This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer (raw, json) Hash identifier: zFFUTOA+iVM/vPffLtG+iQ3zKE/U8HIt2rgAS8VkXxw= Subject key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 704C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 04:22:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.134.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28748 (0x704c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 16 04:22:26 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:a6:e7:06:fd:f2:4b:ab:d5:a6:9d:24:de: 89:3a:1f:0b:7b:56:3a:2e:0f:00:75:5c:58:fa:f3: eb:57:65:5a:bd:6e:b3:ac:52:7f:ed:0e:4f:dd:1c: 0d:9c:ac:40:15:e3:af:e1:63:ab:dc:c3:8d:53:40: 3f:7b:d3:19:db:e3:be:b3:08:2a:10:84:f0:ef:de: ec:76:f1:6e:7a:fc:e8:12:61:c1:8f:1a:b8:62:f3: 3e:53:9f:fb:0d:7a:25:7a:6f:86:dc:0f:c5:e9:6c: 6a:18:bc:9f:30:b4:cd:f8:b8:48:72:30:15:a0:c0: 26:26:6e:48:46:db:13:c8:c4:96:53:28:0b:8f:11: 2f:ea:97:22:3e:4e:77:15:bd:0d:cc:9c:29:e1:39: 5d:5d:19:b5:11:30:0c:38:04:62:97:c7:1c:35:2a: b5:a9:ac:c2:4c:8a:cf:38:de:54:db:09:f8:a4:14: 0e:58:f1:3a:67:b9:54:fd:3b:c9:2a:ba:ca:ab:80: 24:4c:33:7d:d6:91:69:dc:c2:fc:b1:cc:63:ad:c6: 34:ad:3a:ef:4d:f0:78:43:3f:4f:ba:8a:05:db:89: 2b:5f:26:e5:45:41:da:b9:b9:e2:4d:81:59:3f:ae: 54:72:28:c7:3d:be:fd:c0:54:90:0d:5d:45:be:72: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.134.0/23 Signature Algorithm: sha256WithRSAEncryption 48:aa:60:87:34:ca:9c:7e:f3:c5:bf:d2:0f:f3:ba:cf:39:87: 4b:fc:8e:55:d8:00:1f:67:b7:87:c1:4d:58:e2:df:14:b7:1d: c8:69:7b:41:7c:de:c3:2e:54:af:71:79:fd:45:ab:2c:8f:16: 6b:fb:07:20:4d:da:04:ec:cf:57:05:6a:65:d6:51:09:95:8d: d1:64:49:24:50:4a:0e:5e:5c:95:e9:d5:da:f8:76:de:17:59: 78:7d:ea:e9:f8:40:19:37:65:db:14:cc:67:bf:6f:c3:d5:6a: 45:2a:8b:40:e9:3e:73:7f:bc:61:c1:e1:99:9b:df:44:c4:39: 42:74:42:f6:65:cf:d4:8b:ba:8b:96:90:17:1b:26:eb:91:78: a3:a5:39:0c:04:ee:8d:69:b2:61:eb:c5:9b:3b:4f:ee:54:e2: fb:e7:f9:62:ae:58:a7:ba:d2:b4:ab:c6:76:90:94:a4:a3:23: 76:c5:29:cb:7f:82:b4:8f:4f:f3:14:99:70:4e:54:58:f8:78: 18:17:d8:b7:20:d7:8f:e2:79:4e:01:e2:35:01:60:8b:9d:c1: 18:3a:ef:af:88:27:f7:e9:53:8c:31:da:a9:5e:9a:9d:79:4d: b2:39:77:41:77:98:fd:ec:0c:81:9c:e4:3b:80:10:cc:cd:6e: 94:0b:00:06 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE2MDQyMjI2WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCNDBCMjExMC8GA1UEBRMoMjBGM0JCRDQ5OEY0M0M5NzkxM0VFMUI5 OTQyOURCODkwQjQ3NjJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALispucG/fJLq9WmnSTeiTofC3tWOi4PAHVcWPrz61dlWr1us6xSf+0OT90cDZys QBXjr+Fjq9zDjVNAP3vTGdvjvrMIKhCE8O/e7Hbxbnr86BJhwY8auGLzPlOf+w16 JXpvhtwPxelsahi8nzC0zfi4SHIwFaDAJiZuSEbbE8jEllMoC48RL+qXIj5OdxW9 DcycKeE5XV0ZtREwDDgEYpfHHDUqtamswkyKzzjeVNsJ+KQUDljxOme5VP07ySq6 yquAJEwzfdaRadzC/LHMY63GNK06703weEM/T7qKBduJK18m5UVB2rm54k2BWT+u VHIoxz2+/cBUkA1dRb5yOOkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQg87vUmPQ8 l5E+4bmUKduJC0disDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQwQjIvRDE0NkU0RjBEQTM2MTFGMEE5MzNEMjRDOENEMzY0MUQvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0MEIyL0QxNDZFNEYwREEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0lQTzcxSmow UEplUlB1RzVsQ25iaVF0SFlyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPhjANBgkqhkiG9w0BAQsFAAOCAQEASKpghzTKnH7zxb/SD/O6 zzmHS/yOVdgAH2e3h8FNWOLfFLcdyGl7QXzewy5Ur3F5/UWrLI8Wa/sHIE3aBOzP VwVqZdZRCZWN0WRJJFBKDl5clenV2vh23hdZeH3q6fhAGTdl2xTMZ79vw9VqRSqL QOk+c3+8YcHhmZvfRMQ5QnRC9mXP1Iu6i5aQFxsm65F4o6U5DATujWmyYevFmztP 7lTi++f5Yq5Yp7rStKvGdpCUpKMjdsUpy3+CtI9P8xSZcE5UWPh4GBfYtyDXj+J5 TgHiNQFgi53BGDrvr4gn9+lTjDHaqV6anXlNsjl3QXeY/ewMgZzkO4AQzM1ulAsA Bg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:32 2025 by rpki-client