This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer File: PuJvukvjWd6uUAeS6_940ArLdgw.cer (raw, json) Hash identifier: MbMvEHK+qZbcsLf4KSARNbc5VvxKRiC8Rv3KkhYrpfk= Subject key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6CFF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 29 Oct 2025 15:20:53 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 149.234.189.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27903 (0x6cff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Oct 29 15:20:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:9e:15:9b:6a:54:87:ec:3e:05:48:c7:91: 41:28:54:65:d1:5e:0c:94:8b:c0:90:a1:23:49:88: 47:0e:dc:25:80:a7:4b:b6:bb:99:87:b7:b8:b2:ae: 8f:76:7e:39:49:f0:e6:d2:d4:28:d8:86:27:cd:8a: 25:3c:f9:21:b3:25:6c:f0:56:bc:e8:aa:77:90:f5: 26:b0:f1:62:62:44:be:96:6d:be:c1:9b:07:22:11: 8c:36:5f:b2:0e:e5:77:b3:df:f1:33:36:d9:d8:b6: 68:e7:62:b8:bb:80:07:f7:bc:be:91:06:fe:d9:eb: a3:26:f9:88:4c:9f:14:7c:14:22:d1:d3:78:e9:c4: 28:f1:46:21:5b:a5:96:62:82:4c:5a:0b:4a:cf:d8: b7:ba:f8:f0:be:af:e4:93:78:29:1f:72:cc:81:47: 32:6f:3f:d3:09:7b:23:e0:51:0b:bf:dc:c5:75:a3: f1:83:87:b8:c6:61:ce:be:04:3d:81:a1:fe:2e:69: 94:a2:fe:e4:43:b9:da:ee:f2:fb:76:77:dc:cc:f4: 40:c5:ad:c2:29:86:dc:3c:04:9c:7f:88:07:83:6d: 23:cb:41:3a:55:85:9c:b0:cb:d1:b4:c5:b7:c4:b4: c9:ac:99:a3:ac:f7:ba:e7:f1:b4:7e:34:1d:8c:c1: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 149.234.189.0/24 Signature Algorithm: sha256WithRSAEncryption 13:93:2d:dc:1a:f9:f5:31:e6:70:9b:bf:d2:0e:62:ce:cd:c9: ac:fd:6b:ff:5e:66:a4:e0:34:da:c3:67:58:b1:51:58:37:62: 86:52:58:9f:34:bf:06:b2:47:c6:ea:99:6d:9e:a3:2c:e0:5b: 76:15:aa:d8:45:90:78:65:b7:35:1d:a0:1b:ba:21:9a:27:a3: 74:59:e2:d7:68:dd:d8:44:c1:9b:d5:0e:b6:66:05:cf:d7:ec: 3f:12:89:68:6f:49:3d:04:0c:82:1a:48:90:3a:80:76:6a:0d: 05:43:64:de:30:ea:d3:a4:d7:0e:0a:54:dd:a7:c6:56:47:b7: 27:39:ca:f0:dd:eb:25:f7:ff:a5:62:28:ab:96:24:1d:7a:04: 7c:fc:ab:50:04:85:3a:eb:91:5c:be:27:0d:2e:44:43:3a:e9: b3:81:f0:77:8d:f7:96:c7:f8:a3:c7:6c:fa:11:74:3a:ac:e9: 90:6b:4c:ad:fc:9b:bb:e8:23:af:3f:75:8c:70:d4:6c:23:88: 1a:1f:d0:b7:20:33:d4:8d:60:14:e1:93:cf:ab:17:5e:e8:d6: 41:97:32:0f:91:a3:a8:fb:f1:f8:7f:d3:b2:dd:38:6d:8f:54: 10:1a:53:37:b1:fa:2c:91:5c:d8:38:48:5b:d7:6f:ae:e4:a0: 45:b3:67:81 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMDI5MTUyMDUzWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1OTZDNDExMC8GA1UEBRMoM0VFMjZGQkE0QkUzNTlERUFFNTAwNzky RUJGRjc4RDAwQUNCNzYwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMefnhWbalSH7D4FSMeRQShUZdFeDJSLwJChI0mIRw7cJYCnS7a7mYe3uLKuj3Z+ OUnw5tLUKNiGJ82KJTz5IbMlbPBWvOiqd5D1JrDxYmJEvpZtvsGbByIRjDZfsg7l d7Pf8TM22di2aOdiuLuAB/e8vpEG/tnroyb5iEyfFHwUItHTeOnEKPFGIVullmKC TFoLSs/Yt7r48L6v5JN4KR9yzIFHMm8/0wl7I+BRC7/cxXWj8YOHuMZhzr4EPYGh /i5plKL+5EO52u7y+3Z33Mz0QMWtwimG3DwEnH+IB4NtI8tBOlWFnLDL0bTFt8S0 yayZo6z3uufxtH40HYzBiSsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ+4m+6S+NZ 3q5QB5Lr/3jQCst2DDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk2QzQvRjNEREVFREU4MzMwMTFFQzhGRjM5MzgzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU5NkM0L0YzRERFRURFODMzMDExRUM4RkYzOTM4M0M0RjlBRTAyL1B1SnZ1a3Zq V2Q2dVVBZVM2Xzk0MEFyTGRndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJXqvTANBgkqhkiG9w0BAQsFAAOCAQEAE5Mt3Br59THmcJu/0g5i zs3JrP1r/15mpOA02sNnWLFRWDdihlJYnzS/BrJHxuqZbZ6jLOBbdhWq2EWQeGW3 NR2gG7ohmiejdFni12jd2ETBm9UOtmYFz9fsPxKJaG9JPQQMghpIkDqAdmoNBUNk 3jDq06TXDgpU3afGVke3JznK8N3rJff/pWIoq5YkHXoEfPyrUASFOuuRXL4nDS5E Qzrps4Hwd433lsf4o8ds+hF0OqzpkGtMrfybu+gjrz91jHDUbCOIGh/QtyAz1I1g FOGTz6sXXujWQZcyD5GjqPvx+H/Tst04bY9UEBpTN7H6LJFc2DhIW9dvruSgRbNn gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:12 2025 by rpki-client