This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer File: REDuIbNImmUKYWsSDY5b5Xku4Es.cer (raw, json) Hash identifier: 854LMv6lofx+Cwlgl2gCozsBbGI3A2bNvEjvhYKW0eo= Subject key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F8F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 04:10:56 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 198.244.10.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28559 (0x6f8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 4 04:10:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:46:7c:35:ef:ec:ba:c1:09:a7:c4:fa:88: f3:45:18:20:54:13:db:8e:fc:a4:54:d4:c1:9a:d6: 8e:9e:49:9e:29:5a:e8:b2:e2:5c:30:11:15:ea:fc: d7:44:b8:f6:b9:3b:ef:5a:63:81:98:1a:5b:14:2a: a2:09:1a:3b:8c:db:3e:d7:ef:e2:15:81:1e:74:59: c2:e3:b0:ee:08:8c:52:29:25:c4:4c:f3:53:56:3e: 49:45:3a:ac:de:bd:d4:c2:eb:f6:a1:2b:07:94:92: 3d:b1:1b:40:f0:8b:41:be:5a:d6:13:90:4f:7a:68: 89:3a:6d:4f:94:18:90:83:72:b7:5b:fe:bb:47:72: 20:74:25:a1:3b:c2:3f:06:7b:ec:a2:25:b7:74:d9: 09:82:1e:67:9d:17:ba:85:cd:a2:09:95:5d:63:7a: bd:6f:e7:f0:1c:d3:43:ac:ab:1e:81:62:d2:04:6d: ac:15:57:a1:92:57:7f:8e:b9:1d:91:e7:75:6b:41: ad:0d:9e:bd:da:e2:08:0d:94:3c:69:51:a5:9c:b6: 15:b0:d2:f3:7a:89:a8:77:70:9b:60:f8:3f:60:ff: c7:11:e6:b2:5f:49:6d:19:c9:a4:7b:77:59:6d:ab: 9a:39:4b:fb:c8:d8:b6:5a:45:73:40:bb:08:54:7b: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 198.244.10.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:14:8a:de:d4:60:e7:6c:6f:50:f5:78:7c:e5:d8:b8:9a:ae: 47:e0:07:52:a9:64:09:17:d8:91:fc:d3:30:df:6c:96:4c:0a: 32:50:c9:23:3f:ec:59:f9:1c:41:ca:fe:68:8c:ab:d2:4b:b9: 87:36:2c:c2:0a:97:b6:ea:92:eb:30:db:8d:c5:c1:8a:2d:7e: 4f:f3:9b:0b:76:3e:a9:fb:ed:c8:41:f3:f5:ce:e4:3b:65:63: 2a:18:c7:92:2d:8a:ba:99:bd:8a:ea:8d:bd:8e:17:7f:4b:f5: b2:25:36:9b:cc:61:f5:24:25:99:b2:cf:3a:9a:0f:d7:63:54: 4c:fe:16:b0:1e:a0:59:84:fe:ec:24:23:13:62:fe:d8:d6:54: 0f:17:5a:30:77:ce:07:d5:75:bf:81:4d:0f:44:5c:ae:4b:5a: 56:dd:a8:25:79:4e:91:52:21:2e:b9:4a:3a:24:7b:4d:44:2f: 7b:ff:cf:ca:14:0d:04:5d:de:f4:f1:ff:f9:1f:24:b8:6f:8f: 29:d4:d6:3b:63:33:f3:77:68:4b:5b:bf:1f:d6:24:f8:9e:ae: 16:ec:09:6a:42:5f:57:4d:0a:af:63:a2:97:a3:41:12:77:3f: 7d:9b:c7:5f:e3:45:81:22:f6:32:f8:db:2f:5e:a9:1e:37:ed: 8e:22:0d:e8 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA0MDQxMDU2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDRTNBMzExMC8GA1UEBRMoNDQ0MEVFMjFCMzQ4OUE2NTBBNjE2QjEy MEQ4RTVCRTU3OTJFRTA0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALpdRnw17+y6wQmnxPqI80UYIFQT2478pFTUwZrWjp5Jnila6LLiXDARFer810S4 9rk771pjgZgaWxQqogkaO4zbPtfv4hWBHnRZwuOw7giMUiklxEzzU1Y+SUU6rN69 1MLr9qErB5SSPbEbQPCLQb5a1hOQT3poiTptT5QYkINyt1v+u0dyIHQloTvCPwZ7 7KIlt3TZCYIeZ50XuoXNogmVXWN6vW/n8BzTQ6yrHoFi0gRtrBVXoZJXf465HZHn dWtBrQ2evdriCA2UPGlRpZy2FbDS83qJqHdwm2D4P2D/xxHmsl9JbRnJpHt3WW2r mjlL+8jYtlpFc0C7CFR7NFcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBREQO4hs0ia ZQphaxINjlvleS7gSzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzQTMvMTg4MjNDOEMwNTAxMTFFQUJEOUIyMDJDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNFM0EzLzE4ODIzQzhDMDUwMTExRUFCRDlCMjAyQ0M0RjlBRTAyL1JFRHVJYk5J bW1VS1lXc1NEWTViNVhrdTRFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcb0CjANBgkqhkiG9w0BAQsFAAOCAQEAXhSK3tRg52xvUPV4fOXY uJquR+AHUqlkCRfYkfzTMN9slkwKMlDJIz/sWfkcQcr+aIyr0ku5hzYswgqXtuqS 6zDbjcXBii1+T/ObC3Y+qfvtyEHz9c7kO2VjKhjHki2Kupm9iuqNvY4Xf0v1siU2 m8xh9SQlmbLPOpoP12NUTP4WsB6gWYT+7CQjE2L+2NZUDxdaMHfOB9V1v4FND0Rc rktaVt2oJXlOkVIhLrlKOiR7TUQve//PyhQNBF3e9PH/+R8kuG+PKdTWO2Mz83do S1u/H9Yk+J6uFuwJakJfV00Kr2Oil6NBEnc/fZvHX+NFgSL2MvjbL16pHjftjiIN 6A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:16 2025 by rpki-client