This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer (raw, json) Hash identifier: VV+NNK/2sc4oOyHPl4W/S1NRin6NeVg3+WHT+NrLnU4= Subject key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7023 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 13 Dec 2025 14:45:17 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.156.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28707 (0x7023) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 13 14:45:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:95:49:2e:bc:e6:a2:b5:99:eb:c1:a1:2d: f8:19:fc:b6:99:8b:3b:4f:22:c1:db:ea:4c:82:5f: f3:d7:39:a1:7a:cb:4c:0a:f9:eb:1e:c2:fb:96:54: d9:82:6f:d4:08:3a:79:69:d5:03:04:50:b4:4e:5b: 93:ef:f9:fd:45:19:ec:b3:57:3a:db:85:e7:68:d7: e0:19:bc:6a:a6:9b:01:bb:83:15:b1:3a:c8:2d:dd: 59:5c:5c:57:ee:4b:e4:ff:c7:0c:16:2a:1b:02:54: 8f:61:a9:a6:0c:5c:fb:96:56:68:18:80:f3:b6:c1: 1e:93:fa:2a:c1:cd:47:ed:7e:86:ba:4b:3c:58:fd: 2c:d8:f5:25:96:6c:ff:d9:3d:f0:34:50:b6:05:f7: 5c:13:8c:ee:d1:99:92:0c:de:f0:cb:a3:41:39:9c: 48:1a:d8:94:51:fb:b9:9d:54:a5:8b:58:aa:86:e2: aa:53:bb:50:b0:67:42:b5:3c:57:9b:50:6a:3b:d6: 0b:15:3a:32:48:78:6e:04:2c:9f:2c:25:b0:38:44: 5f:51:57:b3:22:ae:be:73:13:d7:67:3d:cf:02:63: c0:5b:f4:8c:d9:ab:9b:bd:a3:64:83:43:8b:f2:d0: 78:34:9c:2d:25:5f:a0:42:d8:09:a9:46:48:fc:f1: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.156.0/23 Signature Algorithm: sha256WithRSAEncryption c5:7b:44:d9:81:dc:af:5a:44:64:0b:cf:5f:1b:a1:8e:99:2c: 82:17:45:db:00:cf:90:a9:d2:94:a1:47:cc:06:79:27:e6:23: 01:dc:80:f5:26:a1:47:af:c9:00:8d:19:10:aa:78:59:2e:c8: ef:f7:37:89:c1:bc:b4:86:bc:0e:71:82:1b:e7:e6:6d:4a:c4: 3a:0d:66:be:86:02:c8:c5:06:a7:40:0e:6d:4e:01:7d:f6:84: d0:ce:d5:f3:d4:0e:12:d5:df:a0:78:46:1d:58:f5:7e:91:bb: 3a:89:4f:8c:33:f7:38:e7:fb:8b:ec:d6:52:9c:fa:c9:52:e6: 42:fc:02:1b:2c:7a:f7:e4:e1:ea:76:82:a0:b0:f5:8c:0f:26: 5b:ec:eb:37:6a:59:b4:ee:8d:45:4a:c2:08:66:ed:ae:bb:50: e7:85:0d:5a:3e:dc:d1:5a:2a:4a:ba:7e:d5:6c:d0:4a:99:d5: f7:9a:fe:f3:67:a8:6a:6b:aa:ec:56:41:03:be:36:36:d2:e7: 1e:57:68:bd:fd:50:cf:32:e2:e9:57:f2:0a:ec:c2:52:ba:c0: 28:13:04:56:41:27:aa:cd:c9:b2:40:08:41:bf:38:bf:90:6c: ef:1e:20:a5:df:a7:e4:87:ca:3f:1a:4b:75:33:f2:90:77:34: bf:71:a2:be -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjEzMTQ0NTE3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFRTVFNTExMC8GA1UEBRMoNjkyMzZFNTk5NjMwMEEyRkQ3ODVFRjg1 NzgzQzVDMjlDNUI0RTg3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMfzlUkuvOaitZnrwaEt+Bn8tpmLO08iwdvqTIJf89c5oXrLTAr56x7C+5ZU2YJv 1Ag6eWnVAwRQtE5bk+/5/UUZ7LNXOtuF52jX4Bm8aqabAbuDFbE6yC3dWVxcV+5L 5P/HDBYqGwJUj2Gppgxc+5ZWaBiA87bBHpP6KsHNR+1+hrpLPFj9LNj1JZZs/9k9 8DRQtgX3XBOM7tGZkgze8MujQTmcSBrYlFH7uZ1UpYtYqobiqlO7ULBnQrU8V5tQ ajvWCxU6Mkh4bgQsnywlsDhEX1FXsyKuvnMT12c9zwJjwFv0jNmrm72jZINDi/LQ eDScLSVfoELYCalGSPzx70kCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRpI25ZljAK L9eF74V4PFwpxbTodDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUU1RTUvRjBFNzZFMTJBRkJGMTFFRkEyOEEzNjU0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVFNUU1L0YwRTc2RTEyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3 Q2lfWGhlLUZlRHhjS2NXMDZIUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/nDANBgkqhkiG9w0BAQsFAAOCAQEAxXtE2YHcr1pEZAvPXxuh jpksghdF2wDPkKnSlKFHzAZ5J+YjAdyA9SahR6/JAI0ZEKp4WS7I7/c3icG8tIa8 DnGCG+fmbUrEOg1mvoYCyMUGp0AObU4BffaE0M7V89QOEtXfoHhGHVj1fpG7OolP jDP3OOf7i+zWUpz6yVLmQvwCGyx69+Th6naCoLD1jA8mW+zrN2pZtO6NRUrCCGbt rrtQ54UNWj7c0VoqSrp+1WzQSpnV95r+82eoamuq7FZBA742NtLnHldovf1QzzLi 6VfyCuzCUrrAKBMEVkEnqs3JskAIQb84v5Bs7x4gpd+n5IfKPxpLdTPykHc0v3Gi vg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:47 2025 by rpki-client