This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer (raw, json) Hash identifier: JmR+wyLpdgInA60ulONJQ8pnFdJGYSCcVTex9SODyQU= Subject key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 701F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 19:21:44 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 139.230.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28703 (0x701f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 12 19:21:44 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:11:8b:16:81:0e:c4:8b:f4:be:a4:d2:68: 16:08:ca:6f:58:2a:d4:3c:d2:14:5c:9d:5a:de:ab: 80:e5:04:b1:b8:78:86:bd:7d:ef:00:48:03:4b:dc: 30:6e:56:5f:6a:cd:62:bf:79:0e:8c:b5:3f:c1:4c: ba:d4:f2:b5:6f:00:79:8b:a2:89:d7:ab:00:0e:80: 54:ac:5f:0d:fc:c4:fc:fb:fc:ac:b4:53:16:a3:cb: bf:53:66:7d:45:f8:fc:3a:ce:8d:e5:da:75:c1:b5: 5d:a4:10:c5:38:90:29:8f:d2:5b:cd:0c:5f:c4:6b: 5d:d0:26:c9:f6:9d:e9:ab:7f:2d:97:bc:0d:4b:23: 1c:7b:e1:7f:1f:08:97:35:1d:87:69:35:11:f3:34: de:70:8c:f6:80:f5:a9:18:15:6b:7b:77:79:c5:c7: 31:bb:90:a7:76:37:5c:04:2c:d6:69:4e:24:6f:1b: 4c:93:6e:43:c8:68:f8:7f:dc:ef:04:07:1f:1f:d5: 58:fb:74:4a:d4:a8:e5:84:9c:ae:9d:00:5a:a5:2b: 8e:4f:6d:8b:de:ca:a5:e7:42:35:f7:92:fc:a8:be: 2f:c0:13:d0:1d:92:71:fa:76:6c:d9:fe:ac:c1:1b: d1:9e:d3:d8:ae:6b:2c:dc:0d:56:50:f2:c2:02:0c: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:84:57:f8:c4:01:c9:70:15:36:58:d9:5e:2c:48:b1:98:2f: 52:1e:76:f2:93:62:83:f4:3b:d9:48:00:79:41:28:ee:0f:8b: d6:aa:98:56:e8:e5:bb:32:b1:46:1c:12:cb:e3:55:28:73:b1: fd:cb:24:52:20:c1:a8:c7:25:e9:91:41:8e:2d:f5:98:30:8c: 6f:d2:1c:2c:13:0f:b0:21:62:2e:fe:18:ba:3f:ec:3d:17:c9: e3:3f:8c:f2:f8:c5:c0:82:40:b4:21:f3:17:ad:fa:c6:de:28: bd:21:53:6b:d0:2c:84:9e:d5:b3:6d:cb:56:1e:6e:33:4a:01: c3:13:bc:1b:a3:4b:fa:19:ad:d1:b8:f3:af:8d:18:55:9e:92: 73:c5:45:17:76:c2:f9:1f:8a:2d:0e:ad:b6:b2:b7:c9:3e:a7: 5f:df:5f:4e:ea:31:d3:27:6b:26:e7:30:3c:87:40:73:02:e7: 13:3f:e8:d7:d1:fc:70:47:ee:21:b6:11:6c:5b:5f:4d:b8:21: ec:47:90:42:40:76:a4:e4:d4:dd:ee:9a:cc:e0:c9:81:a0:04: c5:45:65:58:4f:dd:85:ea:07:61:79:b1:89:e9:f6:3c:a3:7f: 86:ff:0f:cc:92:06:dd:1f:7e:91:3c:97:42:99:f8:fc:19:8f: 95:c6:3b:77 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICcB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjEyMTkyMTQ0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGMEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1 Mzk0RURCM0UyMERCRUU5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOKjEYsWgQ7Ei/S+pNJoFgjKb1gq1DzSFFydWt6rgOUEsbh4hr197wBIA0vcMG5W X2rNYr95Doy1P8FMutTytW8AeYuiiderAA6AVKxfDfzE/Pv8rLRTFqPLv1NmfUX4 /DrOjeXadcG1XaQQxTiQKY/SW80MX8RrXdAmyfad6at/LZe8DUsjHHvhfx8IlzUd h2k1EfM03nCM9oD1qRgVa3t3ecXHMbuQp3Y3XAQs1mlOJG8bTJNuQ8ho+H/c7wQH Hx/VWPt0StSo5YScrp0AWqUrjk9ti97KpedCNfeS/Ki+L8AT0B2Scfp2bNn+rMEb 0Z7T2K5rLNwNVlDywgIMcNUCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQKPHs4SZbh r1eVhUU5Tts+INvunjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBDNDUvODc2ODMwQjg4OTJFMTFGMDk3QUM2NjJGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYwQzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1X NGE5WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAIvmMA0GCSqGSIb3DQEBCwUAA4IBAQBFhFf4xAHJcBU2WNleLEix mC9SHnbyk2KD9DvZSAB5QSjuD4vWqphW6OW7MrFGHBLL41Uoc7H9yyRSIMGoxyXp kUGOLfWYMIxv0hwsEw+wIWIu/hi6P+w9F8njP4zy+MXAgkC0IfMXrfrG3ii9IVNr 0CyEntWzbctWHm4zSgHDE7wbo0v6Ga3RuPOvjRhVnpJzxUUXdsL5H4otDq22srfJ Pqdf319O6jHTJ2sm5zA8h0BzAucTP+jX0fxwR+4hthFsW19NuCHsR5BCQHak5NTd 7prM4MmBoATFRWVYT92F6gdhebGJ6fY8o3+G/w/MkgbdH36RPJdCmfj8GY+Vxjt3 -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:46 2025 by rpki-client