This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer (raw, json) Hash identifier: gkx8EvQeQg096F3pqsOUFmwDLpMQyvgvQfEGBtDcBFg= Subject key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F0A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 12:48:17 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 45.89.176.0/22 IP: 45.157.88.0/22 IP: 134.236.0.0/16 IP: 147.78.152.0/22 IP: 159.192.0.0/16 IP: 192.145.20.0/22 IP: 209.15.96.0/19 Validation: Failed, certificate revoked on Tue 02 Dec 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28426 (0x6f0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 28 12:48:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:a1:2b:92:6c:2f:0e:78:d2:2a:fb:c9:ad: b9:a4:79:5b:88:a5:29:ef:fe:e6:dc:c0:66:08:9f: d9:aa:9d:a6:ae:70:06:06:64:96:72:d6:62:46:f8: a4:e7:2e:b3:78:c3:b0:2e:8b:76:66:14:dd:97:53: 82:09:6a:5b:37:5b:aa:b5:81:e2:b2:49:34:ff:00: 5f:99:a1:11:7b:d0:ae:ef:45:55:92:f0:41:bc:46: 0d:4b:61:ef:3e:f1:ae:be:d0:cf:38:b2:63:27:5f: 10:d1:9c:8a:7a:4e:fa:23:c2:62:17:fe:e4:01:8f: d2:52:1a:ec:dc:7e:f9:84:8d:bd:a6:ff:d0:66:c6: 03:fa:ec:b0:c0:dd:8e:10:63:bd:63:54:71:93:0d: 22:5a:fa:04:2e:6f:98:6a:e7:49:bb:80:02:93:de: 5f:9b:7c:75:8d:d0:cc:ae:a2:fa:d6:d0:2a:6d:e6: d7:5f:89:c0:a8:af:d1:97:01:f3:72:f0:87:41:bb: 67:e0:8f:5e:62:1a:3d:2e:f3:61:46:c6:3b:1f:10: a7:75:fb:53:ad:28:86:0f:41:a7:15:b9:d5:37:56: f3:f2:13:e8:fc:32:1e:19:cd:b3:a4:e4:b6:6d:60: 03:68:7b:d0:44:b8:e2:67:8f:a7:85:c0:de:35:70: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.89.176.0/22 45.157.88.0/22 134.236.0.0/16 147.78.152.0/22 159.192.0.0/16 192.145.20.0/22 209.15.96.0/19 Signature Algorithm: sha256WithRSAEncryption 15:33:ef:9e:ca:46:6e:e5:94:3a:f7:25:9a:fb:61:37:dc:ad: 62:c8:4c:ec:b8:49:a3:69:0b:7c:4a:ba:de:ab:7f:8b:f3:b5: 91:45:e0:5e:27:d3:24:fd:8c:0d:17:ec:19:ec:81:92:de:a0: e5:33:ae:57:54:63:ce:94:5e:95:63:2b:08:26:2b:4b:9a:2a: 95:c9:62:ab:88:8c:1d:34:e7:cf:f2:17:ef:41:0e:d9:66:1b: 02:43:f6:f3:ea:b6:ec:e4:88:76:44:dc:e9:63:d9:c5:98:db: ce:1a:59:bf:91:dd:36:2b:3e:47:fd:3f:f9:07:3b:a4:4d:82: 95:81:b8:55:d3:ee:98:68:65:42:8f:1e:14:e4:73:8c:3f:db: 2d:60:2d:79:58:73:1c:81:d3:70:76:0a:e3:fc:ca:0d:bb:2d: 01:8a:38:c8:64:a1:0d:34:62:26:e1:db:ed:1b:05:77:36:f3: e0:30:3c:d9:77:00:fb:c1:5c:f2:93:a8:31:2d:b2:af:c1:47: 27:48:e9:58:c3:c4:5e:9f:36:7c:5e:4d:a3:93:e0:83:9a:27: 49:5e:e7:e5:0d:cf:1d:f3:b9:d4:96:8e:fd:82:a0:5e:a3:6b: e8:c8:97:a0:eb:8a:ee:30:64:83:43:5a:a5:6b:d6:a1:73:17: eb:ea:6b:e5 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgICbwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI4MTI0ODE3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyNTQ3NTExMC8GA1UEBRMoREU5RDY0MDE2MjkxRUEyQTE2RjNCNzk1 NkEwRjQwMzVCNzA5RTU0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMDEoSuSbC8OeNIq+8mtuaR5W4ilKe/+5tzAZgif2aqdpq5wBgZklnLWYkb4pOcu s3jDsC6LdmYU3ZdTgglqWzdbqrWB4rJJNP8AX5mhEXvQru9FVZLwQbxGDUth7z7x rr7QzziyYydfENGcinpO+iPCYhf+5AGP0lIa7Nx++YSNvab/0GbGA/rssMDdjhBj vWNUcZMNIlr6BC5vmGrnSbuAApPeX5t8dY3QzK6i+tbQKm3m11+JwKiv0ZcB83Lw h0G7Z+CPXmIaPS7zYUbGOx8Qp3X7U60ohg9BpxW51TdW8/IT6PwyHhnNs6Tktm1g A2h70ES44mePp4XA3jVwsxECAwEAAaOCAxUwggMRMB0GA1UdDgQWBBTenWQBYpHq Khbzt5VqD0A1twnlRzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvOEQ5NDcxRjYyOTA2MTFFNTkzQkZDNjI2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1NDc1LzhEOTQ3MUY2MjkwNjExRTU5M0JGQzYyNkM0RjlBRTAyLzNwMWtBV0tS NmlvVzg3ZVZhZzlBTmJjSjVVYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBBBggrBgEFBQcBBwEB/wQyMDAw LgQCAAEwKAMEAi1ZsAMEAi2dWAMDAIbsAwQCk06YAwMAn8ADBALAkRQDBAXRD2Aw DQYJKoZIhvcNAQELBQADggEBABUz757KRm7llDr3JZr7YTfcrWLITOy4SaNpC3xK ut6rf4vztZFF4F4n0yT9jA0X7BnsgZLeoOUzrldUY86UXpVjKwgmK0uaKpXJYquI jB0058/yF+9BDtlmGwJD9vPqtuzkiHZE3Olj2cWY284aWb+R3TYrPkf9P/kHO6RN gpWBuFXT7phoZUKPHhTkc4w/2y1gLXlYcxyB03B2CuP8yg27LQGKOMhkoQ00Yibh 2+0bBXc28+AwPNl3APvBXPKTqDEtsq/BRydI6VjDxF6fNnxeTaOT4IOaJ0le5+UN zx3zudSWjv2CoF6ja+jIl6Driu4wZINDWqVr1qFzF+vqa+U= -----END CERTIFICATE-----Generated at Thu Jan 1 15:56:53 2026 by rpki-client