This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer (raw, json) Hash identifier: GfovQZehuSWe+mkbgk/mlLZS/BsKvxe9x+1NVmlXGVE= Subject key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DB8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 08 Nov 2025 13:36:14 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.40.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28088 (0x6db8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 8 13:36:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:58:87:ef:13:fd:f4:72:1c:6b:b7:0f:89: 1a:51:24:69:5e:a1:c4:8d:fc:4c:1f:5b:8e:fc:fa: 6e:da:1f:a2:de:31:58:ce:03:a5:12:d5:9c:d7:32: e5:23:92:d9:be:b4:1a:14:a4:bd:92:d4:74:a5:f5: 6b:c3:69:6f:56:a3:c5:5c:3a:91:b5:f8:c2:9b:ee: cf:04:f1:48:25:9a:8a:0f:7d:47:fb:f3:4c:3e:6e: 58:fd:22:34:dc:01:65:4c:35:f8:a4:67:e0:a2:8f: 1f:e6:2c:df:b2:9c:54:8e:05:be:53:70:f0:0a:5b: 9a:08:ea:50:e5:27:e7:a3:40:e9:c6:9e:b0:5f:93: a8:e4:01:fe:cb:dd:9e:09:ce:3c:cb:b9:96:4d:15: ec:ea:ff:6e:e5:35:d1:dd:43:e4:ba:93:9a:1a:93: 94:24:fe:ca:05:15:b4:f6:20:5e:c7:73:e3:22:b4: ed:e5:a9:40:79:fe:07:3d:64:73:d9:14:05:8f:74: 39:a9:f6:59:75:4a:9a:da:de:08:61:55:b7:16:80: 73:b4:c8:19:ab:1c:41:51:12:7f:b4:3c:69:df:a8: 61:56:af:1d:c1:f7:57:05:30:e3:35:a6:b5:26:14: b5:14:90:b6:52:04:94:c2:a3:9d:b4:7d:e4:21:7f: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.40.0/23 Signature Algorithm: sha256WithRSAEncryption b9:72:49:2b:d7:33:86:a6:d2:64:fc:51:d5:c6:df:76:be:f2: 96:b1:f4:9b:45:ec:cd:9e:3b:4a:51:2b:a6:ad:e7:75:8a:83: 3e:91:64:1b:32:aa:b4:db:4d:c4:ce:99:68:73:0d:e5:30:f0: 7a:86:9e:17:bf:48:34:d8:19:35:6f:c4:68:5c:89:d0:99:af: e0:87:4e:d3:0d:c1:73:6f:5c:9e:29:cf:7e:a4:50:16:ed:c2: 46:3a:cd:9f:c1:25:23:35:fa:33:db:65:37:4f:d9:d7:e3:6d: 86:71:cc:e6:16:a6:30:b9:8d:f1:8d:8d:1d:37:46:37:34:7e: 10:2f:4d:b6:27:25:25:c9:d4:da:68:d3:3e:df:e7:d3:d5:66: e3:3f:1e:ff:33:15:c5:5d:93:eb:90:96:07:1f:bb:1f:40:ab: 8c:80:79:c1:ad:8d:dd:99:01:5b:4c:50:90:19:10:20:e9:12: 17:b7:15:02:a0:60:66:9b:5d:a4:e4:29:bc:df:e0:7d:ca:17: 5b:f9:c6:9a:d4:68:38:44:3e:12:18:af:cd:f6:60:c9:36:55: cf:2b:6c:71:e8:43:53:da:71:4a:52:85:d7:14:2b:44:88:34: d7:38:ae:b3:5a:5e:41:93:be:55:73:e9:ec:8f:15:3c:6c:1f: 23:42:ca:39 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA4MTMzNjE0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIy ODk1Mjc2QTY0MDIzOUMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMANWIfvE/30chxrtw+JGlEkaV6hxI38TB9bjvz6btofot4xWM4DpRLVnNcy5SOS 2b60GhSkvZLUdKX1a8Npb1ajxVw6kbX4wpvuzwTxSCWaig99R/vzTD5uWP0iNNwB ZUw1+KRn4KKPH+Ys37KcVI4FvlNw8ApbmgjqUOUn56NA6caesF+TqOQB/svdngnO PMu5lk0V7Or/buU10d1D5LqTmhqTlCT+ygUVtPYgXsdz4yK07eWpQHn+Bz1kc9kU BY90Oan2WXVKmtreCGFVtxaAc7TIGascQVESf7Q8ad+oYVavHcH3VwUw4zWmtSYU tRSQtlIElMKjnbR95CF/TbMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRPRfpp2eX1 UITdySKJUnamQCOcHDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTA4MTgvNzUzQzMwMTg5MDlEMTFFRjk3MTdGNjUwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkwODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5s OVZDRTNja2lpVkoycGtBam5Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/KDANBgkqhkiG9w0BAQsFAAOCAQEAuXJJK9czhqbSZPxR1cbf dr7ylrH0m0XszZ47SlErpq3ndYqDPpFkGzKqtNtNxM6ZaHMN5TDweoaeF79INNgZ NW/EaFyJ0Jmv4IdO0w3Bc29cninPfqRQFu3CRjrNn8ElIzX6M9tlN0/Z1+NthnHM 5hamMLmN8Y2NHTdGNzR+EC9NticlJcnU2mjTPt/n09Vm4z8e/zMVxV2T65CWBx+7 H0CrjIB5wa2N3ZkBW0xQkBkQIOkSF7cVAqBgZptdpOQpvN/gfcoXW/nGmtRoOEQ+ EhivzfZgyTZVzytscehDU9pxSlKF1xQrRIg01zius1peQZO+VXPp7I8VPGwfI0LK OQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:41 2025 by rpki-client