This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer File: RwHPLSggCdbG6vRVb7DcGw1VV-8.cer (raw, json) Hash identifier: iVnZSheRzXKrOkwih8QldlcFcYcE0WcnOLcQV3k1hw8= Subject key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E5D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft caRepository: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 17:18:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.140.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28253 (0x6e5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 18 17:18:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:09:4f:1b:7f:65:1d:3e:5b:e4:5b:1a:13: 99:7e:96:81:2a:01:57:b1:20:f0:8b:87:f9:32:6a: 57:77:ba:ef:48:1f:de:84:aa:68:48:d6:4e:1d:dc: 48:99:e9:c9:06:9c:87:f5:6b:22:6e:87:ab:29:61: b6:33:b6:44:cd:45:a9:5c:0c:5c:f3:f9:b1:07:1f: 84:f5:28:49:3d:07:35:00:d7:27:53:39:e2:7e:e5: 85:0d:6c:7a:14:a8:2e:0d:90:54:27:2a:15:3d:ff: d6:91:8f:05:7c:78:03:47:68:a8:17:e4:42:8d:94: 48:93:03:40:53:be:d3:9b:7d:5c:d4:46:88:30:67: e6:23:94:b8:7e:1d:90:60:22:96:52:66:65:7b:dc: 8d:b6:aa:8f:2a:bf:f0:43:e6:39:f7:a3:34:aa:0a: de:05:d7:d5:3c:db:cb:d9:6a:0c:8c:60:11:ff:8b: a1:98:77:e2:b0:cb:76:e0:bb:5d:69:2d:9a:62:e1: b5:b6:84:53:94:e6:ae:b1:36:3b:d2:22:c5:ed:0d: 81:b3:c0:aa:3e:3f:b8:47:37:cf:db:b0:7f:ec:97: a1:26:7e:4f:40:1c:1f:b1:79:3d:e0:6e:36:3d:97: 40:d9:28:94:85:2e:03:7e:80:42:a0:c1:a5:5a:fc: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.140.0/23 Signature Algorithm: sha256WithRSAEncryption 14:12:05:91:06:ce:31:5a:54:ea:45:c3:80:0a:2a:68:27:d7: 4a:7d:ac:22:52:5a:2f:1d:3e:48:41:fd:7f:8a:40:89:05:55: a8:94:57:d1:63:02:a0:f3:94:a9:5c:ee:f3:3b:66:f3:62:8b: ff:1a:bd:13:ca:64:23:d6:a2:98:d2:f3:56:e2:86:c2:a2:9a: e4:f2:d3:f0:bb:54:3b:7c:9c:c8:44:a3:27:74:51:f0:0d:de: 41:95:9b:81:ee:c2:de:56:7d:c5:79:4e:8b:2e:98:4f:83:8e: 43:ad:a9:c5:7a:0d:bc:b3:87:50:d6:e7:4b:37:ef:f9:bd:4e: 98:5c:a3:f0:89:fb:05:14:cf:9f:b7:13:53:61:d7:be:3d:14: 67:32:2b:80:80:77:bf:76:42:90:db:33:2c:bb:18:5e:07:24: cc:b0:04:55:4c:82:7c:ed:6a:80:ed:85:09:0b:71:68:8a:53: 63:9e:09:17:54:71:c1:bb:e0:fc:2b:e4:7f:35:68:ed:59:e6: 4d:22:d3:73:22:fe:bc:bc:39:2d:4f:a6:90:5d:9e:d6:89:dc: 20:64:13:6c:bb:7f:90:b6:27:7f:bd:6b:7c:a0:06:93:49:8e: e5:90:ee:6f:4b:50:7a:5a:73:58:2f:17:92:4e:65:99:8a:58: 3a:be:2a:3d -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE4MTcxODQ2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1 NkZCMERDMUIwRDU1NTdFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALawCU8bf2UdPlvkWxoTmX6WgSoBV7Eg8IuH+TJqV3e670gf3oSqaEjWTh3cSJnp yQach/VrIm6HqylhtjO2RM1FqVwMXPP5sQcfhPUoST0HNQDXJ1M54n7lhQ1sehSo Lg2QVCcqFT3/1pGPBXx4A0doqBfkQo2USJMDQFO+05t9XNRGiDBn5iOUuH4dkGAi llJmZXvcjbaqjyq/8EPmOfejNKoK3gXX1Tzby9lqDIxgEf+LoZh34rDLduC7XWkt mmLhtbaEU5TmrrE2O9Iixe0NgbPAqj4/uEc3z9uwf+yXoSZ+T0AcH7F5PeBuNj2X QNkolIUuA36AQqDBpVr83f8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRHAc8tKCAJ 1sbq9FVvsNwbDVVX7zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OERBQzUvQzM5NTgyQzBBQkRBMTFFRkExQzE0RTc2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThEQUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dn Q2RiRzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/jDANBgkqhkiG9w0BAQsFAAOCAQEAFBIFkQbOMVpU6kXDgAoq aCfXSn2sIlJaLx0+SEH9f4pAiQVVqJRX0WMCoPOUqVzu8ztm82KL/xq9E8pkI9ai mNLzVuKGwqKa5PLT8LtUO3ycyESjJ3RR8A3eQZWbge7C3lZ9xXlOiy6YT4OOQ62p xXoNvLOHUNbnSzfv+b1OmFyj8In7BRTPn7cTU2HXvj0UZzIrgIB3v3ZCkNszLLsY XgckzLAEVUyCfO1qgO2FCQtxaIpTY54JF1Rxwbvg/CvkfzVo7VnmTSLTcyL+vLw5 LU+mkF2e1oncIGQTbLt/kLYnf71rfKAGk0mO5ZDub0tQelpzWC8Xkk5lmYpYOr4q PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:15 2025 by rpki-client