This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer File: tljvayeSnHt_X7Jsue5qQSzoXdQ.cer (raw, json) Hash identifier: n745B4JaUoUuLj3oqx7fXAC59ha27fl36o1y2kcav54= Subject key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4EBF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 12:59:19 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 185.135.72.0/21 IP: 185.189.240.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20159 (0x4ebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Dec 9 12:59:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f0:2d:af:0c:67:4d:95:8a:37:af:49:2f:5c: 48:30:fd:41:ec:10:28:46:76:1b:13:49:b4:46:86: 5e:d0:84:14:b9:2a:da:ce:44:43:5b:22:ea:91:e0: 26:d2:e2:ee:3d:c7:cb:06:c4:5d:f5:92:4b:14:f5: 09:b7:9a:6d:12:41:76:9b:e0:23:5a:e1:92:e4:72: b3:38:3b:6e:81:37:67:73:50:40:60:86:2e:5b:69: f8:cb:f7:42:ea:1a:9d:1c:5e:fa:ee:73:f4:63:5a: e7:9c:8a:26:37:f5:8d:f7:f3:5e:a9:41:27:dd:38: dd:55:34:be:ed:97:cf:4e:1a:b4:6f:9e:08:a5:6b: 84:c9:f2:54:b4:fd:12:96:ae:32:86:c5:5b:a8:d7: b0:15:cb:a3:99:de:dd:1c:79:65:2f:6d:c8:b2:1e: a0:23:07:f7:f4:7c:c4:45:47:ce:a9:89:a8:e1:85: b8:c7:8e:ee:79:7f:9a:9c:66:2f:0d:34:d1:7f:1c: bf:89:a0:9f:4e:fb:e1:ac:3b:cf:96:9e:57:ed:4c: 46:0e:57:62:7b:4f:b1:64:c8:14:fa:9d:4d:40:78: 8a:44:e3:ad:90:07:71:f4:7b:f4:3a:e2:45:54:6d: ce:b8:be:a4:fd:ea:71:ce:22:5b:c8:9a:44:e8:19: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.135.72.0/21 185.189.240.0/22 Signature Algorithm: sha256WithRSAEncryption a7:22:ef:94:33:06:b5:5f:64:70:d2:93:ab:75:1d:3c:13:35: 61:5c:ad:0c:ab:21:01:19:8d:ef:bb:57:91:8a:f4:07:09:75: bb:a9:d1:cc:95:dd:8b:71:a8:ef:0f:24:d2:46:f0:4c:d6:db: b8:b1:fb:8a:71:c8:0e:e6:ff:69:94:a8:3d:43:8a:f5:06:76: 7a:d5:03:ee:a7:b2:c1:2d:79:4f:89:6d:4e:98:9d:58:ac:57: 86:62:96:3f:7b:68:ac:03:79:c6:97:53:07:21:05:57:89:ca: bb:03:1a:b7:07:90:c0:86:48:bd:e6:54:99:5a:30:10:d7:22: ee:d2:20:c7:60:86:71:cb:6c:a8:bb:76:44:63:75:24:2b:7f: 53:56:43:59:0b:15:b1:58:63:53:c1:18:a8:12:9b:fa:42:79: a2:9d:09:f6:ea:46:73:a5:a4:e8:1a:00:5b:ff:73:ba:94:be: e1:97:65:98:f3:22:32:38:2e:22:05:89:8c:a2:cc:ca:ad:dc: 92:b1:5a:3a:86:d1:b4:fc:d5:58:32:13:c8:83:d4:1e:91:b6: e6:e5:45:37:59:28:d3:4d:e3:f7:39:eb:6b:dc:d9:5b:07:e0: 47:f7:00:dd:57:dd:62:40:41:47:10:4c:d5:91:31:96:5d:8e: 65:5b:af:72 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICTr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMjA5MTI1OTE5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyMzA3MjExMC8GA1UEBRMoQjY1OEVGNkIyNzkyOUM3QjdGNUZCMjZD QjlFRTZBNDEyQ0U4NURENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APrwLa8MZ02VijevSS9cSDD9QewQKEZ2GxNJtEaGXtCEFLkq2s5EQ1si6pHgJtLi 7j3HywbEXfWSSxT1CbeabRJBdpvgI1rhkuRyszg7boE3Z3NQQGCGLltp+Mv3Quoa nRxe+u5z9GNa55yKJjf1jffzXqlBJ9043VU0vu2Xz04atG+eCKVrhMnyVLT9Epau MobFW6jXsBXLo5ne3Rx5ZS9tyLIeoCMH9/R8xEVHzqmJqOGFuMeO7nl/mpxmLw00 0X8cv4mgn0774aw7z5aeV+1MRg5XYntPsWTIFPqdTUB4ikTjrZAHcfR79DriRVRt zri+pP3qcc4iW8iaROgZRpUCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBS2WO9rJ5Kc e39fsmy57mpBLOhd1DAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMwNzIvMDY5QTA2RTYwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIzMDcyLzA2OUEwNkU2MEI1QzExRUI5OUExNzU2MkM0RjlBRTAyL3RsanZheWVT bkh0X1g3SnN1ZTVxUVN6b1hkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEA7mHSAMEArm98DANBgkqhkiG9w0BAQsFAAOCAQEApyLvlDMGtV9k cNKTq3UdPBM1YVytDKshARmN77tXkYr0Bwl1u6nRzJXdi3Go7w8k0kbwTNbbuLH7 inHIDub/aZSoPUOK9QZ2etUD7qeywS15T4ltTpidWKxXhmKWP3torAN5xpdTByEF V4nKuwMatweQwIZIveZUmVowENci7tIgx2CGcctsqLt2RGN1JCt/U1ZDWQsVsVhj U8EYqBKb+kJ5op0J9upGc6Wk6BoAW/9zupS+4ZdlmPMiMjguIgWJjKLMyq3ckrFa OobRtPzVWDITyIPUHpG25uVFN1ko003j9znra9zZWwfgR/cA3VfdYkBBRxBM1ZEx ll2OZVuvcg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:16:56 2025 by rpki-client