This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer File: IRoCHoq99NvyBwgibMgyj9JBMd8.cer (raw, json) Hash identifier: IT13WE3Wupmz8koRfZolE0NZvcezEU02PuTBCgj5Cdk= Subject key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FD4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 15:44:48 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.148.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28628 (0x6fd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 8 15:44:48 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:4c:22:9c:75:85:aa:61:51:30:69:99:35: b3:b9:28:37:3b:e7:69:23:0a:c6:92:2a:30:2c:50: 95:91:16:b9:43:c6:bd:4d:1a:8f:c4:f9:70:f9:00: 2b:ba:7c:86:0d:61:3b:d5:47:b0:1b:e4:26:44:57: 2c:40:b1:7f:47:15:7c:fb:50:d0:64:89:26:39:d2: 41:88:59:54:6c:8f:cf:8f:96:ce:38:64:64:9c:da: 7e:61:fa:b1:3f:fd:f0:4e:9c:eb:a9:b9:39:90:33: 8d:28:d6:86:8f:dc:7e:11:0c:51:65:90:37:6b:ca: bc:b7:d6:a3:29:e7:61:58:6e:e2:3a:13:1b:aa:58: c8:05:ce:38:b5:a5:81:02:bf:1c:14:e8:03:82:61: 6a:7d:50:9a:cd:5d:17:0e:52:04:f9:49:e9:95:1f: a7:32:b3:97:6b:9f:aa:b4:22:ea:fc:d9:bf:2e:86: 2f:10:3d:3d:0b:f4:df:a9:2b:00:fc:92:db:22:e1: f0:7a:78:82:65:d2:90:0b:7c:c4:6b:7c:f1:3f:59: 9a:d7:c7:7e:78:dd:d3:3b:83:44:29:e4:d2:b1:8a: 94:0a:c8:64:48:6a:72:22:1c:c4:49:a7:c5:c5:1c: 78:e7:0c:fe:3f:03:04:f2:fd:66:e1:d2:4d:85:4b: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.148.0/23 Signature Algorithm: sha256WithRSAEncryption 68:3b:42:0b:79:d2:cb:d6:56:8d:b1:0e:6e:45:32:3f:9a:2d: 0d:46:b8:0d:97:7b:8a:41:04:9c:b5:87:41:b2:97:ee:0f:35: ea:b8:b4:c8:00:25:4c:00:17:2c:b1:a8:01:9d:d4:5f:49:56: e0:c6:a6:b7:06:2a:04:e7:5a:40:95:49:14:39:d2:d6:be:b9: 29:6c:e9:e4:08:75:24:e3:80:2f:95:ae:f3:38:a5:5d:d0:ab: 27:2b:4d:ea:7e:5c:d7:ee:fd:b7:e0:19:14:1e:9c:cc:a8:4a: 43:bd:41:97:44:1d:e3:ce:4e:99:d5:a3:da:7e:96:71:af:c6: 1d:2c:0f:ca:86:50:a2:de:c4:f1:d5:68:cf:4f:d1:07:3b:9e: e1:ab:d9:ca:24:1f:3e:36:75:6d:6c:74:02:ad:61:9a:80:a8: 33:62:dc:a8:40:26:88:7c:1d:75:77:6f:56:cc:e8:ce:e4:49: cf:5c:1f:90:09:a8:ed:19:af:f8:c3:66:c3:73:07:0c:fa:d4: e3:1c:56:cd:21:61:72:0e:ee:c0:1b:5c:87:e4:88:cd:c9:0b: d5:6b:b0:66:38:31:6b:b4:6d:e9:a6:f3:10:01:2a:3c:f7:ff: 66:82:26:cc:4e:9c:49:cb:30:03:12:7d:97:b3:ab:8d:62:df: 47:2c:c9:63 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA4MTU0NDQ4WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3MEYxMTExMC8GA1UEBRMoMjExQTAyMUU4QUJERjREQkYyMDcwODIy NkNDODMyOEZEMjQxMzFERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMNlTCKcdYWqYVEwaZk1s7koNzvnaSMKxpIqMCxQlZEWuUPGvU0aj8T5cPkAK7p8 hg1hO9VHsBvkJkRXLECxf0cVfPtQ0GSJJjnSQYhZVGyPz4+WzjhkZJzafmH6sT/9 8E6c66m5OZAzjSjWho/cfhEMUWWQN2vKvLfWoynnYVhu4joTG6pYyAXOOLWlgQK/ HBToA4Jhan1Qms1dFw5SBPlJ6ZUfpzKzl2ufqrQi6vzZvy6GLxA9PQv036krAPyS 2yLh8Hp4gmXSkAt8xGt88T9ZmtfHfnjd0zuDRCnk0rGKlArIZEhqciIcxEmnxcUc eOcM/j8DBPL9ZuHSTYVL3m8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQhGgIeir30 2/IHCCJsyDKP0kEx3zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBGMTEvRTE2Mzg5MTA5QTdDMTFFRjg0OTUwRDMzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcwRjExL0UxNjM4OTEwOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyL0lSb0NIb3E5 OU52eUJ3Z2liTWd5ajlKQk1kOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/lDANBgkqhkiG9w0BAQsFAAOCAQEAaDtCC3nSy9ZWjbEObkUy P5otDUa4DZd7ikEEnLWHQbKX7g816ri0yAAlTAAXLLGoAZ3UX0lW4MamtwYqBOda QJVJFDnS1r65KWzp5Ah1JOOAL5Wu8zilXdCrJytN6n5c1+79t+AZFB6czKhKQ71B l0Qd485OmdWj2n6Wca/GHSwPyoZQot7E8dVoz0/RBzue4avZyiQfPjZ1bWx0Aq1h moCoM2LcqEAmiHwddXdvVszozuRJz1wfkAmo7Rmv+MNmw3MHDPrU4xxWzSFhcg7u wBtch+SIzckL1WuwZjgxa7Rt6abzEAEqPPf/ZoImzE6cScswAxJ9l7OrjWLfRyzJ Yw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:16:28 2025 by rpki-client