This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer File: iTrFeQFBVhhq6vUDS6C0km-S43Q.cer (raw, json) Hash identifier: OwGDltaDzgazftDXJ68RYLUitcuUDHeKcBzDiuKrQ+w= Subject key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F56 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:35:53 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.162.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28502 (0x6f56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 13:35:53 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:b6:90:dd:ca:9a:1e:94:83:a8:3f:e4:3f: d4:4f:4f:02:8e:60:b4:2c:e0:6e:02:35:d3:66:39: 52:33:3b:b1:04:6d:c5:0b:3a:2a:3d:fc:46:f7:dd: 1e:cb:a6:f5:fc:a7:e1:01:b2:61:10:c6:58:6e:0d: 37:d7:42:b8:ce:cb:76:69:75:0b:56:00:0c:13:bb: 82:53:85:88:9d:f4:0d:b1:ac:ef:0c:eb:5e:d7:09: b5:c2:dd:fa:f7:9b:77:4f:b2:c0:71:89:d1:75:f0: d5:11:3b:6c:11:0b:45:65:01:9a:59:0b:25:c1:98: 2a:c6:1d:bc:00:34:c9:1c:dd:af:f8:93:68:51:8b: 81:29:f9:3a:cb:c0:52:7c:93:31:ce:a7:f4:62:c2: 80:3d:36:c6:b4:7a:ff:bf:a2:a3:3d:b8:55:dc:4b: 79:bf:29:22:3f:b1:4d:9d:29:55:d1:c0:db:6d:3e: c8:bd:9d:6f:c3:70:8c:8d:f0:bb:d7:72:40:11:cf: 1f:05:cb:82:1a:1e:28:bb:7e:68:9d:9f:bc:56:e9: 22:29:5e:1a:0c:7b:78:ff:f2:ea:f7:49:c7:a6:cd: 0f:68:e5:1d:c4:f3:2f:9e:5b:32:bf:ef:ea:20:ca: 52:8f:62:17:7b:2b:eb:bf:15:a9:b7:f0:c7:3d:18: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.162.0/23 Signature Algorithm: sha256WithRSAEncryption 11:bc:f8:68:c8:95:be:c4:56:26:df:9c:a4:44:f5:fb:52:08: 41:ad:71:19:5c:5b:1e:44:69:c2:6d:af:0a:2f:37:3e:f1:0e: eb:9b:3d:91:12:85:d1:2c:4c:26:65:50:b2:d2:e8:f8:40:c3: f9:bd:70:fb:65:16:c7:03:19:5d:3f:0c:34:19:97:aa:7d:1d: 4f:c1:18:97:15:b3:bc:f2:7f:4a:81:77:36:8d:39:dd:bd:5c: 6b:39:80:09:e7:6b:88:1d:ca:33:4c:55:69:b5:14:96:48:54: c7:23:58:43:da:02:92:83:62:42:07:db:50:3b:dd:43:c4:e0: f2:53:f8:b8:8a:b8:c0:57:a2:58:ec:f1:04:74:2f:21:cc:ab: 7d:e0:4c:6a:50:d1:49:ce:2f:bc:b7:2e:eb:2a:2a:68:dc:4f: a8:06:40:30:a6:4c:c3:50:bc:25:e6:28:ed:32:71:95:f8:aa: ba:1f:84:ea:55:b6:c4:84:88:d0:0e:56:3c:1f:87:98:1d:7a: 7f:fe:33:90:41:78:63:71:e9:f2:c9:14:6c:9c:f0:e5:05:e0: 15:81:41:61:11:e8:ba:9d:bc:d6:e5:1e:fe:c5:28:c5:02:38: 12:55:f5:a3:69:51:2b:e1:ab:21:a7:fe:63:46:d1:ce:36:61: 25:e5:eb:6d -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTMzNTUzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyRTNDNzExMC8GA1UEBRMoODkzQUM1NzkwMTQxNTYxODZBRUFGNTAz NEJBMEI0OTI2RjkyRTM3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANwTtpDdypoelIOoP+Q/1E9PAo5gtCzgbgI102Y5UjM7sQRtxQs6Kj38RvfdHsum 9fyn4QGyYRDGWG4NN9dCuM7Ldml1C1YADBO7glOFiJ30DbGs7wzrXtcJtcLd+veb d0+ywHGJ0XXw1RE7bBELRWUBmlkLJcGYKsYdvAA0yRzdr/iTaFGLgSn5OsvAUnyT Mc6n9GLCgD02xrR6/7+ioz24VdxLeb8pIj+xTZ0pVdHA220+yL2db8NwjI3wu9dy QBHPHwXLghoeKLt+aJ2fvFbpIileGgx7eP/y6vdJx6bND2jlHcTzL55bMr/v6iDK Uo9iF3sr678Vqbfwxz0YWEMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSJOsV5AUFW GGrq9QNLoLSSb5LjdDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkUzQzcvODY1ODg3QjZCMjY3MTFFRkE1NjVBODQ5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJFM0M3Lzg2NTg4N0I2QjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZC VmhocTZ2VURTNkMwa20tUzQzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6ojANBgkqhkiG9w0BAQsFAAOCAQEAEbz4aMiVvsRWJt+cpET1 +1IIQa1xGVxbHkRpwm2vCi83PvEO65s9kRKF0SxMJmVQstLo+EDD+b1w+2UWxwMZ XT8MNBmXqn0dT8EYlxWzvPJ/SoF3No053b1cazmACedriB3KM0xVabUUlkhUxyNY Q9oCkoNiQgfbUDvdQ8Tg8lP4uIq4wFeiWOzxBHQvIcyrfeBMalDRSc4vvLcu6yoq aNxPqAZAMKZMw1C8JeYo7TJxlfiquh+E6lW2xISI0A5WPB+HmB16f/4zkEF4Y3Hp 8skUbJzw5QXgFYFBYRHoup281uUe/sUoxQI4ElX1o2lRK+GrIaf+Y0bRzjZhJeXr bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:27 2025 by rpki-client