This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer (raw, json) Hash identifier: MHynO8DIn4KXIP76no7c7PvDbn4XRiVNvJvZ1WROtG4= Subject key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7089 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 05:38:46 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 45.146.112.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28809 (0x7089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 19 05:38:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:b6:18:0e:56:f5:60:6c:eb:dc:f4:72:64: 7b:18:5b:7c:34:cf:ff:18:ac:c3:26:07:43:22:0e: 1a:db:a6:de:ca:f0:b5:53:f4:2e:58:73:0f:3a:11: bb:0f:e0:f7:ae:85:2e:9a:0f:39:bc:19:c1:e6:8c: 35:29:4d:b0:d4:06:56:6d:c8:a4:5d:9e:27:31:63: e4:70:fc:51:0f:53:bd:ae:89:43:fe:25:77:da:03: c1:1e:1f:58:1d:21:e3:bb:02:ea:5f:60:f2:7e:1c: 2f:fb:85:c1:d3:bb:8b:57:30:66:83:91:50:30:17: 7b:5d:16:47:8b:d2:65:42:f3:71:85:5a:b2:5d:b9: 2b:47:1c:5a:4a:fc:93:ed:d9:df:d2:96:c2:0f:68: 9d:80:a0:d7:d5:8f:88:85:1e:f7:a9:43:e1:f4:f8: d8:34:22:1b:c5:01:25:26:27:df:85:5d:4e:20:b0: 91:3c:8c:40:fc:e2:a7:89:f2:fb:de:34:bc:66:32: 63:84:a2:ee:df:7c:53:d2:8f:19:d5:49:09:36:86: 04:80:0f:01:82:00:a1:9f:82:ba:15:99:88:a7:34: 66:52:61:13:c1:0d:78:82:08:8e:4c:75:ae:08:c7: 04:45:9c:03:e8:a0:e2:1c:4d:ac:2e:dd:33:b4:de: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.146.112.0/22 Signature Algorithm: sha256WithRSAEncryption bf:7e:53:aa:31:11:b0:57:13:97:65:28:c4:cd:e3:b0:1b:54: 8e:d6:f3:48:e5:91:1d:89:ed:0e:f4:ed:2c:43:e0:8e:b0:6a: c9:35:ae:6b:f4:b0:15:23:40:0b:31:af:33:df:6f:80:56:28: 15:50:1e:e8:02:73:3f:28:72:a7:af:9b:0e:a4:67:ac:02:94: 18:0e:af:23:79:8d:0e:76:0c:58:db:cd:dd:09:b0:c7:66:b4: 9d:a2:1b:06:d5:31:e5:a9:96:bc:35:6b:9b:58:1b:05:8b:3e: 70:b6:b9:df:23:79:39:5a:fb:cd:76:e6:2c:d6:09:11:a5:fc: 1e:c7:de:78:95:2b:52:49:2a:85:80:3a:78:fe:d3:e9:43:3f: af:80:46:3c:4e:da:ca:36:52:fc:6d:9c:5f:ad:d1:6b:40:41: b1:cb:b3:36:e7:10:7f:fd:95:21:87:4c:25:07:dc:cf:7c:22: f1:26:9a:d0:2b:45:8b:48:2d:63:11:9c:12:9a:54:6a:95:38: 1e:b0:c4:75:10:2a:3c:0f:e6:28:1e:74:64:bf:ee:3d:f9:98: 7e:17:99:0c:58:39:84:f8:5e:44:fb:5d:6c:68:d2:57:31:b3: 5a:10:f2:cd:cd:22:e9:48:0a:03:4a:97:6e:f3:be:e8:24:cd: ad:fe:28:a9 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE5MDUzODQ2WhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTExMkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5 NjNGNDA5RDQ1QUVBRjY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMDlthgOVvVgbOvc9HJkexhbfDTP/xiswyYHQyIOGtum3srwtVP0LlhzDzoRuw/g 966FLpoPObwZweaMNSlNsNQGVm3IpF2eJzFj5HD8UQ9Tva6JQ/4ld9oDwR4fWB0h 47sC6l9g8n4cL/uFwdO7i1cwZoORUDAXe10WR4vSZULzcYVasl25K0ccWkr8k+3Z 39KWwg9onYCg19WPiIUe96lD4fT42DQiG8UBJSYn34VdTiCwkTyMQPzip4ny+940 vGYyY4Si7t98U9KPGdVJCTaGBIAPAYIAoZ+CuhWZiKc0ZlJhE8ENeIIIjkx1rgjH BEWcA+ig4hxNrC7dM7Te5XkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQMWMaWnuZM QZGqtmlj9AnUWur2mDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJGRTEvRkIyOEQ5RjBEQzlDMTFGMDgxN0U4OTYxQTJFRTUyOEUvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEyRkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdt VEVHUnFyWnBZX1FKMUZycTlwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi2ScDANBgkqhkiG9w0BAQsFAAOCAQEAv35TqjERsFcTl2UoxM3j sBtUjtbzSOWRHYntDvTtLEPgjrBqyTWua/SwFSNACzGvM99vgFYoFVAe6AJzPyhy p6+bDqRnrAKUGA6vI3mNDnYMWNvN3Qmwx2a0naIbBtUx5amWvDVrm1gbBYs+cLa5 3yN5OVr7zXbmLNYJEaX8HsfeeJUrUkkqhYA6eP7T6UM/r4BGPE7ayjZS/G2cX63R a0BBscuzNucQf/2VIYdMJQfcz3wi8Saa0CtFi0gtYxGcEppUapU4HrDEdRAqPA/m KB50ZL/uPfmYfheZDFg5hPheRPtdbGjSVzGzWhDyzc0i6UgKA0qXbvO+6CTNrf4o qQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:32 2025 by rpki-client