This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer File: fHyggZUNrvx8VLjERpi0jo18abg.cer (raw, json) Hash identifier: FtuUZmmGIsXJyPre/LeFzNS4mWs8rEhNoj0df2OG94w= Subject key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EE9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 13:12:45 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 64.45.0.0/18 IP: 129.126.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28393 (0x6ee9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 26 13:12:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:82:cc:8a:29:ce:26:54:bd:53:5e:6d:79: 2c:37:d1:ff:fd:cc:f5:90:15:fe:a7:dc:fb:84:a1: 5f:a5:da:a3:3e:a9:5e:2a:57:0f:5e:6f:d8:fe:85: 0c:a7:6a:5c:07:08:56:c3:3f:9b:9d:f8:97:f6:75: a9:84:62:a0:d6:86:36:37:49:53:08:81:92:8f:65: b4:90:61:25:8f:77:92:ff:30:f5:f8:9d:4e:79:fd: 4b:24:57:f8:47:9e:b5:0c:be:9c:d3:f1:3b:3a:aa: 55:95:13:ea:e3:71:ce:73:6e:22:bb:c2:35:2c:6b: 1a:01:55:63:41:31:88:a4:1d:17:63:3e:e6:2e:c3: 6b:51:05:be:38:95:98:6f:a1:6a:3b:f7:b0:33:01: da:26:c2:b5:12:a7:5f:9c:d3:ef:30:bb:10:0c:44: b0:35:8c:fc:fa:42:5c:da:fe:6f:c1:b0:4e:46:5b: 72:b6:0c:20:c6:50:15:a6:3c:12:7b:d2:9d:1e:92: d2:75:5b:ea:7f:b5:d6:a9:fc:e4:8c:bf:79:c2:8b: 77:b3:e7:e5:0f:9c:e3:37:ae:78:54:08:10:b6:00: d2:a5:3c:4e:70:e6:ea:0e:02:f0:a4:5a:0d:49:38: 38:66:dc:a8:9b:4a:b0:e4:f6:94:8d:0e:99:38:77: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.45.0.0/18 129.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 91:f8:23:88:40:fe:d9:9e:2a:ba:d1:a2:80:d5:b8:f8:04:de: 05:0f:01:5c:7f:9c:da:4b:0a:cc:a7:2a:56:ef:ce:bc:af:d3: 99:c0:8d:20:e3:7f:fe:58:8a:57:6a:da:eb:7b:2d:f1:1d:80: 52:ff:3f:e3:2f:0a:c0:ac:e7:46:3e:33:d5:77:1b:5d:57:c5: 44:8d:03:ed:c5:d1:13:e8:12:1d:e6:e6:bc:e5:62:e6:e9:69: 8a:31:6b:2d:41:93:f4:b6:f6:a3:0f:c6:69:bb:3a:8e:be:4f: f1:02:49:1f:25:9b:de:34:e3:e9:26:8c:c7:1a:6d:1b:f2:c7: 5c:c1:be:80:04:d4:05:52:39:72:91:d6:ed:b5:51:a4:03:c8: e1:3c:81:37:ec:62:28:a0:ca:55:e9:15:27:f6:12:78:48:ea: 55:c1:04:cc:25:bd:e1:00:f9:1a:b5:be:40:f9:82:bb:9a:41: dc:81:40:39:ce:3f:1e:29:2c:79:f1:a4:69:83:40:30:c3:6f: 53:a8:ee:2d:6c:cb:88:6f:3d:16:85:16:f8:b4:a5:c8:32:fd: 43:2c:03:a9:d6:c5:39:7b:8f:18:14:92:48:81:98:1b:d1:a7: bb:cb:d1:0e:c3:b5:30:69:ba:7c:f1:ad:70:70:2a:19:99:df: 4b:48:17:72 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICbukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI2MTMxMjQ1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzNkRENjExMC8GA1UEBRMoN0M3Q0EwODE5NTBEQUVGQzdDNTRCOEM0 NDY5OEI0OEU4RDdDNjlCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANC9gsyKKc4mVL1TXm15LDfR//3M9ZAV/qfc+4ShX6Xaoz6pXipXD15v2P6FDKdq XAcIVsM/m534l/Z1qYRioNaGNjdJUwiBko9ltJBhJY93kv8w9fidTnn9SyRX+Eee tQy+nNPxOzqqVZUT6uNxznNuIrvCNSxrGgFVY0ExiKQdF2M+5i7Da1EFvjiVmG+h ajv3sDMB2ibCtRKnX5zT7zC7EAxEsDWM/PpCXNr+b8GwTkZbcrYMIMZQFaY8EnvS nR6S0nVb6n+11qn85Iy/ecKLd7Pn5Q+c4zeueFQIELYA0qU8TnDm6g4C8KRaDUk4 OGbcqJtKsOT2lI0OmTh3AlsCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBR8fKCBlQ2u /HxUuMRGmLSOjXxpuDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZERDYvRDM2MkExQ0EzQjM3MTFFOUEwMzhBQjJBQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM2REQ2L0QzNjJBMUNBM0IzNzExRTlBMDM4QUIyQUM0RjlBRTAyL2ZIeWdnWlVO cnZ4OFZMakVScGkwam8xOGFiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw EQQCAAEwCwMEBkAtAAMDAIF+MA0GCSqGSIb3DQEBCwUAA4IBAQCR+COIQP7Zniq6 0aKA1bj4BN4FDwFcf5zaSwrMpypW7868r9OZwI0g43/+WIpXatrrey3xHYBS/z/j LwrArOdGPjPVdxtdV8VEjQPtxdET6BId5ua85WLm6WmKMWstQZP0tvajD8ZpuzqO vk/xAkkfJZveNOPpJozHGm0b8sdcwb6ABNQFUjlykdbttVGkA8jhPIE37GIooMpV 6RUn9hJ4SOpVwQTMJb3hAPkatb5A+YK7mkHcgUA5zj8eKSx58aRpg0Aww29TqO4t bMuIbz0WhRb4tKXIMv1DLAOp1sU5e48YFJJIgZgb0ae7y9EOw7Uwabp88a1wcCoZ md9LSBdy -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:15 2025 by rpki-client