This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer File: WU96C6m9HBOGhHzoljlj_k5xY2w.cer (raw, json) Hash identifier: Cn4vdfUCBDnzWLyJ9nFnS8EY02TGvlfkIlPZet1oT1A= Subject key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DB4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 20:51:08 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 158.89.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28084 (0x6db4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 7 20:51:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:fa:da:f0:7d:73:dd:a8:24:23:a9:f9:27: 8c:eb:2b:98:cf:93:9c:be:5e:f6:9b:78:7f:17:5f: 73:3f:e5:6c:73:a2:71:58:5d:b4:94:21:57:d0:b7: 7a:29:f1:40:cb:00:e8:4d:51:be:6d:d6:62:74:51: 4e:38:b2:5e:4d:bc:d4:d5:91:3e:9f:50:67:1b:23: d4:53:81:92:c2:d2:63:4b:aa:ce:f8:69:05:05:89: c4:de:7c:ca:52:12:86:ed:0f:7d:f0:f8:5e:ca:84: 3c:bf:0d:b9:1b:cd:dd:fa:e8:15:27:95:09:be:48: 5c:9d:61:e4:91:88:fa:2a:d8:71:4b:b2:7e:51:e1: 46:be:b4:72:b1:6c:23:b9:d9:7e:63:f9:c0:86:5d: 6f:86:46:77:a5:c2:14:48:d6:14:8d:73:7f:f4:29: 10:a2:bd:bb:ca:0d:14:6b:a8:8a:0e:da:5d:e0:ae: f1:a7:c9:6e:27:e6:49:d4:f0:2c:56:ff:0a:7c:91: 2e:14:7d:67:b1:cf:ef:e2:db:1c:1d:ba:21:33:dd: 70:2f:57:9b:2f:09:3b:95:be:a1:c6:74:36:b5:cf: e4:49:cb:0f:b3:0f:0b:30:28:cb:26:39:fb:fd:8d: b7:2f:ea:07:04:56:90:8d:ed:9f:6e:db:33:d7:be: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:e0:5a:fd:41:fc:6e:e3:24:3c:0c:de:d0:58:ca:18:97:63: ad:22:cf:ad:f1:3a:4b:48:5b:87:bb:eb:60:bb:6f:c8:d5:7e: 12:9f:88:a2:1c:ed:d1:1b:11:eb:c9:cd:f3:46:88:06:80:13: 3c:09:45:2d:71:44:a9:23:a0:a4:a8:7d:37:18:d8:71:df:26: cf:f6:6a:f4:59:64:17:c6:7a:59:85:a7:00:85:31:b9:3a:aa: f2:f2:db:ca:02:d0:cb:c1:63:19:30:ae:3c:47:c5:92:9f:31: 62:21:87:dc:f5:d4:69:29:fd:0e:7d:a0:c0:a6:af:c5:7b:fd: f5:a6:e0:3d:68:2d:e4:0e:5f:c7:c5:e6:40:41:66:5e:ea:a6: ba:76:df:6a:aa:1c:8c:c6:8d:18:c7:06:79:19:af:ec:4e:0a: 41:6b:fc:8b:70:49:e6:3c:f1:8e:81:18:e3:24:3f:3f:4d:c3: 6d:7e:56:30:ef:d3:1d:fc:24:42:6c:10:2a:9f:e5:cf:19:88: 65:f5:18:42:80:e5:00:7a:35:3e:e7:4b:91:ba:4b:82:36:24: a2:c4:6f:7e:3c:c1:62:f4:0b:c7:f9:80:37:52:f8:98:85:cc: 50:08:0a:00:a2:d4:ba:6e:fe:7c:77:25:10:67:41:c2:bd:69: ff:17:d2:08 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICbbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA3MjA1MTA4WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGRkVEQjExMC8GA1UEBRMoNTk0RjdBMEJBOUJEMUMxMzg2ODQ3Q0U4 OTYzOTYzRkU0RTcxNjM2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMrs+trwfXPdqCQjqfknjOsrmM+TnL5e9pt4fxdfcz/lbHOicVhdtJQhV9C3einx QMsA6E1Rvm3WYnRRTjiyXk281NWRPp9QZxsj1FOBksLSY0uqzvhpBQWJxN58ylIS hu0PffD4XsqEPL8NuRvN3froFSeVCb5IXJ1h5JGI+irYcUuyflHhRr60crFsI7nZ fmP5wIZdb4ZGd6XCFEjWFI1zf/QpEKK9u8oNFGuoig7aXeCu8afJbifmSdTwLFb/ CnyRLhR9Z7HP7+LbHB26ITPdcC9Xmy8JO5W+ocZ0NrXP5EnLD7MPCzAoyyY5+/2N ty/qBwRWkI3tn27bM9e+iH8CAwEAAaOCAvIwggLuMB0GA1UdDgQWBBRZT3oLqb0c E4aEfOiWOWP+TnFjbDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkZFREIvMzRENUQ3RTY1NTAyMTFFRDk2NEI3QTRBQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZGRURCLzM0RDVEN0U2NTUwMjExRUQ5NjRCN0E0QUM0RjlBRTAyL1dVOTZDNm05 SEJPR2hIem9samxqX2s1eFkydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAJ5ZMA0GCSqGSIb3DQEBCwUAA4IBAQAc4Fr9Qfxu4yQ8DN7QWMoY l2OtIs+t8TpLSFuHu+tgu2/I1X4Sn4iiHO3RGxHryc3zRogGgBM8CUUtcUSpI6Ck qH03GNhx3ybP9mr0WWQXxnpZhacAhTG5Oqry8tvKAtDLwWMZMK48R8WSnzFiIYfc 9dRpKf0OfaDApq/Fe/31puA9aC3kDl/HxeZAQWZe6qa6dt9qqhyMxo0YxwZ5Ga/s TgpBa/yLcEnmPPGOgRjjJD8/TcNtflYw79Md/CRCbBAqn+XPGYhl9RhCgOUAejU+ 50uRukuCNiSixG9+PMFi9AvH+YA3UviYhcxQCAoAotS6bv58dyUQZ0HCvWn/F9II -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:58 2025 by rpki-client