This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer File: 7KeHdUGmkz3VBhpsggg9O4ORXIU.cer (raw, json) Hash identifier: yCZWzL6BgrfC0vSLbl+k9HRum331aKa6YPJA1olrtjI= Subject key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7012 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 10:53:22 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 157.85.112.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28690 (0x7012) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 12 10:53:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:38:78:ee:49:09:c6:7b:1b:6b:29:05:05: f6:b9:1c:ed:e4:db:04:39:bd:9b:85:d2:f4:79:e8: bc:59:2a:90:a0:a8:30:bf:05:8e:d7:79:83:5a:77: 61:fd:c3:ac:e5:b7:c2:53:85:27:a0:ba:50:82:9c: 6a:e6:21:88:18:8e:fb:85:8a:8b:4a:7f:58:fd:51: 61:8d:d4:18:28:26:e1:f7:b7:54:c3:7c:3a:73:fe: 63:9b:4a:7f:5d:98:fe:15:d8:8f:2c:19:6e:61:8c: 9c:a5:59:a8:a6:d7:74:d5:3a:e9:bf:bf:a7:ce:22: 1f:c7:51:05:7b:77:85:7c:00:2b:44:4c:c9:49:04: c6:c9:c6:46:0e:92:4d:62:59:44:09:ea:f9:a3:f0: 33:ff:89:6f:31:fc:9d:eb:09:9f:f3:1a:7b:f6:02: 85:d2:c2:ee:2d:ae:6c:26:fa:60:a6:45:36:7d:00: 43:4c:dd:1e:e0:d6:b9:9d:ae:c4:61:da:f2:53:ff: f4:a3:ce:63:e3:7c:7d:a4:54:8e:5b:cc:44:48:23: ef:c4:ff:f4:6e:ec:a4:5c:9e:1a:70:0d:24:c0:2f: b8:3d:be:f2:c5:a7:67:da:61:51:6e:91:9c:0d:ec: 75:6a:64:2e:01:6a:5b:bd:be:fe:a8:6a:0e:65:47: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.85.112.0/20 Signature Algorithm: sha256WithRSAEncryption 48:d3:6a:8c:23:8c:e7:2f:31:82:bb:e3:e1:41:fd:f4:53:90: 5c:54:16:7c:9b:c3:c4:49:d8:4e:2c:04:43:48:eb:45:e9:a0: 00:61:f1:da:f7:e0:45:63:9a:a9:60:f9:3e:fd:18:ad:f2:8f: a1:34:fc:bd:c6:64:35:2c:6f:5f:d9:c3:54:89:00:46:64:2e: 60:f3:3d:01:db:6c:9e:44:d4:ba:59:b7:42:cc:97:a4:02:cc: ae:34:b0:ec:24:53:e6:bd:f3:bd:e9:1c:71:3f:8b:4f:b9:c1: 05:a3:53:46:c5:f1:97:f1:00:35:9b:90:e0:bc:55:c0:48:23: 1f:17:83:16:03:75:f1:b1:fa:da:b6:8f:70:48:40:f0:51:15: 55:c7:41:3b:9c:e4:0f:4f:2d:90:6a:1c:45:06:8d:c1:f6:c4: 69:c2:2f:2b:4d:f8:0a:ef:bf:30:54:cc:80:15:5b:c7:7a:c6: e3:d7:22:3d:d9:ac:78:d1:08:4d:5d:36:ff:df:6a:26:b9:e3: 4c:89:f8:18:35:b9:4a:61:86:db:a2:c6:7c:08:d8:2d:cc:1a: 50:45:05:ab:4e:73:d6:8c:d5:67:d4:5c:3f:df:a3:f0:bb:3c: 4f:3c:c5:1b:d2:00:31:38:71:10:3f:27:ba:05:3c:34:76:ef: 8e:e7:b0:01 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjEyMTA1MzIyWhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0MjEyNzExMC8GA1UEBRMoRUNBNzg3NzU0MUE2OTMzREQ1MDYxQTZD ODIwODNEM0I4MzkxNUM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKlWOHjuSQnGextrKQUF9rkc7eTbBDm9m4XS9HnovFkqkKCoML8Fjtd5g1p3Yf3D rOW3wlOFJ6C6UIKcauYhiBiO+4WKi0p/WP1RYY3UGCgm4fe3VMN8OnP+Y5tKf12Y /hXYjywZbmGMnKVZqKbXdNU66b+/p84iH8dRBXt3hXwAK0RMyUkExsnGRg6STWJZ RAnq+aPwM/+JbzH8nesJn/Mae/YChdLC7i2ubCb6YKZFNn0AQ0zdHuDWuZ2uxGHa 8lP/9KPOY+N8faRUjlvMREgj78T/9G7spFyeGnANJMAvuD2+8sWnZ9phUW6RnA3s dWpkLgFqW72+/qhqDmVHjLMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTsp4d1QaaT PdUGGmyCCD07g5FchTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIxMjcvQzQ4RkE4RkFENzQ4MTFGMEJBMUIwRDlFNkJEMzY0MUQvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQyMTI3L0M0OEZBOEZBRDc0ODExRjBCQTFCMEQ5RTZCRDM2NDFELzdLZUhkVUdt a3ozVkJocHNnZ2c5TzRPUlhJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBJ1VcDANBgkqhkiG9w0BAQsFAAOCAQEASNNqjCOM5y8xgrvj4UH9 9FOQXFQWfJvDxEnYTiwEQ0jrRemgAGHx2vfgRWOaqWD5Pv0YrfKPoTT8vcZkNSxv X9nDVIkARmQuYPM9AdtsnkTUulm3QsyXpALMrjSw7CRT5r3zvekccT+LT7nBBaNT RsXxl/EANZuQ4LxVwEgjHxeDFgN18bH62raPcEhA8FEVVcdBO5zkD08tkGocRQaN wfbEacIvK034Cu+/MFTMgBVbx3rG49ciPdmseNEITV02/99qJrnjTIn4GDW5SmGG 26LGfAjYLcwaUEUFq05z1ozVZ9RcP9+j8Ls8TzzFG9IAMThxED8nugU8NHbvjuew AQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:11 2025 by rpki-client