This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer (raw, json) Hash identifier: 6a5EiSiN4M9XvUOqGWVLfZ8KZoOuYv8BCnHnT80S+DE= Subject key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FBB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 06 Dec 2025 11:04:25 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.94.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28603 (0x6fbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 6 11:04:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:17:10:bf:a1:4b:a8:b7:15:b5:e8:be:af: c1:81:aa:87:63:6a:46:03:bc:ce:0b:59:cc:dc:84: 77:0d:11:25:31:b1:a6:33:d5:2c:94:7c:a8:09:07: 7d:f2:ee:bd:79:48:e5:37:bf:92:19:dd:4b:6f:53: 62:8b:52:8e:fe:74:a6:08:6d:f7:7e:d2:db:85:5c: 8e:97:c7:17:a8:80:74:51:82:03:86:b0:f3:da:e2: 07:f2:18:b6:00:b6:e4:1e:98:1b:bc:f7:fb:6e:d6: 9e:47:35:77:e0:1c:2d:c3:79:29:26:85:48:ec:f8: f7:98:13:0e:e9:8b:ef:91:6d:9f:08:69:bc:74:9e: 3b:da:66:67:4a:2d:33:dd:5b:48:99:ac:41:04:d0: 7a:4f:f7:08:ee:20:7f:69:28:b3:57:f9:ce:b2:89: 3b:93:f0:ae:9c:a6:2b:65:8d:30:f6:04:4b:43:b5: 6a:ad:76:36:9f:3c:e0:92:ae:23:08:09:74:c6:30: fe:72:25:ef:01:22:2b:59:b3:a8:64:81:6e:20:8d: 86:48:03:d7:26:55:d6:b5:b3:93:59:4a:60:2d:95: e2:4e:4c:f3:cb:60:ec:16:5b:f9:06:3e:ac:3b:31: 86:05:0e:97:22:2b:e5:83:10:13:e9:6f:90:f4:c0: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.94.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:be:22:b2:c2:0a:8c:a3:4b:f4:14:3b:52:89:6e:d2:de:a7: 7c:92:1a:7d:77:21:7b:bd:33:8b:03:a9:20:6f:27:bd:10:28: bc:a7:a7:73:e0:0e:a5:58:f7:b9:bb:cd:80:6b:be:d8:86:f9: e8:fc:2e:11:2d:55:43:ff:e6:6f:73:97:fe:d2:66:14:48:34: eb:6d:e6:8c:6d:a9:4f:4b:83:33:c9:be:b0:74:cd:d3:4d:09: b4:aa:7c:cb:00:d2:84:04:b6:78:3d:39:1f:c0:9b:37:0b:27: a6:2c:80:8e:d9:4f:29:cc:ea:41:80:23:77:98:40:6e:14:fb: 4d:10:83:1d:7c:00:75:3d:46:18:6d:69:1c:69:98:4c:d2:ac: 50:f2:d2:7d:1c:ad:fb:93:d1:98:35:3b:d1:9b:47:ad:be:1d: b5:ae:cb:b7:70:58:98:9b:f8:22:38:fb:71:65:ca:17:10:9a: 16:96:7d:4b:41:1d:df:79:3c:83:2c:e3:75:27:3b:06:b6:c8: 52:f7:1c:38:ac:7f:ef:43:4e:16:81:d5:5b:a4:2a:aa:a5:4b: 34:d4:77:00:86:1d:a4:13:6b:7d:45:78:f7:50:c1:5d:60:db: 4a:88:3b:16:3e:7e:1b:5d:c9:ea:17:8b:da:16:cb:56:3d:7f: 7c:04:cb:05 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA2MTEwNDI1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFOUIzOTExMC8GA1UEBRMoMEIwRTRBNEVBQUQxNTBBM0Y2M0U2MTFC MDQ4NDMxMEZFNUZBRjk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANV1FxC/oUuotxW16L6vwYGqh2NqRgO8zgtZzNyEdw0RJTGxpjPVLJR8qAkHffLu vXlI5Te/khndS29TYotSjv50pght937S24VcjpfHF6iAdFGCA4aw89riB/IYtgC2 5B6YG7z3+27Wnkc1d+AcLcN5KSaFSOz495gTDumL75FtnwhpvHSeO9pmZ0otM91b SJmsQQTQek/3CO4gf2kos1f5zrKJO5PwrpymK2WNMPYES0O1aq12Np884JKuIwgJ dMYw/nIl7wEiK1mzqGSBbiCNhkgD1yZV1rWzk1lKYC2V4k5M88tg7BZb+QY+rDsx hgUOlyIr5YMQE+lvkPTAs10CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQLDkpOqtFQ o/Y+YRsEhDEP5fr5VDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlCMzkvNTFBRjlGNjZEMjkzMTFGMDlDODY1RDc3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU5QjM5LzUxQUY5RjY2RDI5MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJS VUtQMlBtRWJCSVF4RC1YNi1WUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIr8XjANBgkqhkiG9w0BAQsFAAOCAQEALr4issIKjKNL9BQ7Uolu 0t6nfJIafXche70ziwOpIG8nvRAovKenc+AOpVj3ubvNgGu+2Ib56PwuES1VQ//m b3OX/tJmFEg0623mjG2pT0uDM8m+sHTN000JtKp8ywDShAS2eD05H8CbNwsnpiyA jtlPKczqQYAjd5hAbhT7TRCDHXwAdT1GGG1pHGmYTNKsUPLSfRyt+5PRmDU70ZtH rb4dta7Lt3BYmJv4Ijj7cWXKFxCaFpZ9S0Ed33k8gyzjdSc7BrbIUvccOKx/70NO FoHVW6QqqqVLNNR3AIYdpBNrfUV491DBXWDbSog7Fj5+G13J6heL2hbLVj1/fATL BQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:32 2025 by rpki-client