This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer File: RyCit4x4I5km_e5zRKNoDaDYBx0.cer (raw, json) Hash identifier: rQJXKWQmYmZM9yO5I08UYpFuclsKjFdA7cefeV97jLw= Subject key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F84 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 22:28:09 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.154.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28548 (0x6f84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 3 22:28:09 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:50:f7:e0:88:c0:c9:5b:28:6a:35:45:69: b8:07:1d:99:1b:ab:15:46:ce:e4:af:00:6f:70:b9: d7:ce:40:62:1a:69:3d:79:6d:95:7b:b9:10:89:1e: be:65:08:a5:0a:73:b7:e7:84:bb:d2:de:4b:6f:0e: f2:bb:37:99:ab:52:e8:07:b5:f2:20:a8:dc:f5:5b: df:e4:2a:b5:94:58:0d:70:09:d0:f3:dd:08:f5:ae: 63:57:f2:62:af:7e:44:c3:05:89:66:d2:d5:c7:53: 9b:46:18:db:43:c4:a1:01:d0:db:29:6d:05:b5:18: 02:5f:16:24:07:c2:15:7d:88:ba:df:f0:3d:a7:b5: d0:68:0a:2e:59:86:6c:ad:e5:7f:6f:1e:ee:e6:ab: f6:4a:0c:95:56:1c:80:b9:7a:07:af:7d:18:70:69: 4e:ee:ac:68:13:7f:3f:d9:c2:d8:e9:0a:3f:f6:14: be:ca:d1:37:fb:94:3c:4e:8a:7e:56:f5:3a:0f:68: 01:a9:1c:4c:e3:c5:50:72:96:ff:0f:ff:f4:77:68: 5e:cd:32:98:6a:41:1a:de:99:34:a0:62:95:f0:4e: 7d:66:85:85:ee:1d:7f:c5:e2:78:12:86:f7:34:8d: 6b:98:74:54:93:7f:0c:1b:12:c2:89:52:cd:65:a4: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.154.0/23 Signature Algorithm: sha256WithRSAEncryption 28:0f:d4:c1:ad:e4:8c:3d:96:df:34:1c:4c:92:2c:de:eb:cd: 1c:01:47:e8:c6:e1:ee:95:0f:ac:c2:00:23:0f:7f:0f:4c:d2: 20:c6:0d:e2:e4:61:54:5a:5c:79:11:32:d7:4f:f6:b8:c1:89: 3e:8b:41:14:a8:72:b2:58:15:2e:71:72:d7:03:3a:68:4c:cb: 88:f0:16:d2:0e:9b:de:93:04:85:26:c6:6d:25:0d:b4:f9:42: 72:12:77:c5:8a:16:52:7e:46:33:8c:22:fc:c1:c3:fd:dd:4a: 93:1e:ad:94:4e:ca:0b:9c:84:0a:cc:a7:5b:f2:58:46:dc:56: 22:1e:87:cc:d4:f2:43:32:74:0e:10:c3:78:e3:1b:12:cc:7f: a1:c1:c6:e6:5b:70:3d:00:b5:ab:6e:19:ac:16:e6:08:37:56: c5:cb:60:31:16:5f:49:1a:28:e9:e9:55:40:da:7c:9b:81:99: 54:d2:1d:55:70:cc:6c:ad:7a:cc:9b:03:d5:a0:86:1b:17:b3: 77:d6:37:ed:7a:a7:49:22:6b:e0:9c:09:cb:aa:5f:8a:13:c1: bf:ab:38:2e:8e:1c:ed:f0:d9:5d:3f:8a:b3:5e:23:ae:dd:94: dd:83:83:f1:44:e2:93:f0:2a:a0:50:6d:65:2c:d2:a0:94:8a: dc:9a:4a:0c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAzMjIyODA5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5NzJERjExMC8GA1UEBRMoNDcyMEEyQjc4Qzc4MjM5OTI2RkRFRTcz NDRBMzY4MERBMEQ4MDcxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOPZUPfgiMDJWyhqNUVpuAcdmRurFUbO5K8Ab3C5185AYhppPXltlXu5EIkevmUI pQpzt+eEu9LeS28O8rs3matS6Ae18iCo3PVb3+QqtZRYDXAJ0PPdCPWuY1fyYq9+ RMMFiWbS1cdTm0YY20PEoQHQ2yltBbUYAl8WJAfCFX2Iut/wPae10GgKLlmGbK3l f28e7uar9koMlVYcgLl6B699GHBpTu6saBN/P9nC2OkKP/YUvsrRN/uUPE6Kflb1 Og9oAakcTOPFUHKW/w//9HdoXs0ymGpBGt6ZNKBilfBOfWaFhe4df8XieBKG9zSN a5h0VJN/DBsSwolSzWWknnECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRHIKK3jHgj mSb97nNEo2gNoNgHHTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyREYvMjdFM0VEQTQ5ODMzMTFFRjgzMTg5QTU3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk3MkRGLzI3RTNFREE0OTgzMzExRUY4MzE4OUE1N0M0RjlBRTAyL1J5Q2l0NHg0 STVrbV9lNXpSS05vRGFEWUJ4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/mjANBgkqhkiG9w0BAQsFAAOCAQEAKA/Uwa3kjD2W3zQcTJIs 3uvNHAFH6Mbh7pUPrMIAIw9/D0zSIMYN4uRhVFpceREy10/2uMGJPotBFKhyslgV LnFy1wM6aEzLiPAW0g6b3pMEhSbGbSUNtPlCchJ3xYoWUn5GM4wi/MHD/d1Kkx6t lE7KC5yECsynW/JYRtxWIh6HzNTyQzJ0DhDDeOMbEsx/ocHG5ltwPQC1q24ZrBbm CDdWxctgMRZfSRoo6elVQNp8m4GZVNIdVXDMbK16zJsD1aCGGxezd9Y37XqnSSJr 4JwJy6pfihPBv6s4Lo4c7fDZXT+Ks14jrt2U3YOD8UTik/AqoFBtZSzSoJSK3JpK DA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:30 2025 by rpki-client