This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer File: 119NVHZK705TBIfeterZIyLy4As.cer (raw, json) Hash identifier: fw/6BDbj1ihBbnFFoa61QDHR5z46g5+Chp+8ecNI9C4= Subject key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7084 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft caRepository: rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:28:05 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.129.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28804 (0x7084) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 19 04:28:05 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:ee:e5:c0:a3:ba:7a:78:28:f6:4c:9a:12: ac:c2:f8:9f:59:7b:6b:41:76:b4:c6:28:58:f7:52: 25:14:1f:c3:99:1d:16:00:9a:10:48:f6:e1:fc:3a: 16:f1:1d:26:4f:52:24:ef:bb:e3:97:34:67:97:09: 0a:e6:16:42:50:85:c0:7f:96:65:d1:21:c9:aa:bc: e3:d8:06:f4:9e:74:c2:9e:78:06:fc:b8:f9:c4:d6: 64:d2:65:c2:fd:e3:5c:87:41:16:28:dc:e9:65:e8: 3e:b1:b5:e7:5b:c7:2b:25:be:2d:fc:e9:ec:26:99: c6:66:ca:0b:84:73:f3:d2:3d:90:63:70:01:87:82: 74:3d:02:f0:35:57:5e:79:b3:08:d8:be:87:5b:eb: 80:82:c2:78:75:4c:db:09:2b:69:59:2b:45:2c:47: a7:c0:54:0a:ca:71:0c:19:5a:ee:77:5a:80:cd:39: b8:5f:f7:c6:af:84:02:c7:0f:35:4a:23:45:f1:b4: 4c:ed:0f:ac:8f:c7:93:47:21:6a:b9:19:4d:c0:cf: ee:6b:33:1b:de:b9:a3:7a:35:8f:08:8b:66:3e:25: 4f:36:85:10:d1:fb:af:ce:02:eb:4a:2e:b4:ed:df: 95:96:d0:7e:83:b8:6a:4c:e7:e3:20:81:53:7d:af: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.129.0/24 Signature Algorithm: sha256WithRSAEncryption 36:2c:39:71:36:39:aa:89:9d:ee:94:20:de:1b:3e:e3:92:63: db:27:98:b0:b8:18:0e:12:91:83:05:04:16:79:90:f6:ed:3d: 6a:c0:9f:8b:0f:b9:24:80:3d:e8:59:fa:eb:56:2f:b4:06:f4: 3c:23:88:19:cf:87:45:2a:76:38:f9:f7:43:db:a2:b3:6f:cb: b8:59:44:10:59:d4:26:f8:8c:ca:4f:87:15:1b:12:a1:60:6b: b3:6a:f0:83:15:d9:0b:ca:50:08:fe:92:10:76:50:38:1c:15: 2e:d3:ec:d6:bd:fd:1f:aa:77:80:b2:6c:66:8d:72:d5:5c:ce: b8:82:c1:67:a3:9e:e7:a9:f8:65:6e:89:61:08:4a:97:74:62: 8f:ff:f1:ae:8d:9c:06:4c:6a:01:13:0e:e7:66:50:05:98:6e: 2a:6d:e3:21:ed:73:2d:67:ec:da:4f:5a:57:4f:56:fd:fb:11: 6c:ec:b7:d7:03:b5:c7:fc:0f:50:e3:fc:45:58:63:98:d0:2b: 2d:c3:f5:ad:d2:24:35:b8:7a:6e:74:d6:83:32:09:ca:ad:23: cd:af:1b:41:90:90:a5:6b:5d:82:7a:30:c3:ce:7f:b9:39:d0: 21:7c:0d:6d:2c:88:1d:c7:7e:dc:06:25:03:da:d2:2c:b2:e3: 6d:d3:3f:05 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE5MDQyODA1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2MkI5ODExMC8GA1UEBRMoRDc1RjRENTQ3NjRBRUY0RTUzMDQ4N0RF QjVFQUQ5MjMyMkYyRTAwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKmW7uXAo7p6eCj2TJoSrML4n1l7a0F2tMYoWPdSJRQfw5kdFgCaEEj24fw6FvEd Jk9SJO+745c0Z5cJCuYWQlCFwH+WZdEhyaq849gG9J50wp54Bvy4+cTWZNJlwv3j XIdBFijc6WXoPrG151vHKyW+Lfzp7CaZxmbKC4Rz89I9kGNwAYeCdD0C8DVXXnmz CNi+h1vrgILCeHVM2wkraVkrRSxHp8BUCspxDBla7ndagM05uF/3xq+EAscPNUoj RfG0TO0PrI/Hk0charkZTcDP7mszG965o3o1jwiLZj4lTzaFENH7r84C60outO3f lZbQfoO4akzn4yCBU32vH0UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTXX01Udkrv TlMEh9616tkjIvLgCzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjJCOTgvMUE3OTg0RDBEQzkzMTFGMDk5NUQ4NEQ5M0Y2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYyQjk4LzFBNzk4NEQwREM5MzExRjA5OTVEODREOTNGNkY1NkJDLzExOU5WSFpL NzA1VEJJZmV0ZXJaSXlMeTRBcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPgTANBgkqhkiG9w0BAQsFAAOCAQEANiw5cTY5qomd7pQg3hs+ 45Jj2yeYsLgYDhKRgwUEFnmQ9u09asCfiw+5JIA96Fn661YvtAb0PCOIGc+HRSp2 OPn3Q9uis2/LuFlEEFnUJviMyk+HFRsSoWBrs2rwgxXZC8pQCP6SEHZQOBwVLtPs 1r39H6p3gLJsZo1y1VzOuILBZ6Oe56n4ZW6JYQhKl3Rij//xro2cBkxqARMO52ZQ BZhuKm3jIe1zLWfs2k9aV09W/fsRbOy31wO1x/wPUOP8RVhjmNArLcP1rdIkNbh6 bnTWgzIJyq0jza8bQZCQpWtdgnoww85/uTnQIXwNbSyIHcd+3AYlA9rSLLLjbdM/ BQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:11 2025 by rpki-client