This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer File: TnWast4kVGn4MRuSc7VVOH51CpA.cer (raw, json) Hash identifier: sWBYCdhZd8EgMLdaqsFyrJqbR+Mf0rrB+vEYdbp8IXI= Subject key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FA6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 03:58:37 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.144.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28582 (0x6fa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 5 03:58:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:06:b1:d7:a7:2d:ba:a1:c1:84:3b:6f:22: 3d:79:ee:09:02:e6:90:ae:58:f6:7c:7d:a3:62:82: e6:23:1c:85:89:cc:bc:ac:ac:d0:8a:e8:90:90:be: ea:3b:84:48:1a:e8:be:c3:8a:92:e6:9d:a2:5e:37: a0:79:32:0b:0c:1f:b5:47:b6:2e:4a:1c:20:dd:6e: 26:22:22:03:6b:37:b7:b9:05:a5:50:bd:ac:8e:25: ad:b7:e5:ac:78:4d:d8:d2:76:31:b4:1e:44:1d:66: 80:0e:75:93:92:e2:5c:e0:a7:1f:7b:c0:ce:1c:4a: 9e:95:9f:48:ba:4c:d0:a0:ae:93:db:eb:89:21:b1: a9:06:1b:5b:6f:67:0b:2b:af:49:92:a4:99:e1:bc: d9:f3:8d:05:5b:cd:49:96:44:4d:51:be:aa:3a:5a: 08:a7:3c:2d:10:33:56:45:b8:97:95:99:28:86:a7: 88:98:0f:dd:27:88:83:ee:69:4a:51:aa:81:21:07: f2:dc:6f:f2:f8:c5:85:97:6c:ea:be:eb:2b:63:b9: f9:b9:bc:df:f4:f0:f6:14:be:c8:7a:d9:66:a4:ea: 82:ac:b7:8a:d3:a4:1c:cc:a0:ce:bb:62:38:6c:50: e0:78:b1:f9:dd:b2:e1:58:e9:f0:b3:a6:c1:bc:6b: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.144.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:7f:94:72:ab:9f:17:c3:83:9a:f1:1f:d9:a4:6c:d9:09:ff: 66:5d:57:19:c4:e8:3d:57:dd:20:91:ee:9e:50:66:23:31:c6: 1a:af:96:ed:6e:f4:09:2e:4e:07:bc:2b:4a:e8:09:1a:f9:50: f2:5e:fc:e4:33:6d:07:6e:f5:cf:a3:5b:9e:e0:e7:43:50:58: a0:26:f1:f4:ff:bb:50:ec:d2:a2:1d:b9:1d:92:33:58:f0:5d: 59:41:21:00:2f:04:e7:17:5d:42:80:9d:c5:02:b1:22:7b:84: 7d:df:67:2a:f0:1c:65:3a:0d:5d:2d:57:b5:3e:4e:f9:ab:aa: d3:d1:9d:0f:5c:10:62:76:e4:14:d6:e6:9c:94:ee:b7:3e:3b: 01:30:28:cb:83:6c:98:22:25:6b:41:ff:b7:95:b8:fd:f9:3c: 7b:d1:0b:15:2a:98:d1:01:1b:f4:0d:49:2e:b4:c2:21:44:b0: 3e:94:35:3c:25:47:4e:86:f6:06:7d:54:48:11:c6:6e:a6:1c: 24:7d:48:a0:11:4f:bd:0c:24:89:4e:48:57:57:89:eb:b0:c5: 30:a5:44:e6:fa:9e:17:c8:c9:4f:c0:86:2b:40:8d:3f:27:01: 68:7c:3d:60:2f:86:1c:bd:35:a0:32:3f:69:34:23:40:7d:b2: 31:e5:37:29 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA1MDM1ODM3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFERjIzMzExMC8GA1UEBRMoNEU3NTlBQjJERTI0NTQ2OUY4MzExQjky NzNCNTU1Mzg3RTc1MEE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJr2BrHXpy26ocGEO28iPXnuCQLmkK5Y9nx9o2KC5iMchYnMvKys0IrokJC+6juE SBrovsOKkuadol43oHkyCwwftUe2LkocIN1uJiIiA2s3t7kFpVC9rI4lrbflrHhN 2NJ2MbQeRB1mgA51k5LiXOCnH3vAzhxKnpWfSLpM0KCuk9vriSGxqQYbW29nCyuv SZKkmeG82fONBVvNSZZETVG+qjpaCKc8LRAzVkW4l5WZKIaniJgP3SeIg+5pSlGq gSEH8txv8vjFhZds6r7rK2O5+bm83/Tw9hS+yHrZZqTqgqy3itOkHMygzrtiOGxQ 4Hix+d2y4Vjp8LOmwbxr7fcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBROdZqy3iRU afgxG5JztVU4fnUKkDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYyMzMvMDhGMDUyNjBCMzc4MTFFRjg4MzIyQjBGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURGMjMzLzA4RjA1MjYwQjM3ODExRUY4ODMyMkIwRkM0RjlBRTAyL1RuV2FzdDRr VkduNE1SdVNjN1ZWT0g1MUNwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6kDANBgkqhkiG9w0BAQsFAAOCAQEAi3+UcqufF8ODmvEf2aRs 2Qn/Zl1XGcToPVfdIJHunlBmIzHGGq+W7W70CS5OB7wrSugJGvlQ8l785DNtB271 z6NbnuDnQ1BYoCbx9P+7UOzSoh25HZIzWPBdWUEhAC8E5xddQoCdxQKxInuEfd9n KvAcZToNXS1XtT5O+auq09GdD1wQYnbkFNbmnJTutz47ATAoy4NsmCIla0H/t5W4 /fk8e9ELFSqY0QEb9A1JLrTCIUSwPpQ1PCVHTob2Bn1USBHGbqYcJH1IoBFPvQwk iU5IV1eJ67DFMKVE5vqeF8jJT8CGK0CNPycBaHw9YC+GHL01oDI/aTQjQH2yMeU3 KQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:09 2025 by rpki-client