This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer File: CVjwl8rkKX3ycoLkGD468UJMj34.cer (raw, json) Hash identifier: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA= Subject key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 492B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Manifest: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft caRepository: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 16:05:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 196.1.105.0 -- 196.1.106.255 IP: 196.1.110.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18731 (0x492b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Nov 25 16:05:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:13:39:cc:2a:32:0c:5f:2d:1e:5d:b8:df: fc:b3:6e:27:39:68:c0:42:a1:b9:13:3f:e9:73:86: 5b:53:3d:4f:a7:bc:42:01:3d:e8:e6:0f:93:ba:11: dd:d6:51:fb:29:78:49:32:8a:47:92:1f:6b:af:1e: 0d:f0:0a:00:b0:91:e7:01:58:d9:03:1c:ec:d9:48: 6a:d6:7c:4f:9a:a8:ae:0b:17:ba:b4:86:88:29:84: 5b:09:72:f6:93:32:4e:5b:a0:ef:57:a1:79:dd:4d: 72:13:31:3b:d3:35:f4:bb:b7:0a:25:7c:c8:95:2c: 15:0c:80:ae:f2:d5:87:af:e2:b2:00:ed:c7:76:5c: c6:f1:5e:3b:7c:8f:34:b8:e9:fc:01:02:b8:73:78: ac:2d:17:e1:8f:e2:3b:0f:ae:ed:ef:8c:b1:a9:d6: 66:cf:f0:45:c8:bb:80:85:f2:7a:bd:16:92:44:ad: e9:dd:22:69:f7:81:e1:c2:31:e9:38:f3:e9:92:7b: 42:5a:5d:2b:51:89:7c:59:b5:bf:e4:c0:2b:71:ac: 53:b0:fd:bf:f7:d2:b9:68:0f:98:e6:e6:13:da:56: 1a:6e:42:2c:71:0b:4b:c8:a2:38:9c:4f:d8:55:4d: 9b:7f:52:82:3b:da:15:cf:07:d7:03:93:55:23:7a: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 196.1.105.0-196.1.106.255 196.1.110.0/23 Signature Algorithm: sha256WithRSAEncryption 48:eb:6f:80:eb:68:c5:1f:44:4c:d3:ad:c1:36:34:d0:2a:9e: 9f:d4:19:a0:21:64:e4:2d:8b:fd:88:37:94:b0:ce:ec:35:c4: ce:bc:ab:39:e3:ba:fc:87:ad:30:7d:17:b7:25:05:75:17:93: aa:89:21:c1:f6:b7:6d:c6:7b:7a:78:e3:d4:78:71:ad:98:e2: 5d:8f:e3:db:71:46:f8:c1:44:c5:25:b9:39:43:75:b6:dd:1f: 23:f4:29:c0:92:9c:62:90:99:a8:49:0f:20:34:f1:d7:28:90: 61:fb:68:41:e7:b0:b8:5a:f4:4d:91:fd:3c:61:50:99:c1:1c: e7:27:0f:a5:9c:e1:e9:63:c6:d5:ae:5e:8b:9d:17:47:52:2b: b0:da:1d:4a:bc:3b:f9:e9:d0:d6:90:55:e7:dc:30:f8:91:4b: 57:f8:bc:6c:b0:cf:f4:1d:7a:35:08:00:62:1a:5a:dd:0d:86: 5b:92:17:c4:60:04:8b:d0:26:0c:d0:04:31:78:47:39:77:fa: e6:d5:73:6a:54:eb:0d:f1:df:41:3a:e9:d5:26:98:17:1c:24: 01:d2:9d:a7:cb:30:7d:a7:72:65:aa:64:0c:ab:35:0f:f0:9a: 89:c8:41:dd:73:46:ae:42:d6:61:65:fc:79:a2:b5:ee:01:43: 0a:02:d8:c2 -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgICSSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjUxMTI1MTYwNTMzWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2ODE0QjExMC8GA1UEBRMoMDk1OEYwOTdDQUU0Mjk3REYyNzI4MkU0 MTgzRTNBRjE0MjRDOEY3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJxxEznMKjIMXy0eXbjf/LNuJzlowEKhuRM/6XOGW1M9T6e8QgE96OYPk7oR3dZR +yl4STKKR5Ifa68eDfAKALCR5wFY2QMc7NlIatZ8T5qorgsXurSGiCmEWwly9pMy Tlug71ehed1NchMxO9M19Lu3CiV8yJUsFQyArvLVh6/isgDtx3ZcxvFeO3yPNLjp /AECuHN4rC0X4Y/iOw+u7e+MsanWZs/wRci7gIXyer0WkkSt6d0iafeB4cIx6Tjz 6ZJ7QlpdK1GJfFm1v+TAK3GsU7D9v/fSuWgPmObmE9pWGm5CLHELS8iiOJxP2FVN m39SgjvaFc8H1wOTVSN6T/ECAwEAAaOCAwEwggL9MB0GA1UdDgQWBBQJWPCXyuQp ffJyguQYPjrxQkyPfjAfBgNVHSMEGDAWgBQ0j5ubkqcsz9NvPHDzVnVzPMjqIjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2 MTFFMkE2MkY4NzdDNzJGRDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJ LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgxNEIvRkI2MDZGNTYxNjJFMTFFOEI4REUyNjY5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY4MTRCL0ZCNjA2RjU2MTYyRTExRThCOERFMjY2OUM0RjlBRTAyL0NWandsOHJr S1gzeWNvTGtHRDQ2OFVKTWozNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQeMBww GgQCAAEwFDAMAwQAxAFpAwQAxAFqAwQBxAFuMA0GCSqGSIb3DQEBCwUAA4IBAQBI 62+A62jFH0RM063BNjTQKp6f1BmgIWTkLYv9iDeUsM7sNcTOvKs547r8h60wfRe3 JQV1F5OqiSHB9rdtxnt6eOPUeHGtmOJdj+PbcUb4wUTFJbk5Q3W23R8j9CnAkpxi kJmoSQ8gNPHXKJBh+2hB57C4WvRNkf08YVCZwRznJw+lnOHpY8bVrl6LnRdHUiuw 2h1KvDv56dDWkFXn3DD4kUtX+LxssM/0HXo1CABiGlrdDYZbkhfEYASL0CYM0AQx eEc5d/rm1XNqVOsN8d9BOunVJpgXHCQB0p2nyzB9p3JlqmQMqzUP8JqJyEHdc0au QtZhZfx5orXuAUMKAtjC -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:58 2025 by rpki-client