This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.cer (raw, json) Hash identifier: GSFxaevKCJ5X/aZcmzIMM5J4Esn82ICSGzdwUK+IJYg= Subject key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F44 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 05:23:04 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.72.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28484 (0x6f44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 05:23:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:f0:5d:dd:cb:ec:a5:b3:68:a6:bd:88:44: d0:87:76:77:de:4b:e7:ab:63:e7:8a:59:67:e7:ca: 80:88:c5:83:f1:50:2c:33:bf:36:9c:2d:d0:54:f0: be:58:c3:c5:c6:6f:82:3f:bf:2a:f0:8a:71:53:3e: 20:b4:7e:ed:3b:1e:39:c6:58:d2:0e:f7:e9:2f:63: 8b:2c:69:95:20:37:b3:28:bc:49:98:1b:0a:ba:cb: 1b:01:0a:ad:b2:fc:ac:d5:83:cf:25:68:dc:b5:dc: f6:63:d6:06:9f:a5:37:2e:bb:b0:f4:5b:8b:50:db: 8f:5d:4f:7c:a4:ec:bb:8c:5c:8b:03:e6:85:40:0d: c3:b4:aa:d7:b7:a4:14:74:75:0b:64:39:59:eb:45: 95:cf:5c:97:21:f3:77:2b:0a:c5:92:8f:61:f3:04: e2:ad:99:d6:ae:6f:5f:0d:43:fa:cf:ea:53:18:5f: 8b:02:d8:0e:97:e8:37:f5:9a:fc:29:7c:c4:b5:ef: b2:84:58:83:1b:fe:02:f0:a0:b7:a9:20:41:96:59: 98:81:d3:be:05:00:aa:72:3d:68:99:f9:44:22:a6: ca:55:ec:60:ee:51:4a:db:d0:5f:62:c6:46:b8:00: 4f:18:4e:c4:ad:37:1a:4c:b0:ec:ab:a7:13:8c:27: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.72.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:de:ef:d7:d6:5a:85:27:25:83:2b:78:2a:41:54:3f:d8:06: af:12:4c:98:eb:60:25:aa:4a:a2:68:96:11:e1:41:ca:14:be: 4f:2b:a1:39:67:06:bd:de:f6:6a:14:96:93:84:eb:1e:63:91: ec:7e:ab:e4:ad:65:79:92:4f:5d:69:0a:7f:4d:ef:7b:ea:dd: 75:e3:3b:d0:32:0c:bb:bc:9e:be:54:cc:ac:cf:0c:2c:48:d5: 41:89:7e:65:ae:2c:7f:20:30:52:8a:16:32:2f:55:9d:1b:31: 95:fa:94:44:02:ab:7c:c3:91:96:74:42:2b:97:7e:64:44:54: f5:e3:99:91:38:53:b5:0f:f4:c0:b5:06:cd:a5:be:92:98:82: 7e:bf:2c:ad:27:bc:cc:4e:71:2a:24:50:be:3a:72:2c:7c:14: 97:f6:ca:44:ff:a1:6e:fc:2b:db:2f:81:63:f7:17:00:72:a1: 0c:c8:d6:5c:75:51:30:ff:2c:1f:99:10:e9:87:7f:97:cd:c0: a4:f3:ec:8b:bd:a2:55:f3:b4:27:53:9b:70:12:e5:c4:a4:10: ce:bb:51:bd:05:b9:ec:9a:d5:82:4c:34:cb:57:e1:74:93:04: 6c:e0:fe:f2:76:1c:da:1d:70:5b:27:01:12:96:36:d6:7a:41: 55:87:39:84 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMDUyMzA0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFENDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURC NUIwQUQ0M0QwNTAzNjJGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALjo8F3dy+yls2imvYhE0Id2d95L56tj54pZZ+fKgIjFg/FQLDO/Npwt0FTwvljD xcZvgj+/KvCKcVM+ILR+7TseOcZY0g736S9jiyxplSA3syi8SZgbCrrLGwEKrbL8 rNWDzyVo3LXc9mPWBp+lNy67sPRbi1Dbj11PfKTsu4xciwPmhUANw7Sq17ekFHR1 C2Q5WetFlc9clyHzdysKxZKPYfME4q2Z1q5vXw1D+s/qUxhfiwLYDpfoN/Wa/Cl8 xLXvsoRYgxv+AvCgt6kgQZZZmIHTvgUAqnI9aJn5RCKmylXsYO5RStvQX2LGRrgA TxhOxK03Gkyw7KunE4wnhlUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT+fMjRLIy5 QNBurttbCtQ9BQNi8TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQwNEYvRDVEMEZFQjRDQkY3MTFFRjg2OUM5MDRGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ0MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lN dVVEUWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKD6SDANBgkqhkiG9w0BAQsFAAOCAQEAP97v19ZahSclgyt4KkFU P9gGrxJMmOtgJapKomiWEeFByhS+TyuhOWcGvd72ahSWk4TrHmOR7H6r5K1leZJP XWkKf03ve+rddeM70DIMu7yevlTMrM8MLEjVQYl+Za4sfyAwUooWMi9VnRsxlfqU RAKrfMORlnRCK5d+ZERU9eOZkThTtQ/0wLUGzaW+kpiCfr8srSe8zE5xKiRQvjpy LHwUl/bKRP+hbvwr2y+BY/cXAHKhDMjWXHVRMP8sH5kQ6Yd/l83ApPPsi72iVfO0 J1ObcBLlxKQQzrtRvQW57JrVgkw0y1fhdJMEbOD+8nYc2h1wWycBEpY21npBVYc5 hA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:47 2025 by rpki-client