This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer File: ixVECuImyZD8nlWRX-jJUJvLZnY.cer (raw, json) Hash identifier: d+kn4GNsinonaOKzevqd5Obhw087eTBHwxJP0l/o2hA= Subject key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F37 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft caRepository: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 16:44:20 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.188.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28471 (0x6f37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 1 16:44:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:d6:04:01:cb:70:bb:1e:9b:0b:00:47:82: 4c:3a:05:ad:1a:f8:dd:40:f9:78:53:70:e8:00:2d: 96:76:82:42:86:de:30:b3:a6:47:d1:82:f1:7c:b0: 56:b5:ad:43:bd:e7:40:7f:36:ae:a2:95:f4:54:27: d1:c5:60:ef:4e:63:90:3d:33:92:36:fc:1d:35:9d: e3:b6:a6:4a:0f:26:e9:71:f3:fe:b6:96:7a:96:21: 7c:c3:51:03:63:d8:e3:96:63:33:6f:69:5a:28:b0: fc:07:26:a0:b3:24:c1:1a:27:b1:e8:64:0b:36:45: f2:33:e2:56:90:07:3a:bd:9c:ad:e1:71:a9:29:53: b1:07:41:09:ee:9f:ce:6b:14:d3:c9:c3:ad:cc:97: c4:f4:a9:2e:19:f9:61:92:8a:70:6d:72:d1:27:f3: 16:15:6e:f6:50:2c:aa:3e:de:49:5b:a4:ca:e1:88: d2:be:15:59:eb:8e:02:fa:25:43:35:f3:39:e8:b8: cd:c1:6b:86:7f:7f:0e:e1:11:26:16:9e:00:74:55: 25:2a:0a:4f:6b:ce:dd:fa:1a:bf:61:0d:8f:42:6a: 8a:f7:14:57:03:6b:f6:90:dd:6b:62:4b:8a:13:7a: 05:2a:2b:80:58:98:10:24:ba:5b:f0:32:0f:52:cf: ab:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.188.0/23 Signature Algorithm: sha256WithRSAEncryption 99:8c:ee:7b:49:08:e0:fe:89:bd:c3:c7:76:71:e0:38:58:1c: e0:4e:10:64:22:5c:3a:d7:fd:da:09:20:54:a7:65:b5:c7:46: 3d:45:f6:b6:f4:31:75:a5:4e:f7:fc:41:d9:bb:34:75:28:ad: 8f:88:af:76:48:e0:d9:93:e9:f2:65:9b:b3:a5:57:32:8e:c1: e6:8a:7c:ee:43:dc:f2:e4:9a:56:c7:c1:f2:66:91:c9:2b:ec: 0d:ca:60:eb:7f:91:47:d9:eb:e6:65:19:00:60:c3:be:59:57: 41:a4:18:1c:8e:b8:e9:fe:b5:f6:e9:79:eb:42:d5:00:5f:8f: c7:d8:e1:36:72:59:8c:ce:30:b2:84:f9:e7:2d:7a:13:2d:dc: 7b:4b:0d:c2:17:ce:96:9f:92:04:3b:b6:ab:d4:56:b3:24:ae: 40:d0:4a:50:58:86:66:78:02:71:65:30:92:cb:b3:98:ea:05: 9c:a9:08:7d:86:13:43:76:c5:23:45:25:1b:8e:e3:13:bf:f8: 37:c9:e5:98:3a:78:e5:07:11:ff:6a:16:ea:c4:6a:8b:cb:5f: 00:d5:ed:ca:30:e3:e9:3f:23:48:1a:3a:99:e8:a0:a4:36:14: 91:fd:a8:ef:fb:f6:47:9e:ae:42:fe:c7:f9:de:af:ae:a8:be: 85:cb:4a:4e -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAxMTY0NDIwWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1RUE0NjExMC8GA1UEBRMoOEIxNTQ0MEFFMjI2Qzk5MEZDOUU1NTkx NUZFOEM5NTA5QkNCNjY3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALhK1gQBy3C7HpsLAEeCTDoFrRr43UD5eFNw6AAtlnaCQobeMLOmR9GC8XywVrWt Q73nQH82rqKV9FQn0cVg705jkD0zkjb8HTWd47amSg8m6XHz/raWepYhfMNRA2PY 45ZjM29pWiiw/AcmoLMkwRonsehkCzZF8jPiVpAHOr2creFxqSlTsQdBCe6fzmsU 08nDrcyXxPSpLhn5YZKKcG1y0SfzFhVu9lAsqj7eSVukyuGI0r4VWeuOAvolQzXz Oei4zcFrhn9/DuERJhaeAHRVJSoKT2vO3foav2ENj0JqivcUVwNr9pDda2JLihN6 BSorgFiYECS6W/AyD1LPq5ECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSLFUQK4ibJ kPyeVZFf6MlQm8tmdjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVBNDYvRDQzNzExMTI5QzExMTFFRjkyRkJBOTdDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVFQTQ2L0Q0MzcxMTEyOUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlt eVpEOG5sV1JYLWpKVUp2TFpuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/vDANBgkqhkiG9w0BAQsFAAOCAQEAmYzue0kI4P6JvcPHdnHg OFgc4E4QZCJcOtf92gkgVKdltcdGPUX2tvQxdaVO9/xB2bs0dSitj4ivdkjg2ZPp 8mWbs6VXMo7B5op87kPc8uSaVsfB8maRySvsDcpg63+RR9nr5mUZAGDDvllXQaQY HI646f619ul560LVAF+Px9jhNnJZjM4wsoT55y16Ey3ce0sNwhfOlp+SBDu2q9RW sySuQNBKUFiGZngCcWUwksuzmOoFnKkIfYYTQ3bFI0UlG47jE7/4N8nlmDp45QcR /2oW6sRqi8tfANXtyjDj6T8jSBo6meigpDYUkf2o7/v2R56uQv7H+d6vrqi+hctK Tg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:52:57 2025 by rpki-client