This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer (raw, json) Hash identifier: twNc0xkjDEYEtSWI4CCzI5jOuJbNrzs/ezM6msVc4tA= Subject key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6ECF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft caRepository: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 04:02:14 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.82.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28367 (0x6ecf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 25 04:02:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:e4:39:53:c4:80:f9:5b:3c:ad:47:ab:47: 47:97:4d:80:f2:3c:98:dd:a8:82:ab:48:c9:fb:f8: 6a:a6:da:14:e0:8c:1f:05:a5:69:c0:a3:24:66:de: cc:44:5d:35:23:e6:11:72:96:3e:78:f2:97:ec:c2: 2f:56:63:dc:4c:d8:29:cf:21:e9:20:c4:c4:6f:8c: 97:55:f5:ea:ed:37:9c:84:fc:74:aa:d0:81:c2:87: 1c:4d:92:16:1f:3e:1f:27:92:1b:07:47:55:87:b4: 64:4f:2c:0d:8a:c2:ed:a4:36:27:e6:e5:87:1a:11: 63:4a:74:5a:1c:6a:fc:02:05:39:e1:a0:d2:1d:66: de:4a:1f:c9:3f:00:4f:a8:fb:25:78:fd:a4:fb:08: 18:ca:14:5f:17:1f:1c:6e:d6:3d:ad:2a:3e:18:58: 8b:d4:aa:a2:39:a2:a9:83:61:48:66:76:bb:53:c3: 6d:14:1b:b0:29:d3:81:34:ae:a9:05:93:76:11:b8: 09:42:a1:7c:ed:af:e3:47:8c:52:7f:ef:3f:90:40: e1:cb:a1:1e:69:36:29:92:dc:9d:69:a3:a8:34:b8: b3:84:65:4c:3e:c3:92:17:d0:46:50:50:72:f3:6c: 6e:03:b3:7e:93:11:f3:dd:ce:9f:b8:11:c4:67:bd: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.82.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:40:95:d2:14:a4:f7:f7:e8:54:c4:2e:49:74:30:d4:62:b2: 57:5c:67:da:2d:16:0e:fc:c1:87:7b:bb:2f:6a:6d:dc:a0:37: 6c:12:9b:d6:a5:de:19:f2:2e:3d:12:3d:62:20:12:10:f5:c3: c9:89:d7:7d:c4:e4:e1:54:12:d6:b5:10:93:8c:e8:28:92:fe: d0:81:f4:c4:49:c2:7f:7b:d5:f3:ed:68:90:4d:01:c7:1b:9e: 11:e4:72:89:eb:84:9d:1a:0d:52:30:00:69:83:1a:d1:28:3a: d8:3f:8f:4e:8f:dc:dc:26:04:b5:90:b8:fd:3d:ff:f8:35:9b: 91:4e:29:23:c1:d8:7b:5a:2a:c1:9f:5b:37:ae:bd:07:59:1d: cb:46:09:8b:34:f9:32:b9:47:c0:d1:9c:15:f0:e1:3b:62:e1: 1e:81:46:1c:47:9d:31:51:6e:f9:ac:36:02:d7:eb:29:f6:c5: b3:f6:1a:8a:60:6e:2b:20:66:f0:3a:0c:83:5d:a3:7f:54:28: b3:1e:69:b9:5c:e7:42:46:0b:11:2f:73:af:26:5d:ab:d7:f9: e3:a8:d0:6e:b3:28:ce:7c:85:8e:d6:94:67:50:6c:7e:49:70: cd:2a:01:32:6e:9f:ee:ff:1a:98:97:40:69:3c:e9:6b:12:57: 53:ae:da:2e -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI1MDQwMjE0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0RTBGRTExMC8GA1UEBRMoOTY0RDA4NzI3REFFREFDNzQwMzdBQjlD NDNBNTA4QkFEQkNGREFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANYB5DlTxID5WzytR6tHR5dNgPI8mN2ogqtIyfv4aqbaFOCMHwWlacCjJGbezERd NSPmEXKWPnjyl+zCL1Zj3EzYKc8h6SDExG+Ml1X16u03nIT8dKrQgcKHHE2SFh8+ HyeSGwdHVYe0ZE8sDYrC7aQ2J+blhxoRY0p0Whxq/AIFOeGg0h1m3kofyT8AT6j7 JXj9pPsIGMoUXxcfHG7WPa0qPhhYi9SqojmiqYNhSGZ2u1PDbRQbsCnTgTSuqQWT dhG4CUKhfO2v40eMUn/vP5BA4cuhHmk2KZLcnWmjqDS4s4RlTD7DkhfQRlBQcvNs bgOzfpMR893On7gRxGe9GOECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSWTQhyfa7a x0A3q5xDpQi628/a/TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwRkUvMkYyQjZGRTJBQkNBMTFFRkE5OTREMTI5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFMEZFLzJGMkI2RkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL2xrMEljbjJ1 MnNkQU42dWNRNlVJdXR2UDJ2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6UjANBgkqhkiG9w0BAQsFAAOCAQEATUCV0hSk9/foVMQuSXQw 1GKyV1xn2i0WDvzBh3u7L2pt3KA3bBKb1qXeGfIuPRI9YiASEPXDyYnXfcTk4VQS 1rUQk4zoKJL+0IH0xEnCf3vV8+1okE0BxxueEeRyieuEnRoNUjAAaYMa0Sg62D+P To/c3CYEtZC4/T3/+DWbkU4pI8HYe1oqwZ9bN669B1kdy0YJizT5MrlHwNGcFfDh O2LhHoFGHEedMVFu+aw2AtfrKfbFs/YaimBuKyBm8DoMg12jf1Qosx5puVznQkYL ES9zryZdq9f546jQbrMoznyFjtaUZ1BsfklwzSoBMm6f7v8amJdAaTzpaxJXU67a Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:53 2025 by rpki-client