This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer (raw, json) Hash identifier: EGZ1A9yILwFOkpApA7xJI896icwXcPdyuKoa4wJ+zvc= Subject key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F86 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 00:55:23 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 22672 IP: 157.85.72.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28550 (0x6f86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 4 00:55:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:07:85:1b:f2:ba:ed:34:97:32:44:db:d7: 3c:6c:6c:82:27:68:37:bb:55:ef:00:94:f6:5f:be: bc:79:c8:0a:3d:27:52:b0:f8:99:0a:d1:5b:43:e2: 8a:00:df:ac:25:78:82:b6:78:4f:a2:d0:a6:50:91: e8:c6:cd:86:9a:61:8c:37:7a:3c:8e:fa:4e:e3:47: 71:ed:a5:26:a8:18:3e:49:d8:61:06:4a:69:aa:7e: 4e:fb:2f:d7:13:16:95:47:ab:58:a3:3b:67:b1:1a: b9:53:44:a3:c1:b0:33:2f:42:f5:fc:f8:a6:be:eb: 0a:7c:4c:a2:b2:4a:67:25:fe:cc:3a:88:18:63:ed: f9:60:6e:49:5a:7d:94:83:41:b3:11:48:8c:08:e6: ee:5c:cf:c4:27:89:ad:fb:da:4d:04:12:33:01:32: 63:87:95:d0:9e:b8:fb:c4:2f:16:5c:9d:0a:96:0a: 60:7e:26:05:af:55:07:ee:0c:87:7a:b8:d6:24:06: 0f:e0:4c:ec:53:a3:49:bf:94:f5:3b:05:e5:3d:de: 95:aa:b7:36:18:3a:d4:17:50:9b:51:1c:d3:1e:d1: d8:cd:57:c5:96:cd:b9:65:71:04:c8:23:aa:2a:f4: 9a:f5:da:e8:91:f3:2e:d5:3e:dc:ae:ab:6e:cb:84: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 22672 sbgp-ipAddrBlock: critical IPv4: 157.85.72.0/21 Signature Algorithm: sha256WithRSAEncryption 82:7f:86:8b:95:4b:f2:0c:c7:79:17:49:cc:6e:11:cb:6c:66: 2f:da:c9:39:ab:1f:a9:ab:aa:b0:8a:ea:b4:63:09:c7:26:95: fd:92:19:40:ce:33:7e:05:2c:a7:6b:ae:5b:04:99:b3:75:49: f7:ee:b7:df:87:87:68:6b:51:41:c1:3b:3b:cc:6c:19:4b:e3: 52:0a:7c:33:6f:51:d5:4b:c3:4f:87:92:3e:b4:a6:d4:13:1e: 7d:67:fa:a4:97:8e:3b:ce:70:83:d0:39:38:fe:ee:91:2a:e7: 17:80:ad:27:36:d8:ba:ac:35:93:81:06:14:1e:69:23:21:1e: 44:ed:fb:2e:af:f2:98:81:01:d1:43:5e:33:fb:80:1f:ab:e7: 4f:3f:dc:05:ae:d0:40:1f:c4:8c:ec:e6:e8:9d:84:d1:39:1c: d0:5e:dc:42:32:96:6a:49:c0:4a:11:de:d2:e0:d8:cf:68:d1: c5:ce:43:53:f8:8b:82:d0:34:97:8a:91:f9:cb:c1:05:45:1d: f6:9d:dc:d5:fd:44:a2:79:c6:d3:86:19:27:76:74:a0:d5:58: 19:8e:8a:90:f9:1a:2f:17:c0:f9:34:2f:00:58:be:61:94:27: a4:57:ae:43:fa:79:fb:1a:3a:95:8b:54:aa:e2:73:c0:b4:5e: 11:4d:68:17 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgICb4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA0MDA1NTIzWhcNMjYwNzMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFENzU3ODExMC8GA1UEBRMoOUZFMDBDMTlDRTBCOEY5NkVDRjg5QTM1 N0Y3RDFBRjU1OEY5NkZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK5xB4Ub8rrtNJcyRNvXPGxsgidoN7tV7wCU9l++vHnICj0nUrD4mQrRW0PiigDf rCV4grZ4T6LQplCR6MbNhpphjDd6PI76TuNHce2lJqgYPknYYQZKaap+Tvsv1xMW lUerWKM7Z7EauVNEo8GwMy9C9fz4pr7rCnxMorJKZyX+zDqIGGPt+WBuSVp9lINB sxFIjAjm7lzPxCeJrfvaTQQSMwEyY4eV0J64+8QvFlydCpYKYH4mBa9VB+4Mh3q4 1iQGD+BM7FOjSb+U9TsF5T3elaq3Nhg61BdQm1Ec0x7R2M1XxZbNuWVxBMgjqir0 mvXa6JHzLtU+3K6rbsuEDkUCAwEAAaOCAw4wggMKMB0GA1UdDgQWBBSf4AwZzguP luz4mjV/fRr1WPlv9TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc1NzgvNjcwMDU4QjRERkY4MTFFRDk1MTUzRDMxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ3NTc4LzY3MDA1OEI0REZGODExRUQ5NTE1M0QzMUM0RjlBRTAyL24tQU1HYzRM ajVicy1KbzFmMzBhOVZqNWJfVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJYkDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA51VSDANBgkqhkiG 9w0BAQsFAAOCAQEAgn+Gi5VL8gzHeRdJzG4Ry2xmL9rJOasfqauqsIrqtGMJxyaV /ZIZQM4zfgUsp2uuWwSZs3VJ9+6334eHaGtRQcE7O8xsGUvjUgp8M29R1UvDT4eS PrSm1BMefWf6pJeOO85wg9A5OP7ukSrnF4CtJzbYuqw1k4EGFB5pIyEeRO37Lq/y mIEB0UNeM/uAH6vnTz/cBa7QQB/EjOzm6J2E0Tkc0F7cQjKWaknAShHe0uDYz2jR xc5DU/iLgtA0l4qR+cvBBUUd9p3c1f1EonnG04YZJ3Z0oNVYGY6KkPkaLxfA+TQv AFi+YZQnpFeuQ/p5+xo6lYtUquJzwLReEU1oFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:39 2025 by rpki-client