This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t9zhQRKgKYL1dXyrjTSRAyyOGPo.cer File: t9zhQRKgKYL1dXyrjTSRAyyOGPo.cer (raw, json) Hash identifier: kRkPdps1KfpOCo+36CCsx4GqW/MHg7OA1seq8yDD4CI= Subject key identifier: B7:DC:E1:41:12:A0:29:82:F5:75:7C:AB:8D:34:91:03:2C:8E:18:FA Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F4D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/t9zhQRKgKYL1dXyrjTSRAyyOGPo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:43:27 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 167.179.200.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28493 (0x6f4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 12:43:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F91EB, serialNumber=B7DCE14112A02982F5757CAB8D3491032C8E18FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:cb:76:ee:47:a3:79:29:7a:47:e5:e7:f4: ed:72:f9:4b:ac:ad:0f:fd:93:1d:24:81:96:6b:aa: 92:80:cc:31:35:f7:70:9b:0e:1f:fc:02:8f:eb:d2: 3b:bc:9a:e7:95:09:09:c6:05:55:f7:9c:01:23:5d: 31:0c:e7:9a:75:ad:fa:7c:fd:99:3a:43:a8:64:83: 12:4c:01:ba:70:30:c8:c7:f6:35:af:65:da:69:a5: 16:ac:12:00:41:18:9c:81:b2:8a:10:61:f2:7f:7c: 78:34:92:df:30:aa:50:1b:17:0e:6b:f9:bc:c2:6f: b4:4c:62:d1:14:86:11:06:39:6e:99:5b:43:74:dd: d4:6d:0b:47:9b:0b:5e:0f:a1:a5:5e:66:d6:f5:3d: 11:b4:c2:e9:07:aa:c6:3c:9d:f0:fb:0d:e3:b9:5e: 10:2e:1d:e9:30:26:a8:f1:c5:02:a8:5a:58:a9:bf: 7d:f0:72:fd:78:95:84:99:28:a1:ca:70:19:85:03: 13:48:cd:e6:37:d7:58:4b:29:4a:05:53:dc:bb:a0: 77:01:f2:0e:92:45:44:b2:3d:f9:e9:d5:de:4c:8d: 24:91:c9:bf:55:67:73:8b:a2:4a:96:dc:22:01:dd: b1:80:b2:1e:03:4a:16:87:f5:1c:d0:a4:6c:f5:85: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DC:E1:41:12:A0:29:82:F5:75:7C:AB:8D:34:91:03:2C:8E:18:FA X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/497F2BD8F70511E9ADBA451FC4F9AE02/t9zhQRKgKYL1dXyrjTSRAyyOGPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.200.0/21 Signature Algorithm: sha256WithRSAEncryption 17:4f:17:d7:12:51:c1:b5:29:23:3b:e2:4b:e0:e2:2d:37:79: b3:52:ca:0c:b5:00:04:17:0e:0c:5b:ca:51:1c:69:c9:88:cd: 3b:4f:e7:f0:5d:5b:c6:3c:39:c4:74:29:d1:b0:c4:6b:04:ae: 7d:81:86:c7:61:2e:9a:09:e5:65:3d:54:9c:08:25:20:f0:f6: bf:1b:09:2d:07:02:4b:62:07:e0:b5:c0:82:da:35:18:98:cc: 04:dd:85:c4:63:05:20:4a:04:e7:36:25:44:5f:52:e7:60:35: 4a:09:d0:58:7f:c8:f9:5d:f0:3d:aa:70:49:d6:e0:ca:02:dd: dd:de:6e:f7:0c:74:35:d3:dc:c6:56:b8:a2:c6:01:b5:bf:ca: a8:2c:1d:9a:53:94:f1:e5:34:da:b4:b9:a1:54:e0:42:ad:7c: ac:97:91:23:d0:6b:31:b6:6f:4e:57:e9:94:77:51:41:2d:c2: c2:9a:b1:80:4d:64:63:df:40:d2:d1:9f:f1:74:c1:c4:d4:77: 99:b7:25:b2:62:42:7b:be:17:80:41:a1:73:d5:73:c0:d6:ab: f8:87:98:05:78:d3:77:c0:a2:6c:37:ae:0c:41:d3:bc:f9:84: 68:ff:73:cd:0d:07:5d:45:c2:8b:35:ed:d8:11:67:80:8e:c2: fd:40:b5:42 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMTI0MzI3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGOTFFQjExMC8GA1UEBRMoQjdEQ0UxNDExMkEwMjk4MkY1NzU3Q0FC OEQzNDkxMDMyQzhFMThGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJrMy3buR6N5KXpH5ef07XL5S6ytD/2THSSBlmuqkoDMMTX3cJsOH/wCj+vSO7ya 55UJCcYFVfecASNdMQznmnWt+nz9mTpDqGSDEkwBunAwyMf2Na9l2mmlFqwSAEEY nIGyihBh8n98eDSS3zCqUBsXDmv5vMJvtExi0RSGEQY5bplbQ3Td1G0LR5sLXg+h pV5m1vU9EbTC6Qeqxjyd8PsN47leEC4d6TAmqPHFAqhaWKm/ffBy/XiVhJkoocpw GYUDE0jN5jfXWEspSgVT3LugdwHyDpJFRLI9+enV3kyNJJHJv1Vnc4uiSpbcIgHd sYCyHgNKFof1HNCkbPWFJakCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS33OFBEqAp gvV1fKuNNJEDLI4Y+jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjkxRUIvNDk3RjJCRDhGNzA1MTFFOUFEQkE0NTFGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY5MUVCLzQ5N0YyQkQ4RjcwNTExRTlBREJBNDUxRkM0RjlBRTAyL3Q5emhRUktn S1lMMWRYeXJqVFNSQXl5T0dQby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA6ezyDANBgkqhkiG9w0BAQsFAAOCAQEAF08X1xJRwbUpIzviS+Di LTd5s1LKDLUABBcODFvKURxpyYjNO0/n8F1bxjw5xHQp0bDEawSufYGGx2Eumgnl ZT1UnAglIPD2vxsJLQcCS2IH4LXAgto1GJjMBN2FxGMFIEoE5zYlRF9S52A1SgnQ WH/I+V3wPapwSdbgygLd3d5u9wx0NdPcxla4osYBtb/KqCwdmlOU8eU02rS5oVTg Qq18rJeRI9BrMbZvTlfplHdRQS3CwpqxgE1kY99A0tGf8XTBxNR3mbclsmJCe74X gEGhc9VzwNar+IeYBXjTd8CibDeuDEHTvPmEaP9zzQ0HXUXCizXt2BFngI7C/UC1 Qg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:19 2025 by rpki-client