This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer File: jwvqPZb8ji7R6MaDcEdpRWnu484.cer (raw, json) Hash identifier: ByUO7Eyd2nSpD4DDRVwL8AyF3ppCH29yab86vgvBr98= Subject key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EF2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft caRepository: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 16:49:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 206.131.192.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28402 (0x6ef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 26 16:49:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:82:8d:e0:a2:c8:d1:fb:0d:7c:28:0c:6b: d8:8c:31:cb:5f:ff:59:11:b4:95:3e:3a:22:19:f7: ad:19:a1:e0:f5:04:89:ba:1e:05:4f:d1:aa:44:2c: 1f:8a:08:30:e3:74:c5:cd:88:50:91:07:cf:61:f3: e2:a8:d8:7e:ee:d6:78:3c:0d:65:fe:14:92:c0:4d: 15:3a:bc:91:7f:5a:31:28:94:ca:0a:7c:cf:90:60: ad:01:d4:97:2b:14:ab:aa:74:01:a8:7b:d1:f2:6b: 72:6f:28:95:6b:71:d1:95:34:f4:fd:9d:e0:08:1d: 3b:56:f5:54:82:a5:4d:88:8f:ab:50:07:bd:da:63: 49:be:d9:ec:55:db:2a:75:2a:ac:f6:b6:2f:ec:46: 92:12:16:ea:59:b6:6f:e1:d7:24:60:18:3f:36:47: 2d:90:f8:ea:37:27:1b:df:7d:e3:21:76:40:19:03: 70:69:86:47:16:cf:36:95:b9:ad:0e:e9:f7:4b:73: 93:ad:6a:04:4e:80:5c:87:3c:ee:65:1e:fb:08:3b: 84:26:16:27:48:7a:1d:67:d8:b4:cd:a3:12:9a:78: cb:ee:5f:bd:88:6e:0d:87:a0:41:bf:1c:d7:81:22: ad:38:0e:57:f4:ad:7e:e7:26:f9:b9:f6:4f:a0:d4: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.131.192.0/20 Signature Algorithm: sha256WithRSAEncryption a8:2b:84:0e:84:ab:23:bf:d4:6a:fe:5a:79:c7:96:e3:0c:47: e9:06:30:2b:d6:62:c2:15:9c:ec:f6:c5:3a:91:3e:07:f8:56: 4b:19:cb:fc:56:24:f2:75:cd:1e:02:b5:31:ac:d5:07:33:8e: 9c:39:40:b6:d8:bc:3c:7c:b8:43:c6:ce:98:2e:e9:a6:96:19: 7e:bc:f7:80:72:0b:12:c8:b1:2f:49:7d:a5:52:b9:e6:f1:be: d3:76:50:9f:d2:a7:f7:c3:94:00:4b:e3:d1:d8:95:67:8c:ff: 58:0c:19:2a:36:b2:3c:19:9b:0c:54:a3:87:46:28:5d:69:d8: 83:da:10:1a:a5:6f:26:aa:73:36:51:f9:44:8e:e3:4e:e2:e9: 96:aa:d0:66:69:c4:66:4c:6e:58:fe:8d:6f:06:7f:42:91:3a: 1f:57:5c:49:24:49:37:4d:6b:41:e7:bf:00:a1:4d:f9:39:d8: 7a:77:b9:fb:9e:f5:22:04:63:e8:b4:46:bc:b6:83:45:6f:fc: 42:55:63:59:b1:cc:fe:ca:80:c1:7d:e5:3a:a0:17:36:50:8d: 79:e2:b7:93:d8:4a:e4:49:34:ef:c1:d7:45:04:cf:22:16:c5: 7b:a1:e2:ea:8e:52:a9:1c:2d:61:12:a8:7e:04:86:83:4d:47: be:3e:b6:a5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI2MTY0OTQ5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5REM3NDExMC8GA1UEBRMoOEYwQkVBM0Q5NkZDOEUyRUQxRThDNjgz NzA0NzY5NDU2OUVFRTNDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMo7go3gosjR+w18KAxr2Iwxy1//WRG0lT46Ihn3rRmh4PUEiboeBU/RqkQsH4oI MON0xc2IUJEHz2Hz4qjYfu7WeDwNZf4UksBNFTq8kX9aMSiUygp8z5BgrQHUlysU q6p0Aah70fJrcm8olWtx0ZU09P2d4AgdO1b1VIKlTYiPq1AHvdpjSb7Z7FXbKnUq rPa2L+xGkhIW6lm2b+HXJGAYPzZHLZD46jcnG9994yF2QBkDcGmGRxbPNpW5rQ7p 90tzk61qBE6AXIc87mUe+wg7hCYWJ0h6HWfYtM2jEpp4y+5fvYhuDYegQb8c14Ei rTgOV/Stfucm+bn2T6DUMQ0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSPC+o9lvyO LtHoxoNwR2lFae7jzjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvREEyMjQwRTY0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlEQzc0L0RBMjI0MEU2NDYyOTExRURBRTc4QjIzNUM0RjlBRTAyL2p3dnFQWmI4 amk3UjZNYURjRWRwUldudTQ4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBM6DwDANBgkqhkiG9w0BAQsFAAOCAQEAqCuEDoSrI7/Uav5aeceW 4wxH6QYwK9ZiwhWc7PbFOpE+B/hWSxnL/FYk8nXNHgK1MazVBzOOnDlAtti8PHy4 Q8bOmC7pppYZfrz3gHILEsixL0l9pVK55vG+03ZQn9Kn98OUAEvj0diVZ4z/WAwZ KjayPBmbDFSjh0YoXWnYg9oQGqVvJqpzNlH5RI7jTuLplqrQZmnEZkxuWP6NbwZ/ QpE6H1dcSSRJN01rQee/AKFN+TnYene5+571IgRj6LRGvLaDRW/8QlVjWbHM/sqA wX3lOqAXNlCNeeK3k9hK5Ek078HXRQTPIhbFe6Hi6o5SqRwtYRKofgSGg01Hvj62 pQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:53 2025 by rpki-client