This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer File: sJELB8hrD_owClKsfDH8tSwFMtc.cer (raw, json) Hash identifier: m4Mt43bzBdN4rvYOmIqnUyuGikc/5nFmUJLT5K+WRFo= Subject key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FB6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 20:01:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 72.35.248.0/22 IP: 74.114.48.0/22 IP: 135.84.232.0/21 IP: 146.88.152.0/21 IP: 159.117.132.0 -- 159.117.143.255 IP: 159.117.201.0/24 IP: 159.117.223.0/24 IP: 165.84.232.0/21 IP: 208.66.232.0/21 IP: 208.71.212.0/22 IP: 208.81.116.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28598 (0x6fb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 5 20:01:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:43:9f:47:82:ab:02:13:a5:fc:eb:ef:e7: 92:40:ff:45:5c:5a:16:b0:c0:2c:9c:73:3f:ed:72: 6f:fd:d9:ef:bf:4e:a6:73:0a:0f:85:55:a5:62:e5: c5:7c:2d:25:6f:d8:e2:e3:df:ce:58:4b:38:74:f4: 73:c7:bc:9f:1a:5e:0d:af:a8:77:2f:35:e4:51:47: c9:fa:e4:78:2c:48:d4:fa:db:7b:1e:9e:61:b6:e3: a6:f3:8d:2b:b9:2f:ea:fc:a6:04:0d:64:66:9b:a4: 6f:aa:18:9b:95:af:0b:ad:6f:b0:78:c2:8e:e1:65: cc:6d:47:e4:32:2a:40:2e:c8:d6:a4:68:24:bd:b9: a5:fb:50:06:90:97:e5:b6:3f:64:9d:35:76:6a:81: b8:06:db:27:75:a2:dd:7e:1f:5e:ed:4c:e8:da:80: d9:ac:69:c4:0b:e6:17:d7:23:04:47:b1:cb:50:c6: d7:ee:b4:ce:97:1e:21:05:9d:b4:c2:3a:06:4d:2b: 7f:d2:9a:e5:11:a0:5e:94:da:c7:14:f3:e5:c2:4d: b3:a1:70:be:27:4d:ae:49:55:f1:2f:fc:3e:2c:20: 1f:08:60:62:3c:ac:25:64:b0:e5:20:cf:5a:d7:be: 65:33:d8:b5:12:fd:63:99:46:a5:f8:6d:d4:33:d6: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.35.248.0/22 74.114.48.0/22 135.84.232.0/21 146.88.152.0/21 159.117.132.0-159.117.143.255 159.117.201.0/24 159.117.223.0/24 165.84.232.0/21 208.66.232.0/21 208.71.212.0/22 208.81.116.0/22 Signature Algorithm: sha256WithRSAEncryption 56:c1:3e:5c:90:84:ed:81:74:56:50:3a:14:84:91:e8:7a:b5: 54:59:35:a5:2d:c8:6a:80:3c:b8:cf:8f:ed:05:06:11:b5:41: 8b:60:33:87:b2:78:48:01:25:7d:e1:b0:67:af:23:38:36:a0: 3f:f6:c7:ee:f2:b4:31:e7:d4:20:61:5f:a3:38:11:e3:8c:f4: 57:6c:38:22:25:4d:d3:b9:b2:be:0a:7e:7e:39:fb:8b:6f:b9: a8:96:6e:bc:24:3c:e5:e4:20:4d:ee:16:8e:40:c9:23:53:a8: 7d:1b:04:ca:43:a6:c4:a2:89:de:9c:a9:11:63:21:da:da:19: 26:62:eb:93:b8:7d:08:8e:f0:5c:21:9f:f6:f5:4f:7c:5c:fa: 04:01:14:82:a1:54:e3:64:43:75:4e:bd:7b:33:c6:1f:59:80: ce:41:24:ac:a1:99:16:1c:ea:72:93:54:d4:ab:5c:26:e2:12: 2a:e0:bb:84:6a:b4:5f:b3:87:72:30:a8:ba:12:c4:1e:97:cf: 0e:e5:13:5e:4a:27:7f:78:cc:df:6e:8a:ee:91:21:e2:7e:3b: 39:31:a4:fd:c9:e2:f8:bd:a6:68:c0:5a:89:5c:4d:c5:ac:61: 4a:2d:87:dc:9b:71:34:a1:e5:17:70:3f:1d:5f:d2:3c:13:b9: 78:03:79:36 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgICb7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA1MjAwMTExWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCNzc3QzExMC8GA1UEBRMoQjA5MTBCMDdDODZCMEZGQTMwMEE1MkFD N0MzMUZDQjUyQzA1MzJENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK73Q59HgqsCE6X86+/nkkD/RVxaFrDALJxzP+1yb/3Z779OpnMKD4VVpWLlxXwt JW/Y4uPfzlhLOHT0c8e8nxpeDa+ody815FFHyfrkeCxI1Prbex6eYbbjpvONK7kv 6vymBA1kZpukb6oYm5WvC61vsHjCjuFlzG1H5DIqQC7I1qRoJL25pftQBpCX5bY/ ZJ01dmqBuAbbJ3Wi3X4fXu1M6NqA2axpxAvmF9cjBEexy1DG1+60zpceIQWdtMI6 Bk0rf9Ka5RGgXpTaxxTz5cJNs6FwvidNrklV8S/8PiwgHwhgYjysJWSw5SDPWte+ ZTPYtRL9Y5lGpfht1DPWvJkCAwEAAaOCAzcwggMzMB0GA1UdDgQWBBSwkQsHyGsP +jAKUqx8Mfy1LAUy1zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc3N0MvNjJEMDNFOENCMkRBMTFFQjhCMzg0QTYwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3NzdDLzYyRDAzRThDQjJEQTExRUI4QjM4NEE2MEM0RjlBRTAyL3NKRUxCOGhy RF9vd0NsS3NmREg4dFN3Rk10Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBjBggrBgEFBQcBBwEB/wRUMFIw UAQCAAEwSgMEAkgj+AMEAkpyMAMEA4dU6AMEA5JYmDAMAwQCn3WEAwQEn3WAAwQA n3XJAwQAn3XfAwQDpVToAwQD0ELoAwQC0EfUAwQC0FF0MA0GCSqGSIb3DQEBCwUA A4IBAQBWwT5ckITtgXRWUDoUhJHoerVUWTWlLchqgDy4z4/tBQYRtUGLYDOHsnhI ASV94bBnryM4NqA/9sfu8rQx59QgYV+jOBHjjPRXbDgiJU3TubK+Cn5+OfuLb7mo lm68JDzl5CBN7haOQMkjU6h9GwTKQ6bEoonenKkRYyHa2hkmYuuTuH0IjvBcIZ/2 9U98XPoEARSCoVTjZEN1Tr17M8YfWYDOQSSsoZkWHOpyk1TUq1wm4hIq4LuEarRf s4dyMKi6EsQel88O5RNeSid/eMzfborukSHifjs5MaT9yeL4vaZowFqJXE3FrGFK LYfcm3E0oeUXcD8dX9I8E7l4A3k2 -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:29 2025 by rpki-client