This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer File: dOW7m208x_jCmoO9yEkrllnw7hc.cer (raw, json) Hash identifier: hm0asW1j/mBPZJ+SqlOkP2IfyahItuKPnkB6a3L9//w= Subject key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F61 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 16:00:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 47.8.0.0/15 IP: 47.11.0.0/16 IP: 47.15.0.0/16 IP: 47.29.0.0 -- 47.31.255.255 IP: 47.247.0.0/16 IP: 130.26.0.0/16 IP: 132.154.0.0/16 IP: 136.232.0.0/15 IP: 137.97.0.0/16 IP: 139.167.0.0/16 IP: 152.56.0.0/14 IP: 157.32.0.0 -- 157.51.255.255 IP: 169.149.0.0/16 IP: 205.253.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28513 (0x6f61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 16:00:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:6b:9c:d4:c7:61:15:fe:70:01:0a:ca:e2: 0b:05:dc:7a:84:01:33:d7:60:70:e1:23:29:0f:fb: 6e:d3:7c:d6:9f:ff:dd:64:92:52:11:7e:ae:6b:e1: 3f:5d:70:f9:3a:fb:85:60:8a:52:84:f1:ce:db:d9: 43:e7:bc:99:5d:16:98:1f:5e:5e:36:d3:23:fe:37: fd:e7:76:d1:14:95:ca:87:eb:45:34:0d:3f:80:9a: ce:32:8d:23:49:2e:ea:8e:7d:56:52:7b:30:dd:a9: fa:4a:21:1d:5f:65:00:a7:c6:14:11:16:29:d7:f4: 50:eb:83:0a:0f:e4:d7:e5:a1:72:00:5b:f9:16:5f: e7:f7:34:ce:23:5c:72:42:66:ae:60:be:0e:2f:34: b3:f3:5d:20:47:95:2d:6f:7c:e5:0a:e1:c8:15:32: 17:5d:5e:5b:a0:cb:91:28:d6:62:d5:40:c8:6a:fd: dd:27:4d:db:36:5c:09:08:87:b3:70:48:e7:cc:0a: 63:d1:86:d1:56:14:a1:0b:fa:5a:83:b7:87:8b:ff: 28:3d:68:1b:e5:8a:9b:69:e0:dc:71:49:d7:29:0d: 6c:db:95:40:3c:cc:2e:5d:b5:a1:99:b5:56:37:d5: dc:7d:e4:31:34:af:ea:f5:50:46:25:69:04:d2:3b: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 47.8.0.0/15 47.11.0.0/16 47.15.0.0/16 47.29.0.0-47.31.255.255 47.247.0.0/16 130.26.0.0/16 132.154.0.0/16 136.232.0.0/15 137.97.0.0/16 139.167.0.0/16 152.56.0.0/14 157.32.0.0-157.51.255.255 169.149.0.0/16 205.253.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:ad:78:36:ab:ce:57:24:71:0c:e5:54:9f:72:be:17:ae:53: a9:2b:fc:63:c5:74:d3:7f:6c:a4:c9:03:96:93:af:c1:d3:91: 1f:b0:64:ac:b7:5d:16:85:65:e5:bb:f8:f3:40:5b:c6:72:a3: 08:6a:2f:b4:a7:6d:bf:a0:07:b2:d8:b1:ea:26:dc:6e:ed:22: 13:3d:1c:8c:0b:35:f2:84:d6:3b:7b:3d:9f:dd:fb:67:4b:9f: ae:fb:53:5f:bc:e8:4c:70:f7:ba:44:09:12:0a:6f:6f:dc:67: 81:04:01:a0:26:4d:49:48:7b:5b:a0:9f:74:89:c5:82:75:2d: 7c:96:81:ce:e8:13:ed:6f:ef:0c:2d:5f:e9:f0:4d:a4:96:c3: 59:57:7f:38:2c:0f:4a:ab:4a:fa:45:35:e5:d1:b9:75:3a:4c: c0:68:94:42:c8:f9:52:29:3c:36:97:72:89:a8:d5:02:1f:74: 2b:14:59:2b:58:38:cc:bb:92:b5:7c:4e:0e:47:29:50:18:b9: 26:c9:fc:57:30:69:5a:3f:bf:b5:bb:a1:e4:49:e8:49:b4:30: 06:56:40:69:6e:2c:76:d6:5a:3b:83:55:ae:d5:51:f8:5a:7f: 79:e6:96:7f:00:35:c7:f3:ef:4d:e3:5e:9f:96:4a:d9:6d:25: d9:fb:c5:0a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgICb2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTYwMDMzWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2MjBFMDExMC8GA1UEBRMoNzRFNUJCOUI2RDNDQzdGOEMyOUE4M0JE Qzg0OTJCOTY1OUYwRUUxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOZea5zUx2EV/nABCsriCwXceoQBM9dgcOEjKQ/7btN81p//3WSSUhF+rmvhP11w +Tr7hWCKUoTxztvZQ+e8mV0WmB9eXjbTI/43/ed20RSVyofrRTQNP4CazjKNI0ku 6o59VlJ7MN2p+kohHV9lAKfGFBEWKdf0UOuDCg/k1+WhcgBb+RZf5/c0ziNcckJm rmC+Di80s/NdIEeVLW985QrhyBUyF11eW6DLkSjWYtVAyGr93SdN2zZcCQiHs3BI 58wKY9GG0VYUoQv6WoO3h4v/KD1oG+WKm2ng3HFJ1ykNbNuVQDzMLl21oZm1VjfV 3H3kMTSv6vVQRiVpBNI7OUkCAwEAAaOCA0EwggM9MB0GA1UdDgQWBBR05bubbTzH +MKag73ISSuWWfDuFzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIwRTAvRDk2NEI0ODIzMTBFMTFFQTlDM0NFNzJGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYyMEUwL0Q5NjRCNDgyMzEwRTExRUE5QzNDRTcyRkM0RjlBRTAyL2RPVzdtMjA4 eF9qQ21vTzl5RWtybGxudzdoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBtBggrBgEFBQcBBwEB/wReMFww WgQCAAEwVAMDAS8IAwMALwsDAwAvDzAKAwMALx0DAwUvAAMDAC/3AwMAghoDAwCE mgMDAYjoAwMAiWEDAwCLpwMDApg4MAoDAwWdIAMDAp0wAwMAqZUDAwDN/TANBgkq hkiG9w0BAQsFAAOCAQEAkq14NqvOVyRxDOVUn3K+F65TqSv8Y8V0039spMkDlpOv wdORH7BkrLddFoVl5bv480BbxnKjCGovtKdtv6AHstix6ibcbu0iEz0cjAs18oTW O3s9n937Z0ufrvtTX7zoTHD3ukQJEgpvb9xngQQBoCZNSUh7W6CfdInFgnUtfJaB zugT7W/vDC1f6fBNpJbDWVd/OCwPSqtK+kU15dG5dTpMwGiUQsj5Uik8NpdyiajV Ah90KxRZK1g4zLuStXxODkcpUBi5Jsn8VzBpWj+/tbuh5EnoSbQwBlZAaW4sdtZa O4NVrtVR+Fp/eeaWfwA1x/PvTeNen5ZK2W0l2fvFCg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:14 2025 by rpki-client