This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer File: fn-3i_rxIdy3dJPgd5raTNDVmBo.cer (raw, json) Hash identifier: cfoYFvECdm3p4zOfVgmzHpTRr2NCmBQ91q/ZDu0Nqdg= Subject key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DE6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 17:32:05 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 138.75.0.0/16 IP: 144.89.128.0/17 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28134 (0x6de6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 11 17:32:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:2b:38:a3:1f:c6:0b:30:b4:03:fa:1e:f1: eb:d3:e9:26:99:9c:de:27:5a:cb:c4:d4:c5:49:a5: 2a:6b:21:c5:d1:75:83:eb:b7:ef:21:4d:08:ae:ce: 1f:07:e4:4d:68:11:96:a3:56:2c:ca:80:78:bc:b9: c6:57:69:0b:8e:5c:47:b6:6a:d9:48:f4:26:27:78: d1:3b:9e:50:af:2c:a7:d9:f7:4f:a3:c5:af:bc:e7: c8:ba:13:5c:dc:8b:f0:ab:e3:74:d9:ca:32:ac:78: 93:e3:9d:db:44:6a:43:8d:0b:16:c6:9b:66:62:9a: ea:d9:f5:69:0f:1e:ef:02:a5:ef:08:54:ee:4d:8a: b4:0a:80:a7:48:d3:4a:73:ed:10:54:a4:c9:fa:d6: ee:f2:95:42:a6:8e:b8:4b:ef:02:26:e0:6f:e3:43: 18:c6:45:47:b1:cb:da:01:b7:ec:2d:1f:48:1c:c7: 7e:4d:d8:d0:76:d9:4a:29:10:0c:94:52:ee:7e:b3: dd:33:d9:6f:9a:99:6b:13:a3:25:57:3a:73:73:12: d6:5f:1a:ae:e5:04:04:16:ee:31:ea:2f:d7:64:b6: 67:64:6a:67:3e:3c:fc:92:5a:55:3b:ec:07:09:37: 81:2e:b9:dd:17:25:1e:56:4d:ee:dc:8f:dc:ea:bf: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.75.0.0/16 144.89.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9a:2e:02:55:71:ff:b4:ee:02:ff:c5:e8:a3:6b:e3:3f:9b:ed: 11:65:3d:4c:76:5a:87:e6:18:f6:02:4d:24:b4:9b:49:8a:61: 32:b8:14:19:ab:3a:5e:ad:1b:e3:73:bc:11:2a:b8:00:28:3a: 15:73:ef:6f:f0:a4:61:01:5e:2a:18:f9:5a:39:a1:6b:b2:cc: d8:c6:32:d0:16:8a:fe:fb:29:18:84:52:c2:96:91:bd:b4:64: 57:59:1e:d9:09:5c:39:17:cc:6f:5d:62:b6:90:e6:11:ba:9a: 82:77:5d:80:63:cc:ef:20:04:68:4f:1d:bc:23:ee:93:3a:fe: 3f:31:92:e3:6f:0b:90:11:55:3e:10:29:ba:1b:0f:bb:12:11: 79:97:b5:43:b0:26:23:4c:bf:d8:67:ca:50:80:f4:69:db:ea: 91:92:1d:b6:e5:7c:54:f1:e2:fa:b2:a5:6d:e7:ac:ff:68:81: bf:48:4f:19:a7:fc:e6:ee:1f:c2:27:17:bd:d2:0f:18:93:d6: f4:01:ba:fb:c5:f7:ad:ed:a7:d7:d7:4d:de:d3:7d:b7:78:11: ec:89:17:02:dc:9b:ac:20:44:dc:64:f8:00:93:8e:be:3d:2d: 9a:15:08:88:8f:6f:e5:93:dc:d0:9c:10:a2:7c:d8:3a:e0:b5: eb:b4:98:87 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICbeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTExMTczMjA1WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFERTdERTExMC8GA1UEBRMoN0U3RkI3OEJGQUYxMjFEQ0I3NzQ5M0Uw Nzc5QURBNENEMEQ1OTgxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMMtKzijH8YLMLQD+h7x69PpJpmc3iday8TUxUmlKmshxdF1g+u37yFNCK7OHwfk TWgRlqNWLMqAeLy5xldpC45cR7Zq2Uj0Jid40TueUK8sp9n3T6PFr7znyLoTXNyL 8KvjdNnKMqx4k+Od20RqQ40LFsabZmKa6tn1aQ8e7wKl7whU7k2KtAqAp0jTSnPt EFSkyfrW7vKVQqaOuEvvAibgb+NDGMZFR7HL2gG37C0fSBzHfk3Y0HbZSikQDJRS 7n6z3TPZb5qZaxOjJVc6c3MS1l8aruUEBBbuMeov12S2Z2RqZz48/JJaVTvsBwk3 gS653RclHlZN7tyP3Oq/g08CAwEAAaOCAvgwggL0MB0GA1UdDgQWBBR+f7eL+vEh 3Ld0k+B3mtpM0NWYGjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU3REUvQzMzMkFGQjYwNEUxMTFFOThFQTdEODcyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURFN0RFL0MzMzJBRkI2MDRFMTExRTk4RUE3RDg3MkM0RjlBRTAyL2ZuLTNpX3J4 SWR5M2RKUGdkNXJhVE5EVm1Cby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw EQQCAAEwCwMDAIpLAwQHkFmAMA0GCSqGSIb3DQEBCwUAA4IBAQCaLgJVcf+07gL/ xeija+M/m+0RZT1MdlqH5hj2Ak0ktJtJimEyuBQZqzperRvjc7wRKrgAKDoVc+9v 8KRhAV4qGPlaOaFrsszYxjLQFor++ykYhFLClpG9tGRXWR7ZCVw5F8xvXWK2kOYR upqCd12AY8zvIARoTx28I+6TOv4/MZLjbwuQEVU+ECm6Gw+7EhF5l7VDsCYjTL/Y Z8pQgPRp2+qRkh225XxU8eL6sqVt56z/aIG/SE8Zp/zm7h/CJxe90g8Yk9b0Abr7 xfet7afX103e0323eBHsiRcC3JusIETcZPgAk46+PS2aFQiIj2/lk9zQnBCifNg6 4LXrtJiH -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:17 2025 by rpki-client