This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer File: PG7AmwlfpfUTYVEIpUR8rLcasaE.cer (raw, json) Hash identifier: PJN8xJd4Exabmh+yAO9tFsNYML3HnffZD9b0m6sayxw= Subject key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FAD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 15:26:16 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 131.242.0.0/16 IP: 147.132.0.0/16 IP: 161.143.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28589 (0x6fad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 5 15:26:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:40:ac:87:b3:ff:58:20:35:96:bf:52:a7: 59:8b:87:9b:e9:60:d5:3d:3c:b7:68:30:60:f8:df: 01:79:5f:58:db:37:e7:f4:b5:3a:96:ab:b7:ac:3e: c4:5a:64:64:e0:d8:44:47:0b:18:23:fc:cb:a4:a3: ed:71:6e:17:0c:33:b1:32:ca:6c:b0:b6:d5:21:03: 2d:73:89:24:41:15:de:0f:fd:ed:7d:2a:86:5e:7e: 32:65:b2:1c:3e:5c:7d:60:3a:49:f1:2d:0a:85:4f: 72:fb:5f:22:4e:58:ed:14:eb:b8:36:7b:09:b8:04: 8f:0f:fc:5d:ce:ca:8a:22:b7:a8:cc:39:8a:a7:dd: d3:84:7c:b0:05:c4:ad:d7:4e:06:ba:07:4c:4b:8b: 6d:8c:f1:b0:f3:06:6a:38:d0:21:5b:2e:d1:8a:46: d0:2f:25:9b:91:3f:fa:fd:b2:72:ef:42:23:27:80: 23:d5:5f:c2:fe:f2:17:dc:9f:45:af:78:dd:5b:7a: 5d:dc:c9:f0:c5:f1:31:c3:98:da:18:7e:d6:a5:36: 63:57:b0:15:15:4d:9d:40:e6:4d:9a:f5:59:1f:db: 5a:e8:1f:29:ad:0e:52:71:96:23:0f:a4:4d:e6:2a: 95:1f:13:b9:2d:68:09:34:ed:8b:90:c4:87:58:97: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.242.0.0/16 147.132.0.0/16 161.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:ff:72:d5:27:5b:22:56:dc:40:3f:f9:1c:9f:7b:7e:85:6f: a3:10:e7:2f:b0:55:f4:66:85:b3:ff:f5:d6:f9:af:68:bc:8a: c9:87:53:cf:72:be:8d:7d:fa:6a:a3:73:9f:d8:c9:81:8e:e5: 99:07:2d:f6:52:eb:bf:08:5a:54:67:a5:11:3b:35:c1:a0:2e: 30:06:07:ae:65:ce:88:31:d5:ab:bf:90:b9:ca:19:d7:9c:75: 93:ed:8d:85:53:37:d4:95:31:2d:3b:55:b3:11:7f:d7:0c:c8: 52:a1:1b:a8:b7:c0:a9:c6:1e:2a:d0:2d:2d:0f:b4:ef:e9:ac: c4:f0:b9:06:46:93:56:16:30:24:a3:0e:56:2d:7c:65:7c:95: e9:93:3f:3a:08:90:e1:42:fd:28:90:84:f9:03:dc:7b:43:c4: bd:6e:bd:41:2d:07:87:a1:a6:23:66:cd:e6:59:d7:19:6d:87: b5:39:47:ce:63:a0:e3:a0:5b:cf:74:f3:6f:42:7b:c5:27:75: 0f:c0:87:b1:42:53:27:f9:fd:13:4a:f5:26:4a:9f:f4:7b:0e: 47:10:7d:6c:65:57:f6:44:b0:48:bb:14:89:ca:eb:57:1b:79: a3:5b:9f:7c:e6:a6:88:df:4e:e8:35:94:95:f0:a2:c0:18:dc: 5e:37:7a:8a -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgICb60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA1MTUyNjE2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3RTRCQTExMC8GA1UEBRMoM0M2RUMwOUIwOTVGQTVGNTEzNjE1MTA4 QTU0NDdDQUNCNzFBQjFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALOLQKyHs/9YIDWWv1KnWYuHm+lg1T08t2gwYPjfAXlfWNs35/S1Opart6w+xFpk ZODYREcLGCP8y6Sj7XFuFwwzsTLKbLC21SEDLXOJJEEV3g/97X0qhl5+MmWyHD5c fWA6SfEtCoVPcvtfIk5Y7RTruDZ7CbgEjw/8Xc7KiiK3qMw5iqfd04R8sAXErddO BroHTEuLbYzxsPMGajjQIVsu0YpG0C8lm5E/+v2ycu9CIyeAI9Vfwv7yF9yfRa94 3Vt6XdzJ8MXxMcOY2hh+1qU2Y1ewFRVNnUDmTZr1WR/bWugfKa0OUnGWIw+kTeYq lR8TuS1oCTTti5DEh1iXeFUCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBQ8bsCbCV+l 9RNhUQilRHystxqxoTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U0QkEvQzk1MkFDOUU1MkRDMTFFQTgyNjAxQjBGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdFNEJBL0M5NTJBQzlFNTJEQzExRUE4MjYwMUIwRkM0RjlBRTAyL1BHN0Ftd2xm cGZVVFlWRUlwVVI4ckxjYXNhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAoBggrBgEFBQcBBwEB/wQZMBcw FQQCAAEwDwMDAIPyAwMAk4QDAwChjzANBgkqhkiG9w0BAQsFAAOCAQEAi/9y1Sdb IlbcQD/5HJ97foVvoxDnL7BV9GaFs//11vmvaLyKyYdTz3K+jX36aqNzn9jJgY7l mQct9lLrvwhaVGelETs1waAuMAYHrmXOiDHVq7+QucoZ15x1k+2NhVM31JUxLTtV sxF/1wzIUqEbqLfAqcYeKtAtLQ+07+msxPC5BkaTVhYwJKMOVi18ZXyV6ZM/OgiQ 4UL9KJCE+QPce0PEvW69QS0Hh6GmI2bN5lnXGW2HtTlHzmOg46Bbz3Tzb0J7xSd1 D8CHsUJTJ/n9E0r1Jkqf9HsORxB9bGVX9kSwSLsUicrrVxt5o1uffOamiN9O6DWU lfCiwBjcXjd6ig== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:17 2025 by rpki-client