This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer File: Qb--vmNSH7BO2BI8aOXAza9dBc0.cer (raw, json) Hash identifier: kFnlWRPJArszOZmay+hcFU0TpxNAAwLAqz+l+L0MzQk= Subject key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E08 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 15:16:11 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 167.208.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28168 (0x6e08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 13 15:16:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:62:bd:00:73:be:35:83:9d:92:67:d2:65: 0a:e1:76:77:32:63:8c:eb:e6:c4:c8:bc:d5:06:8f: 57:f8:3f:3c:e3:db:c6:49:2e:e5:2d:fe:a5:75:fd: 73:e1:42:0b:dd:a6:9c:9a:eb:33:27:32:e7:87:92: ca:3d:3f:1a:b3:1a:8c:56:ce:5e:91:f1:dd:18:7b: b3:5f:29:5a:aa:98:5a:e6:78:39:bd:fd:dc:7d:5c: 1a:9d:34:79:b8:7f:47:b8:8c:d9:b3:25:02:4f:e9: 3f:96:0b:f8:fd:10:f0:a3:7d:82:85:ec:14:33:19: 55:07:70:c6:66:79:fa:cc:8c:3b:80:27:6c:0e:6e: 3d:ea:63:dc:fd:93:ce:cb:1e:4f:6b:c0:ab:29:eb: f1:62:8c:4e:4b:b1:66:8b:e4:0c:be:3f:0b:95:cc: 80:c0:90:be:c6:ba:15:bf:e0:f2:b4:0e:b3:6a:62: 9f:4e:f3:c3:44:94:5f:1d:5f:b0:b0:52:7d:e7:96: e9:dd:94:89:51:a3:d8:36:23:96:c7:ea:4a:74:c7: d8:9d:72:5f:82:fd:30:f2:0b:63:ff:c3:69:f0:99: a8:9b:04:31:15:63:1d:ad:f5:48:e0:30:af:84:91: 22:c7:fd:4e:92:8e:e4:b2:fc:df:98:44:a7:f3:73: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:97:de:76:2e:04:19:76:2e:56:7f:88:c9:d7:5b:d6:0c:e7: 58:4a:1a:3e:49:1c:9b:ec:33:ec:c1:2c:fb:32:aa:ac:d7:07: 3c:3e:2b:75:0a:58:a8:4d:32:91:2b:00:60:06:7a:f4:75:b8: 67:cd:c3:a1:69:91:a6:f0:b9:3b:27:d2:d7:16:58:f0:22:2d: 79:de:6b:38:12:ee:8a:a5:90:2e:d0:f9:ea:ea:ed:88:78:71: ef:c1:b2:0d:7a:0a:71:ec:bf:02:11:35:4f:e5:ac:3a:de:ad: 2c:99:e8:8b:d5:8f:b9:87:6b:c1:b3:2e:c4:73:2a:4f:71:9f: e5:d5:1d:24:70:d7:05:99:22:08:3b:74:cc:f8:9b:1a:46:09: df:93:99:cd:6d:d0:bb:ae:4a:df:b3:59:79:a0:79:27:54:56: 45:8e:94:e7:04:eb:df:01:a0:21:e3:b0:a3:f6:a1:44:ea:f8: 97:0d:83:c1:ad:13:50:21:09:f1:70:f2:12:59:d5:bf:e8:0d: 3f:0f:85:ca:e9:7a:d6:43:97:6a:dc:65:42:ff:7a:08:a2:1a: 39:f8:98:ba:34:86:f3:67:62:56:94:bc:7e:51:26:18:a7:f6: 0d:ec:31:b7:05:5b:61:8b:f9:f6:ef:81:90:d1:f3:b3:74:7a: 79:b1:26:cc -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICbggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTEzMTUxNjExWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3MDk4MjExMC8GA1UEBRMoNDFCRkJFQkU2MzUyMUZCMDRFRDgxMjND NjhFNUMwQ0RBRjVEMDVDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKpdYr0Ac741g52SZ9JlCuF2dzJjjOvmxMi81QaPV/g/POPbxkku5S3+pXX9c+FC C92mnJrrMycy54eSyj0/GrMajFbOXpHx3Rh7s18pWqqYWuZ4Ob393H1cGp00ebh/ R7iM2bMlAk/pP5YL+P0Q8KN9goXsFDMZVQdwxmZ5+syMO4AnbA5uPepj3P2Tzsse T2vAqynr8WKMTkuxZovkDL4/C5XMgMCQvsa6Fb/g8rQOs2pin07zw0SUXx1fsLBS feeW6d2UiVGj2DYjlsfqSnTH2J1yX4L9MPILY//DafCZqJsEMRVjHa31SOAwr4SR Isf9TpKO5LL835hEp/NzkPECAwEAAaOCAvIwggLuMB0GA1UdDgQWBBRBv76+Y1If sE7YEjxo5cDNr10FzTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvQ0YyMDVDNjBBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcwOTgyL0NGMjA1QzYwQUMxMzExRUNCNzc2QjIwOUM0RjlBRTAyL1FiLS12bU5T SDdCTzJCSThhT1hBemE5ZEJjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAKfQMA0GCSqGSIb3DQEBCwUAA4IBAQANl952LgQZdi5Wf4jJ11vW DOdYSho+SRyb7DPswSz7Mqqs1wc8Pit1ClioTTKRKwBgBnr0dbhnzcOhaZGm8Lk7 J9LXFljwIi153ms4Eu6KpZAu0Pnq6u2IeHHvwbINegpx7L8CETVP5aw63q0smeiL 1Y+5h2vBsy7EcypPcZ/l1R0kcNcFmSIIO3TM+JsaRgnfk5nNbdC7rkrfs1l5oHkn VFZFjpTnBOvfAaAh47Cj9qFE6viXDYPBrRNQIQnxcPISWdW/6A0/D4XK6XrWQ5dq 3GVC/3oIoho5+Ji6NIbzZ2JWlLx+USYYp/YN7DG3BVthi/n274GQ0fOzdHp5sSbM -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:28 2025 by rpki-client