This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer File: xsPe6PYn19lovt8i_GEJRiUwF4M.cer (raw, json) Hash identifier: cziLOjdbeetIfy+B5I9+zgniVi4Kj3UKrFHhnZp7xyg= Subject key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F7B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft caRepository: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 16:07:18 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 146.88.16.0 -- 146.88.18.255 IP: 146.88.28.0/24 IP: 198.148.189.0/24 IP: 198.148.196.0/23 IP: 204.75.142.0/24 IP: 205.166.177.0/24 IP: 216.99.198.0/24 IP: 216.99.201.0/24 IP: 216.99.204.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28539 (0x6f7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 3 16:07:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:f1:44:ee:ff:20:01:fd:77:b5:ba:d6:05: 80:48:6e:5f:73:8f:d4:19:65:93:bc:7b:5a:53:ac: 56:55:3f:a1:b4:96:53:22:ac:1e:75:29:12:cf:96: 24:e2:bc:bd:be:26:ca:c2:3b:b7:84:1f:7e:23:76: 9e:94:13:46:48:ce:b1:ce:36:6c:61:09:eb:a9:63: 59:9b:0a:00:2f:73:50:33:2a:4c:39:57:27:9d:08: ff:87:8a:08:d8:d6:7f:f0:8d:f8:52:9a:cd:5c:8e: 37:eb:c5:73:09:25:74:bd:74:df:ef:7d:f4:4e:dd: ba:0d:57:0c:d4:6f:52:c9:7c:a1:a7:3e:02:16:81: da:15:68:44:a1:58:61:1e:d8:6a:5c:3f:de:19:c1: 2a:04:2b:ec:f2:55:ed:f3:29:a4:62:bf:55:d4:7c: 1b:8d:72:90:74:bc:27:ff:9c:51:0a:38:ad:7f:ee: ed:87:f8:3d:d1:ac:7f:e4:ce:ab:31:bd:1d:28:76: 9a:b8:f8:a6:23:1b:a6:36:6e:5a:cd:ce:33:9e:0f: f2:d1:9c:e8:89:0d:6d:cb:23:16:7e:61:d6:7b:6f: 08:88:0d:77:be:96:b8:be:65:18:c5:3e:fe:94:11: 20:df:e4:82:37:2e:66:20:32:dd:d9:6d:f6:0a:eb: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.16.0-146.88.18.255 146.88.28.0/24 198.148.189.0/24 198.148.196.0/23 204.75.142.0/24 205.166.177.0/24 216.99.198.0/24 216.99.201.0/24 216.99.204.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:9f:a1:60:01:60:d2:41:7d:f9:03:83:e4:c7:65:c1:b7:b7: 2c:96:a3:e1:51:84:f2:eb:81:b3:5b:55:04:17:01:16:8e:72: d7:cf:98:83:51:1e:26:25:0d:c0:4f:2e:4f:10:7e:02:a1:87: bd:22:55:1b:03:64:0f:36:19:fd:83:86:43:cf:0f:ed:08:7c: 7f:43:72:72:2c:de:5a:16:52:97:eb:6b:fd:56:eb:a1:80:40: fd:d1:e8:b5:f7:54:94:91:81:ad:63:11:77:3b:88:12:9f:66: fa:87:3d:f9:b9:8f:fa:34:e4:9d:63:2d:00:e8:09:dc:8e:0f: d7:80:6a:14:bf:49:d8:a3:85:66:be:73:4c:2f:d3:8a:98:6b: 2e:66:d8:69:59:f4:f7:ff:2f:c8:09:b4:16:44:cb:8f:25:62: b2:b3:6b:7d:84:da:81:9b:c6:fc:90:51:4d:6e:c8:14:73:bb: 7c:b1:30:66:01:b2:74:90:ca:99:dc:24:58:b1:c7:f8:8c:03: b7:56:9f:26:9a:96:e8:67:b2:f3:d9:50:ef:a5:58:d4:f8:c9: ac:9f:19:0b:a2:7a:8d:b1:67:44:68:24:0e:a9:48:78:0c:6d: 63:fe:4b:6f:60:e5:ba:dc:63:7d:f1:c0:1d:b5:d7:fc:78:f8: 75:64:81:89 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgICb3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAzMTYwNzE4WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1MTI1ODExMC8GA1UEBRMoQzZDM0RFRThGNjI3RDdEOTY4QkVERjIy RkM2MTA5NDYyNTMwMTc4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANfG8UTu/yAB/Xe1utYFgEhuX3OP1Bllk7x7WlOsVlU/obSWUyKsHnUpEs+WJOK8 vb4mysI7t4QffiN2npQTRkjOsc42bGEJ66ljWZsKAC9zUDMqTDlXJ50I/4eKCNjW f/CN+FKazVyON+vFcwkldL103+999E7dug1XDNRvUsl8oac+AhaB2hVoRKFYYR7Y alw/3hnBKgQr7PJV7fMppGK/VdR8G41ykHS8J/+cUQo4rX/u7Yf4PdGsf+TOqzG9 HSh2mrj4piMbpjZuWs3OM54P8tGc6IkNbcsjFn5h1ntvCIgNd76WuL5lGMU+/pQR IN/kgjcuZiAy3dlt9grrn2sCAwEAAaOCAyswggMnMB0GA1UdDgQWBBTGw97o9ifX 2Wi+3yL8YQlGJTAXgzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEyNTgvQkIyRERDRTIxREE2MTFFMjg2RDkxRDlFMDhCMDJDRDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUxMjU4L0JCMkREQ0UyMURBNjExRTI4NkQ5MUQ5RTA4QjAyQ0QyL3hzUGU2UFlu MTlsb3Z0OGlfR0VKUmlVd0Y0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBXBggrBgEFBQcBBwEB/wRIMEYw RAQCAAEwPjAMAwQEklgQAwQAklgSAwQAklgcAwQAxpS9AwQBxpTEAwQAzEuOAwQA zaaxAwQA2GPGAwQA2GPJAwQA2GPMMA0GCSqGSIb3DQEBCwUAA4IBAQBrn6FgAWDS QX35A4Pkx2XBt7cslqPhUYTy64GzW1UEFwEWjnLXz5iDUR4mJQ3ATy5PEH4CoYe9 IlUbA2QPNhn9g4ZDzw/tCHx/Q3JyLN5aFlKX62v9VuuhgED90ei191SUkYGtYxF3 O4gSn2b6hz35uY/6NOSdYy0A6Ancjg/XgGoUv0nYo4VmvnNML9OKmGsuZthpWfT3 /y/ICbQWRMuPJWKys2t9hNqBm8b8kFFNbsgUc7t8sTBmAbJ0kMqZ3CRYscf4jAO3 Vp8mmpboZ7Lz2VDvpVjU+MmsnxkLonqNsWdEaCQOqUh4DG1j/ktvYOW63GN98cAd tdf8ePh1ZIGJ -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:38 2025 by rpki-client