This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer (raw, json) Hash identifier: awsUKVOuN26PacE4C5dbIBhTJSCnTjpw1k4JWZ1rWAI= Subject key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FCD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 14:49:19 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.238.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28621 (0x6fcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 8 14:49:19 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:3b:85:45:e7:e6:dd:b6:0a:5b:fa:08:63: 19:71:c1:1b:be:ef:5f:a1:65:2b:f2:0f:1a:2a:73: 32:71:e0:6c:c2:65:33:3c:69:f5:57:ee:3c:4a:60: 51:1f:42:e2:a0:fe:3b:9f:37:5b:9b:66:c6:ad:dd: 7f:fd:3e:1e:41:1d:32:cb:76:08:1c:c9:15:41:ed: 28:b5:2c:7f:32:15:d3:4b:76:30:10:ce:4a:3a:00: 50:47:ee:0e:0b:da:61:85:3a:0d:14:0d:6a:6a:60: 1f:50:69:d7:66:11:55:12:4a:93:ea:88:08:a0:13: e8:83:17:d4:29:54:ba:2d:c3:06:9e:f3:78:66:12: f4:f1:49:0e:de:e9:26:e0:43:d5:f9:7a:9c:03:da: 68:a2:b8:a9:94:28:cb:90:82:03:74:bc:25:33:49: 2a:75:3d:e7:96:e8:85:ce:7f:67:5c:dc:b0:46:61: 9e:cf:31:35:ab:91:c6:5b:53:e0:9d:a6:25:53:d5: f9:e2:e7:1a:36:77:37:f1:b8:2c:74:0e:84:a9:c6: 55:fa:2d:2a:7c:db:6e:d5:5f:ca:ab:b7:af:60:7e: 7f:5c:53:bc:ed:fc:8e:a2:63:62:1c:bd:29:0e:98: 48:51:df:73:b7:f8:e5:b5:70:7a:74:45:01:ba:b7: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.238.0/23 Signature Algorithm: sha256WithRSAEncryption 05:c1:53:27:14:2d:78:8d:07:c1:e9:17:22:7b:6a:85:02:19: eb:25:79:36:d3:8f:3e:1b:fd:7b:8a:a9:cc:44:9b:05:00:d4: 96:79:69:f6:3c:51:78:71:bb:81:65:a4:ee:fe:1a:f8:4c:2e: 78:1f:ae:b0:0d:95:da:7f:c7:0a:29:3b:ea:cb:a9:f1:b7:b8: c4:9c:02:78:0a:51:5f:e2:fc:df:bb:2b:db:0c:fd:0c:fe:8d: 7f:ea:68:6b:9f:a8:eb:a1:b0:bd:b9:57:20:71:f9:dc:3b:2d: a9:e8:c7:94:91:7a:2d:c8:46:01:bf:d3:d3:c3:db:03:91:b5: 38:28:dd:cb:56:8a:79:ae:e3:68:a1:33:07:be:14:52:25:b2: 15:6d:86:35:12:1f:2c:ee:99:46:f6:03:9f:64:b4:c1:f9:55: 15:d1:72:9e:48:d7:fc:6b:75:ac:c6:3c:86:e0:9d:a4:18:d4: 44:65:e4:db:b8:0a:23:eb:2e:4b:71:db:a9:99:c8:7a:f4:f5: e8:a5:ff:8d:9a:a9:b3:94:32:b2:7e:e4:17:78:e4:69:06:a9: 56:34:90:28:40:4d:27:88:6e:ab:60:6f:06:26:34:08:49:5c: a6:06:6a:75:f1:d4:ef:bc:c0:e7:26:83:23:f6:8f:26:2f:ef: 53:c4:0a:b5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA4MTQ0OTE5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2NDE2NDExMC8GA1UEBRMoQTg3MzcyMDFGQTRDNjRGQTAwNTY0MDIy REIwNkY2MEU3RUUyQ0QwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALdkO4VF5+bdtgpb+ghjGXHBG77vX6FlK/IPGipzMnHgbMJlMzxp9VfuPEpgUR9C 4qD+O583W5tmxq3df/0+HkEdMst2CBzJFUHtKLUsfzIV00t2MBDOSjoAUEfuDgva YYU6DRQNampgH1Bp12YRVRJKk+qICKAT6IMX1ClUui3DBp7zeGYS9PFJDt7pJuBD 1fl6nAPaaKK4qZQoy5CCA3S8JTNJKnU955bohc5/Z1zcsEZhns8xNauRxltT4J2m JVPV+eLnGjZ3N/G4LHQOhKnGVfotKnzbbtVfyqu3r2B+f1xTvO38jqJjYhy9KQ6Y SFHfc7f45bVwenRFAbq3uBkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSoc3IB+kxk +gBWQCLbBvYOfuLNDTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQxNjQvQTY4RTI2NEVBMTgyMTFFRjhGNEUxNjIzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY0MTY0L0E2OEUyNjRFQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBN WlBvQVZrQWkyd2IyRG43aXpRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/7jANBgkqhkiG9w0BAQsFAAOCAQEABcFTJxQteI0HwekXIntq hQIZ6yV5NtOPPhv9e4qpzESbBQDUlnlp9jxReHG7gWWk7v4a+EwueB+usA2V2n/H Cik76sup8be4xJwCeApRX+L837sr2wz9DP6Nf+poa5+o66GwvblXIHH53DstqejH lJF6LchGAb/T08PbA5G1OCjdy1aKea7jaKEzB74UUiWyFW2GNRIfLO6ZRvYDn2S0 wflVFdFynkjX/Gt1rMY8huCdpBjURGXk27gKI+suS3HbqZnIevT16KX/jZqps5Qy sn7kF3jkaQapVjSQKEBNJ4huq2BvBiY0CElcpgZqdfHU77zA5yaDI/aPJi/vU8QK tQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:42:33 2025 by rpki-client