This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer File: i_fikwz8buuRbnOQ-JPgEAupOzI.cer (raw, json) Hash identifier: ikHSNEYqymakr0w43R5pgNVvOND2vgh+MRIgpfFSqMY= Subject key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6D91 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft caRepository: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 18:08:32 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 134.122.128.0/17 IP: 137.220.128.0/17 IP: 143.92.32.0/19 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28049 (0x6d91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 5 18:08:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:4c:ed:a9:06:59:2f:90:93:b9:7a:48:82: f0:52:b1:80:12:cc:ee:4f:6d:55:7e:67:cd:e6:c8: 69:ea:de:30:45:1a:a3:94:31:e0:6e:6b:06:fd:23: 92:6a:8d:d3:61:10:33:6b:bd:e7:65:0a:dc:17:8c: 2b:10:cc:06:73:14:d9:22:94:d3:80:6f:6d:74:98: 1b:8d:3f:93:34:a7:15:a8:d0:b3:c6:12:36:96:92: a3:8f:55:0f:2d:0e:f6:be:bf:3f:8d:27:43:79:48: 95:a3:5d:4c:d0:16:98:78:9b:52:3e:d8:0c:ec:97: fe:de:7d:57:f0:05:8f:6f:c1:b1:7a:2b:33:a8:4a: 47:69:7d:ec:21:c7:65:e9:b8:6c:9e:29:2d:94:bb: f6:93:aa:89:02:77:a0:e2:69:99:b8:70:a6:77:06: cc:20:26:92:16:73:54:01:e3:05:89:de:32:22:67: 92:4b:bf:20:28:ef:dd:60:8b:4b:d9:59:50:b9:42: b9:ff:a2:aa:79:0f:84:a2:2a:f8:3e:23:7d:75:e1: d8:5d:69:29:59:3b:53:10:87:63:03:30:ac:f0:db: fe:e2:c9:3c:0f:29:a1:d3:66:bd:be:2e:97:32:4c: 3a:89:f4:5d:6a:e5:7e:fc:23:f6:78:b6:63:78:6f: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.122.128.0/17 137.220.128.0/17 143.92.32.0/19 Signature Algorithm: sha256WithRSAEncryption a5:09:d5:d4:98:a5:61:91:df:66:b0:d9:b8:56:d0:d9:7e:df: 91:d8:d3:eb:42:51:18:3c:21:36:a7:4e:18:4f:09:10:f7:1b: 3a:ce:c0:89:93:37:72:48:d8:3d:c7:ee:1d:e1:8e:5e:ad:fe: 7d:1c:1a:8a:c0:7a:c6:3b:70:f1:f4:40:4f:0b:7b:c3:e2:2e: 4e:64:0e:0f:95:05:f1:7e:f6:1d:24:a4:b1:d4:fa:c1:03:22: 42:f7:a8:5a:9f:cb:77:e5:e3:a5:40:fe:b9:22:63:6c:86:c5: 1f:aa:c6:40:db:97:e4:03:34:37:81:99:77:26:7d:eb:8a:d5: 9d:b5:f8:14:42:9a:23:9d:e3:b8:37:f9:61:fd:8b:cc:8e:21: 68:a2:76:02:4b:e5:f1:88:04:81:14:47:b3:b8:72:0e:33:f6: c4:0c:28:fa:d3:92:34:e3:08:0c:a3:f9:ae:da:9c:31:bd:9e: 9b:a4:c5:79:92:3f:d4:a3:82:f3:85:99:c2:ea:8c:e5:1c:69: 85:ca:32:9f:2f:f5:aa:75:e7:12:cb:91:72:38:92:06:8d:4c: 28:9f:cb:ae:b8:37:e4:ea:14:93:b0:f8:33:73:f4:d2:72:fe: 58:61:bf:ef:11:e7:dc:3c:76:5c:ca:08:c4:e0:f5:46:7d:4a: fb:5f:45:18 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICbZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA1MTgwODMyWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4QzY2MTExMC8GA1UEBRMoOEJGN0UyOTMwQ0ZDNkVFQjkxNkU3Mzkw Rjg5M0UwMTAwQkE5M0IzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALOTTO2pBlkvkJO5ekiC8FKxgBLM7k9tVX5nzebIaereMEUao5Qx4G5rBv0jkmqN 02EQM2u952UK3BeMKxDMBnMU2SKU04BvbXSYG40/kzSnFajQs8YSNpaSo49VDy0O 9r6/P40nQ3lIlaNdTNAWmHibUj7YDOyX/t59V/AFj2/BsXorM6hKR2l97CHHZem4 bJ4pLZS79pOqiQJ3oOJpmbhwpncGzCAmkhZzVAHjBYneMiJnkku/ICjv3WCLS9lZ ULlCuf+iqnkPhKIq+D4jfXXh2F1pKVk7UxCHYwMwrPDb/uLJPA8podNmvb4ulzJM Oon0XWrlfvwj9ni2Y3hv5r0CAwEAAaOCAv8wggL7MB0GA1UdDgQWBBSL9+KTDPxu 65Fuc5D4k+AQC6k7MjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDNjYxLzA0QUFCMjlFODM2RDExRUFCNEEyRDc2REM0RjlBRTAyL2lfZmlrd3o4 YnV1UmJuT1EtSlBnRUF1cE96SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEB4Z6gAMEB4ncgAMEBY9cIDANBgkqhkiG9w0BAQsFAAOCAQEApQnV 1JilYZHfZrDZuFbQ2X7fkdjT60JRGDwhNqdOGE8JEPcbOs7AiZM3ckjYPcfuHeGO Xq3+fRwaisB6xjtw8fRATwt7w+IuTmQOD5UF8X72HSSksdT6wQMiQveoWp/Ld+Xj pUD+uSJjbIbFH6rGQNuX5AM0N4GZdyZ964rVnbX4FEKaI53juDf5Yf2LzI4haKJ2 Akvl8YgEgRRHs7hyDjP2xAwo+tOSNOMIDKP5rtqcMb2em6TFeZI/1KOC84WZwuqM 5Rxphcoyny/1qnXnEsuRcjiSBo1MKJ/Lrrg35OoUk7D4M3P00nL+WGG/7xHn3Dx2 XMoIxOD1Rn1K+19FGA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:01:16 2025 by rpki-client