBVLyuwsDBJKB4VrlA4MRmiw9uLQRUxe BKM0QbmSkk/QtEx2iP4UpHfnQXbuNHrRKH71VtwDQ4FkKgCa4tgX+Ufe0emt5bVo BC3rJZeOkXpwBinZy1NClYYrXOa3bYeI042sw/TUkOcZCfcJS33/Ud+zPIlkfoQs d5JM2oXqSr4o4hZo/JSl08wRJH+tNB9OZyMmB1bDoeGvyFXXKP+jUpg7C2G7fplL -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:35 2025 by rpki-client