This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pdbCtxHKKQNClkNM23U-ro5DwA.cer File: 9pdbCtxHKKQNClkNM23U-ro5DwA.cer (raw, json) Hash identifier: gDvuAWsp+gKr8AtVHwHkulCv0XZNT5cBhzRKoBYRolk= Subject key identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FC6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft caRepository: rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 05:16:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.86.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28614 (0x6fc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 8 05:16:23 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A913FA2D, serialNumber=F6975B0ADC4728A40D0A590D336DD4FABA390F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5d:02:6a:f5:37:10:0f:a4:18:83:77:cb:3d: 5c:79:23:bf:bb:9d:c4:e7:e8:77:40:e8:87:81:64: 82:06:0e:31:91:7e:4b:24:7f:54:6d:61:c5:51:9a: 9b:f9:55:73:92:e3:d3:e9:51:0b:3f:32:89:f1:d8: 76:3e:3a:7c:ea:b3:76:8f:b4:5e:30:73:ac:1d:75: 68:c1:de:15:f8:6f:63:ac:68:00:1a:73:1b:8e:b7: f9:9d:1b:a2:e0:9e:30:3e:d1:1c:71:65:fe:a1:29: 73:7f:c1:04:9e:28:aa:15:1a:7f:47:3d:30:52:a9: 61:74:98:28:ca:de:f7:d7:6f:48:d6:c3:16:27:0f: d6:99:b9:0c:4f:f3:c9:cb:0e:33:23:15:2e:ac:05: a2:9a:8b:1f:77:f5:80:f5:49:0e:67:4f:3f:d8:d2: 7c:f4:36:9a:a7:81:89:56:65:be:8c:6b:a8:42:e3: 4b:e7:84:92:4a:f5:6d:da:fc:b4:59:44:ac:08:67: b8:43:79:6a:5c:6e:bf:00:1f:14:f0:5c:c4:28:c6: ff:90:56:51:e6:c7:1c:55:0b:f2:2b:96:2a:af:b4: b0:8c:23:d5:3d:89:05:68:44:82:34:c8:1e:9c:8a: 3b:63:be:b5:e1:e1:77:ec:da:86:20:8c:f4:57:4f: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:97:5B:0A:DC:47:28:A4:0D:0A:59:0D:33:6D:D4:FA:BA:39:0F:00 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/0778E4A8D3F511F09E97AD4CC4F9AE02/9pdbCtxHKKQNClkNM23U-ro5DwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.86.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:7a:d9:c7:22:02:24:47:ad:4b:0b:de:a0:49:27:9d:ba:fe: ee:e3:78:81:b4:6a:7c:51:61:1f:68:0a:3d:f4:17:bd:46:a6: d6:d7:ba:20:ab:7f:d0:30:ac:63:1d:f7:00:69:be:11:5c:f8: a6:68:e6:26:9b:69:8d:a8:ce:fc:7c:11:cc:2a:6e:14:50:80: 4e:22:6d:44:53:c3:ab:99:93:b6:ba:15:5f:68:4f:b0:1b:42: 1e:1f:25:3f:20:d2:c2:a3:ab:0b:05:1a:60:1a:f9:1d:2c:1e: 1a:91:bc:9e:85:29:63:34:66:08:66:97:c2:27:9a:2b:ba:46: 7b:f7:fb:c4:5d:9b:34:c3:34:69:ea:ce:cc:59:4a:16:49:c1: 3e:a7:5f:3d:22:fe:1e:9a:5c:4b:41:d2:c0:87:27:9a:a0:7f: 3f:b2:51:77:db:b4:1a:13:85:d9:df:14:5d:72:a7:de:b1:01: 64:5b:54:45:78:23:c1:0f:8c:ca:f5:09:e8:f5:77:8b:5f:32: 9d:3a:ab:2c:8e:08:de:0c:09:5c:70:e8:ed:56:49:46:d4:9a: 24:49:0e:a4:0d:f7:7b:9e:15:da:fe:f7:83:6e:13:f8:ea:6d: 28:0f:56:65:65:ba:e4:99:8e:7e:c6:36:56:9d:82:75:d3:db: b5:89:d2:d8 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA4MDUxNjIzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzRkEyRDExMC8GA1UEBRMoRjY5NzVCMEFEQzQ3MjhBNDBEMEE1OTBE MzM2REQ0RkFCQTM5MEYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOddAmr1NxAPpBiDd8s9XHkjv7udxOfod0Doh4FkggYOMZF+SyR/VG1hxVGam/lV c5Lj0+lRCz8yifHYdj46fOqzdo+0XjBzrB11aMHeFfhvY6xoABpzG463+Z0bouCe MD7RHHFl/qEpc3/BBJ4oqhUaf0c9MFKpYXSYKMre99dvSNbDFicP1pm5DE/zycsO MyMVLqwFopqLH3f1gPVJDmdPP9jSfPQ2mqeBiVZlvoxrqELjS+eEkkr1bdr8tFlE rAhnuEN5alxuvwAfFPBcxCjG/5BWUebHHFUL8iuWKq+0sIwj1T2JBWhEgjTIHpyK O2O+teHhd+zahiCM9FdPO6sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT2l1sK3Eco pA0KWQ0zbdT6ujkPADAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0ZBMkQvMDc3OEU0QThEM0Y1MTFGMDlFOTdBRDRDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNGQTJELzA3NzhFNEE4RDNGNTExRjA5RTk3QUQ0Q0M0RjlBRTAyLzlwZGJDdHhI S0tRTkNsa05NMjNVLXJvNUR3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPVjANBgkqhkiG9w0BAQsFAAOCAQEATXrZxyICJEetSwveoEkn nbr+7uN4gbRqfFFhH2gKPfQXvUam1te6IKt/0DCsYx33AGm+EVz4pmjmJptpjajO /HwRzCpuFFCATiJtRFPDq5mTtroVX2hPsBtCHh8lPyDSwqOrCwUaYBr5HSweGpG8 noUpYzRmCGaXwieaK7pGe/f7xF2bNMM0aerOzFlKFknBPqdfPSL+HppcS0HSwIcn mqB/P7JRd9u0GhOF2d8UXXKn3rEBZFtURXgjwQ+MyvUJ6PV3i18ynTqrLI4I3gwJ XHDo7VZJRtSaJEkOpA33e54V2v73g24T+OptKA9WZWW65JmOfsY2Vp2CddPbtYnS 2A== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:31 2025 by rpki-client