This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer File: zFkhdtiMQj-IWbUYtq0zT_92dAk.cer (raw, json) Hash identifier: Xz9aq3pLsOi7YIMMPJlXhJXC6/eIHVsM6uw6CH2ESas= Subject key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E47 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 19:46:04 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 66.96.192.0/19 IP: 158.140.128.0/19 IP: 165.173.0.0/18 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28231 (0x6e47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 17 19:46:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:e7:74:85:e8:a2:3b:91:78:95:8d:fa:8e: 8a:36:64:64:b4:02:e6:86:7e:14:ae:a3:39:fd:8a: 0a:21:19:17:01:73:da:86:b6:20:39:39:94:cb:ce: 98:14:fc:df:4f:96:35:79:c7:81:41:2f:53:bc:f2: 38:8a:42:77:2d:84:0f:50:39:ad:4b:ad:5d:76:db: 58:1e:6a:86:27:20:eb:00:24:b1:16:91:69:85:c6: c1:f1:2a:c6:92:61:96:be:24:2f:b6:2d:da:9a:c4: 5e:50:3d:d2:1e:32:06:3a:2e:72:ed:aa:1d:57:72: a7:0c:de:0d:5d:0e:d8:58:0c:be:82:ce:28:cd:ad: 49:dd:92:6c:84:3a:ae:4f:3a:ce:36:62:9b:1d:c1: 30:84:97:15:4d:c8:57:33:9b:b0:de:3a:8e:7b:56: ec:1f:5b:a0:4c:da:c4:a2:5d:4e:e4:bb:86:99:c6: 11:aa:af:e3:a2:12:44:98:8e:56:ad:c4:ed:84:46: da:e4:d8:57:54:0d:c5:5f:e1:ae:82:7c:6a:ef:18: 10:24:22:c7:8e:7b:78:db:fd:c5:04:92:28:a4:cc: fa:0b:e1:f9:2c:bd:48:df:fd:e4:13:68:70:8e:54: 26:ae:da:59:4c:c9:a8:cf:3f:4e:91:ea:01:f2:b9: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.96.192.0/19 158.140.128.0/19 165.173.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5d:46:00:2b:12:11:dd:a7:13:0b:86:45:91:45:31:1d:31:41: f8:5e:3b:a7:8c:7c:54:81:60:49:b8:70:32:cb:c9:69:d3:9b: 48:38:9a:15:69:93:41:0b:43:d3:e0:a2:44:8b:8a:ed:9c:ac: b3:44:9a:88:3e:3d:cb:63:2b:af:a5:c2:d0:54:39:b9:47:a7: 8d:81:a2:ed:4a:8a:aa:39:d7:12:03:cd:08:24:b8:87:5e:df: 00:15:4d:e1:3b:27:2c:a1:b9:bf:a3:ad:35:da:5e:19:1d:a6: b0:8e:d6:a0:a5:20:af:2f:4e:d8:1c:b2:4e:c4:39:e3:b7:32: 5a:fb:d2:b5:68:4b:be:0a:55:0d:76:12:80:cb:4d:0e:93:3c: 5c:ba:53:a4:1c:d0:2a:6a:17:40:89:4e:e5:fa:e0:e6:89:7c: ac:f9:dd:f3:73:58:fe:5a:4b:e2:40:8f:e9:a1:67:20:27:18: e6:92:30:7f:06:38:95:33:25:7f:b3:96:44:a1:59:bf:87:59: bf:84:7d:c0:31:ef:97:32:a2:f3:92:e4:7a:a1:d2:b4:a0:7d: 03:61:58:16:f2:dc:75:c2:80:fa:49:92:fd:4f:9b:bb:6e:27: 21:c1:fb:33:d6:81:ed:ec:d4:d9:55:97:b0:60:70:be:a2:27: 44:05:ed:10 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICbkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE3MTk0NjA0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGNjdCQjExMC8GA1UEBRMoQ0M1OTIxNzZEODhDNDIzRjg4NTlCNTE4 QjZBRDMzNEZGRjc2NzQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANqA53SF6KI7kXiVjfqOijZkZLQC5oZ+FK6jOf2KCiEZFwFz2oa2IDk5lMvOmBT8 30+WNXnHgUEvU7zyOIpCdy2ED1A5rUutXXbbWB5qhicg6wAksRaRaYXGwfEqxpJh lr4kL7Yt2prEXlA90h4yBjoucu2qHVdypwzeDV0O2FgMvoLOKM2tSd2SbIQ6rk86 zjZimx3BMISXFU3IVzObsN46jntW7B9boEzaxKJdTuS7hpnGEaqv46ISRJiOVq3E 7YRG2uTYV1QNxV/hroJ8au8YECQix457eNv9xQSSKKTM+gvh+Sy9SN/95BNocI5U Jq7aWUzJqM8/TpHqAfK5N/8CAwEAAaOCAv8wggL7MB0GA1UdDgQWBBTMWSF22IxC P4hZtRi2rTNP/3Z0CTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY3QkIvQkRGQkYxODYwRTNFMTFFOTgzNkY0MDE0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY2N0JCL0JERkJGMTg2MEUzRTExRTk4MzZGNDAxNEM0RjlBRTAyL3pGa2hkdGlN UWotSVdiVVl0cTB6VF85MmRBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEBUJgwAMEBZ6MgAMEBqWtADANBgkqhkiG9w0BAQsFAAOCAQEAXUYA KxIR3acTC4ZFkUUxHTFB+F47p4x8VIFgSbhwMsvJadObSDiaFWmTQQtD0+CiRIuK 7Zyss0SaiD49y2Mrr6XC0FQ5uUenjYGi7UqKqjnXEgPNCCS4h17fABVN4TsnLKG5 v6OtNdpeGR2msI7WoKUgry9O2ByyTsQ547cyWvvStWhLvgpVDXYSgMtNDpM8XLpT pBzQKmoXQIlO5frg5ol8rPnd83NY/lpL4kCP6aFnICcY5pIwfwY4lTMlf7OWRKFZ v4dZv4R9wDHvlzKi85LkeqHStKB9A2FYFvLcdcKA+kmS/U+bu24nIcH7M9aB7ezU 2VWXsGBwvqInRAXtEA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:05 2025 by rpki-client