This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer (raw, json) Hash identifier: slhoekA9f1WDUal1v+jjD9yOJDrDU2a9rezvLa2raz4= Subject key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7047 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 01:36:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.132.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28743 (0x7047) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 16 01:36:13 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:c0:39:73:72:ef:1a:cd:f6:f8:90:ad:bd: 50:73:8d:8d:e2:de:d9:ae:dd:ea:36:34:ff:66:b6: 53:12:98:41:cf:c9:ad:f7:cc:be:26:81:46:90:34: 34:ae:19:f0:0d:1d:a1:ca:07:60:c0:d5:69:41:7c: 2d:52:3c:0b:9a:9b:c7:85:59:65:00:0c:27:f5:5b: 8b:8b:4d:0d:9c:ac:bf:7f:49:f4:18:b2:4c:ee:c2: 49:99:67:1e:af:0d:6b:8a:8e:54:1c:c0:5d:45:8e: da:96:5d:53:00:ab:e3:8b:e2:7f:ee:97:2d:61:b2: df:2f:be:e4:39:f8:37:c2:4c:59:4c:d9:8d:72:a8: 6f:a2:5c:43:e1:7a:55:9c:cf:43:47:05:fe:4b:61: c4:22:a8:02:aa:a4:a5:40:66:fc:62:bc:3b:e9:38: f6:e2:6a:71:dd:a2:02:5e:a1:1f:9a:ae:23:3c:ab: cd:bb:af:b1:af:52:52:1f:46:3e:a9:03:59:f1:18: 2e:f3:d8:b0:f0:b7:c4:f2:27:1f:12:f0:67:a4:3f: f0:4f:c0:2b:02:1b:42:65:0c:ab:28:c2:0f:a1:97: 6a:83:8e:3c:46:de:6f:77:83:89:fe:b7:11:68:57: 15:4b:ce:02:89:41:24:b5:59:76:06:6d:3d:17:74: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.132.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:44:62:cd:c4:34:8e:6b:51:28:33:2e:ad:36:63:33:25:dd: 5b:63:87:d2:31:71:a6:e7:fa:ed:0e:2e:8e:c9:5c:3d:62:23: 71:4f:64:05:13:8b:b1:29:03:ba:71:00:f3:dd:14:53:d8:97: 43:ec:52:68:0d:c2:81:8d:4e:52:bb:db:fb:f5:df:fa:a8:e5: 5d:bb:d9:75:78:27:2f:bd:34:de:19:90:9c:37:f2:67:a0:6b: 46:c6:35:fb:c7:ad:15:57:7c:bd:18:86:dd:99:1c:03:f3:1a: a7:bf:3c:b5:7c:12:fc:e3:92:db:d7:32:51:27:9f:80:ab:2e: ae:b9:67:84:3d:a0:4a:c4:48:27:a1:53:6e:67:56:b6:c4:78: 06:18:78:2b:5a:a9:ee:f4:9a:3d:9e:9f:71:ec:86:e6:88:eb: 89:52:f7:87:e1:13:27:ca:2a:aa:f4:10:0f:f2:94:75:26:7d: f7:f6:54:e6:f6:16:59:be:52:d2:28:1d:7b:01:8b:0c:a9:38: e8:c8:b5:d0:15:ff:48:c2:a2:28:e5:3d:06:a8:36:67:9a:18: a3:c8:87:f3:8b:7d:cf:72:5e:27:28:0f:88:13:30:b8:96:83: 38:9e:ab:a8:ef:ec:e2:31:70:3b:74:1f:ec:52:29:01:13:b3: ad:23:0b:97 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE2MDEzNjEzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1MTlDQzExMC8GA1UEBRMoMUIzNjgzNTI1OTQ0Nzc0Mzg4ODUzMDkw RDEwMDVCQjUxNTUyMjQ2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMkywDlzcu8azfb4kK29UHONjeLe2a7d6jY0/2a2UxKYQc/JrffMviaBRpA0NK4Z 8A0docoHYMDVaUF8LVI8C5qbx4VZZQAMJ/Vbi4tNDZysv39J9BiyTO7CSZlnHq8N a4qOVBzAXUWO2pZdUwCr44vif+6XLWGy3y++5Dn4N8JMWUzZjXKob6JcQ+F6VZzP Q0cF/kthxCKoAqqkpUBm/GK8O+k49uJqcd2iAl6hH5quIzyrzbuvsa9SUh9GPqkD WfEYLvPYsPC3xPInHxLwZ6Q/8E/AKwIbQmUMqyjCD6GXaoOOPEbeb3eDif63EWhX FUvOAolBJLVZdgZtPRd0KssCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQbNoNSWUR3 Q4iFMJDRAFu1FVIkbTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE5Q0MvOTkxNEI4RTREQTFGMTFGMEFCODIwRkY3ODREMzY0MUQvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUxOUNDLzk5MTRCOEU0REExRjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxF ZDBPSWhUQ1EwUUJidFJWU0pHMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPhDANBgkqhkiG9w0BAQsFAAOCAQEAikRizcQ0jmtRKDMurTZj MyXdW2OH0jFxpuf67Q4ujslcPWIjcU9kBROLsSkDunEA890UU9iXQ+xSaA3CgY1O Urvb+/Xf+qjlXbvZdXgnL7003hmQnDfyZ6BrRsY1+8etFVd8vRiG3ZkcA/Map788 tXwS/OOS29cyUSefgKsurrlnhD2gSsRIJ6FTbmdWtsR4Bhh4K1qp7vSaPZ6fceyG 5ojriVL3h+ETJ8oqqvQQD/KUdSZ99/ZU5vYWWb5S0igdewGLDKk46Mi10BX/SMKi KOU9Bqg2Z5oYo8iH84t9z3JeJygPiBMwuJaDOJ6rqO/s4jFwO3Qf7FIpAROzrSML lw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:11 2025 by rpki-client