This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.cer (raw, json) Hash identifier: erx8+z83FNrtpF1hjS7sCL5cx9XcK/DEuxNk77eH9w8= Subject key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7044 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 20:07:10 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 165.84.240.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28740 (0x7044) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 15 20:07:10 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:f9:ba:10:1c:4c:ff:e0:fe:b1:cd:46:10: d3:f5:a4:b5:b8:e3:89:b7:90:fe:81:26:a5:44:e2: 59:6a:89:1d:f7:92:8d:68:8c:61:be:d1:b9:51:21: 39:e2:1d:55:d5:cd:5f:96:0b:98:f2:d1:c9:3d:fc: ff:35:60:84:15:ee:96:35:8a:3c:7b:4c:e0:bc:c7: 43:06:27:cb:a6:ba:d3:e8:45:74:b3:73:a1:75:d3: d2:a2:19:ab:3f:b2:dc:5f:42:0a:87:c3:42:c6:e5: ec:fd:e2:41:a2:77:c2:8a:07:47:7d:5d:9f:6e:aa: 1d:ac:83:53:2a:24:7b:af:15:9f:eb:ca:e4:89:01: e1:6b:bb:44:4e:3c:46:63:d7:15:b3:e3:83:c2:13: 26:b2:2c:32:31:d7:5d:bb:44:a7:9f:27:a1:95:05: 14:f2:04:ff:f9:64:41:7b:9d:28:95:9a:b6:5e:e0: 37:f6:4e:8a:6d:50:40:22:86:d5:71:b7:c5:19:c0: 84:8b:61:ff:3f:9c:60:70:8c:0e:c4:b7:9a:e5:3b: 92:b9:41:88:a1:77:8c:5e:77:32:19:17:76:30:40: 99:1a:a5:92:3a:f3:99:b7:94:5e:22:b5:03:4f:6e: bd:4b:f3:10:f5:4c:0b:0c:4e:a3:4a:65:6d:68:26: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.84.240.0/20 Signature Algorithm: sha256WithRSAEncryption b0:7c:14:36:be:57:ce:b8:f3:8c:6f:1d:9a:20:34:bd:c9:14: 2d:67:cc:a4:f0:13:8d:87:a4:00:e9:b7:e2:42:64:ac:41:0c: 89:0c:90:00:b9:f5:b3:50:0a:55:06:66:3d:64:6f:b2:d4:ba: e3:73:26:4d:73:2c:cc:be:47:9c:4f:45:61:46:c1:d1:80:7d: 8e:3f:72:91:f7:66:e0:27:e9:c1:c6:17:e1:a4:0e:0b:20:0d: 87:6e:13:1c:63:79:e7:f5:e7:ba:be:7b:d8:8b:c6:62:09:c5: 53:e0:6c:eb:6a:7a:9e:db:64:58:db:c7:58:2d:77:22:2f:b9: 01:ad:d4:4e:ce:1c:a5:2f:7a:5e:b7:74:56:9e:91:99:67:74: 5b:0c:dc:54:d8:5d:9a:a4:db:fe:79:77:c5:e1:4c:fe:83:b8: f2:df:38:36:23:87:e8:20:62:45:55:d3:ea:20:fb:1c:be:3b: 4f:66:51:4e:c4:37:a1:b1:07:1b:c9:9c:d3:56:b7:68:b0:99: be:98:0e:c9:73:63:98:06:92:bb:6f:38:54:d3:ce:a3:81:4f: 32:60:89:9a:4f:05:23:5d:a7:94:00:cd:95:3f:66:bb:c8:47: 85:13:4a:a5:19:8c:fe:a2:6c:9a:3f:98:61:6b:07:e4:4d:4f: 7f:3b:8a:e0 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE1MjAwNzEwWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFEOTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRD NTYwMzA1MEYxNERDM0Y0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ8T+boQHEz/4P6xzUYQ0/WktbjjibeQ/oEmpUTiWWqJHfeSjWiMYb7RuVEhOeId VdXNX5YLmPLRyT38/zVghBXuljWKPHtM4LzHQwYny6a60+hFdLNzoXXT0qIZqz+y 3F9CCofDQsbl7P3iQaJ3wooHR31dn26qHayDUyoke68Vn+vK5IkB4Wu7RE48RmPX FbPjg8ITJrIsMjHXXbtEp58noZUFFPIE//lkQXudKJWatl7gN/ZOim1QQCKG1XG3 xRnAhIth/z+cYHCMDsS3muU7krlBiKF3jF53MhkXdjBAmRqlkjrzmbeUXiK1A09u vUvzEPVMCwxOo0plbWgmGe0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTnBgEqEGvQ lGWOYExWAwUPFNw/TDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDk0Q0QvMkNEN0ZEMEU5RUM4MTFGMDhDRDJBQzdCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ5NENELzJDRDdGRDBFOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJy MEpSbGptQk1WZ01GRHhUY1Awdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBKVU8DANBgkqhkiG9w0BAQsFAAOCAQEAsHwUNr5XzrjzjG8dmiA0 vckULWfMpPATjYekAOm34kJkrEEMiQyQALn1s1AKVQZmPWRvstS643MmTXMszL5H nE9FYUbB0YB9jj9ykfdm4CfpwcYX4aQOCyANh24THGN55/Xnur572IvGYgnFU+Bs 62p6nttkWNvHWC13Ii+5Aa3UTs4cpS96Xrd0Vp6RmWd0WwzcVNhdmqTb/nl3xeFM /oO48t84NiOH6CBiRVXT6iD7HL47T2ZRTsQ3obEHG8mc01a3aLCZvpgOyXNjmAaS u284VNPOo4FPMmCJmk8FI12nlADNlT9mu8hHhRNKpRmM/qJsmj+YYWsH5E1PfzuK 4A== -----END CERTIFICATE-----Generated at Fri Dec 19 23:18:02 2025 by rpki-client