This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer (raw, json) Hash identifier: 3S5hp7b6FF3WpZT8F8wEj9uLmsPk/3XxetDuREn5G4U= Subject key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F19 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 29 Nov 2025 15:19:53 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.187.190.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28441 (0x6f19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 29 15:19:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:bf:2d:87:0b:a9:28:39:75:e4:6b:f3:98: 1d:82:c2:a1:c7:80:28:9e:3b:83:b0:da:f4:0a:3a: 94:c5:37:d1:cf:c1:cb:5c:74:c3:43:9e:7a:43:74: f9:88:12:bb:72:75:c3:bd:6f:ef:f5:8c:af:62:bb: 21:7c:cb:82:88:f0:2a:8b:07:f4:19:43:63:25:7c: b9:73:41:dd:3a:e3:da:a5:77:51:da:dc:80:17:ec: 93:8f:04:9c:32:04:37:2c:0c:54:83:73:4a:4d:3a: d9:ed:8c:87:9c:4e:3b:6f:a3:ae:dc:d6:79:03:31: eb:d9:e3:59:a2:75:28:97:cc:cc:c8:fb:3c:f2:37: 71:a3:bc:39:20:97:55:07:71:6f:f9:fb:20:7d:a2: dd:ea:15:fb:6d:12:c8:de:8a:ef:22:6c:f8:10:eb: 72:ac:8c:aa:9d:87:5b:40:12:14:e7:fa:dd:49:65: fc:c0:6b:a7:9d:ce:7b:4b:1a:3c:fe:78:c8:72:61: 1b:ff:64:a6:b8:54:d7:0d:e0:ae:30:42:48:3a:37: 4a:42:9a:8b:a2:d5:da:ec:99:2e:77:27:6a:76:21: af:0b:52:65:4c:da:d4:ff:6b:2d:f4:23:93:e8:f6: cb:bc:00:c5:a0:6e:56:00:f0:b4:c9:d2:5c:b7:d4: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.190.0/23 Signature Algorithm: sha256WithRSAEncryption b1:fe:db:bf:49:32:14:56:b9:78:d3:5b:ae:53:c3:0d:d2:3a: 47:07:d1:83:74:a5:f8:8e:f9:b4:36:ee:2a:18:55:35:8d:25: 47:c3:b6:fd:4e:3c:fe:f6:ff:90:fe:ea:94:6e:0e:ac:59:ab: eb:d6:15:ba:37:39:ac:cf:5c:53:54:60:98:a0:1e:62:a0:31: 6b:52:9c:3b:f3:24:63:df:0a:a0:fa:95:35:06:75:e2:e9:c8: b5:22:89:8a:18:26:df:3d:df:22:af:e1:c1:86:69:8b:28:e5: 01:48:59:50:79:14:70:06:ad:2c:e5:16:e9:8a:c9:89:40:c5: db:1a:67:85:30:43:af:24:dc:01:cb:06:a7:05:54:59:ce:06: 2a:5c:c1:67:07:78:a3:1b:99:ed:e6:ca:81:74:ac:3a:e0:c5: 32:ff:ae:42:4f:8d:8c:d9:92:f6:4f:f1:ee:fd:26:9f:2e:47: aa:78:a3:34:3d:f8:c0:30:12:15:2b:a4:97:b0:e2:d7:77:aa: 0c:66:5d:74:6f:49:82:05:c2:ff:61:de:91:a0:6a:1e:c1:cd: 90:0d:10:f0:a1:e4:c0:8b:0a:1e:12:20:08:b4:c7:50:3a:e8: 76:b8:60:9a:93:0a:27:43:f6:24:97:ad:1b:54:01:3c:5e:db: 26:3f:d8:4d -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI5MTUxOTUzWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFNjNFNzExMC8GA1UEBRMoQTU5RjdFRTJGQTI3NTkzN0YzRTFDMkRC QTVCQjhGQkY2M0QzN0MzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALVgvy2HC6koOXXka/OYHYLCoceAKJ47g7Da9Ao6lMU30c/By1x0w0OeekN0+YgS u3J1w71v7/WMr2K7IXzLgojwKosH9BlDYyV8uXNB3Trj2qV3UdrcgBfsk48EnDIE NywMVINzSk062e2Mh5xOO2+jrtzWeQMx69njWaJ1KJfMzMj7PPI3caO8OSCXVQdx b/n7IH2i3eoV+20SyN6K7yJs+BDrcqyMqp2HW0ASFOf63Ull/MBrp53Oe0saPP54 yHJhG/9kprhU1w3grjBCSDo3SkKai6LV2uyZLncnanYhrwtSZUza1P9rLfQjk+j2 y7wAxaBuVgDwtMnSXLfUTmMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSln37i+idZ N/Phwtulu4+/Y9N8NDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYzRTcvNDFCMEM5ODY4ODcxMTFFRkE3MDhEMTdEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU2M0U3LzQxQjBDOTg2ODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9u V1RmejRjTGJwYnVQdjJQVGZEUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC7vjANBgkqhkiG9w0BAQsFAAOCAQEAsf7bv0kyFFa5eNNbrlPD DdI6RwfRg3Sl+I75tDbuKhhVNY0lR8O2/U48/vb/kP7qlG4OrFmr69YVujc5rM9c U1RgmKAeYqAxa1KcO/MkY98KoPqVNQZ14unItSKJihgm3z3fIq/hwYZpiyjlAUhZ UHkUcAatLOUW6YrJiUDF2xpnhTBDryTcAcsGpwVUWc4GKlzBZwd4oxuZ7ebKgXSs OuDFMv+uQk+NjNmS9k/x7v0mny5HqnijND34wDASFSukl7Di13eqDGZddG9JggXC /2HekaBqHsHNkA0Q8KHkwIsKHhIgCLTHUDrodrhgmpMKJ0P2JJetG1QBPF7bJj/Y TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:12 2025 by rpki-client