This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer File: IsfsPNntTFDolKEbzXDQMQzV-Fk.cer (raw, json) Hash identifier: gUarmHQshi7j4DiFVTPVFaeeek4nVMVX3OWwliKMso0= Subject key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 702C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 14 Dec 2025 16:06:07 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.244.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28716 (0x702c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 14 16:06:07 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:ee:da:23:ab:43:66:b2:3d:a9:a7:92:75: 92:2c:d5:f4:e9:db:42:47:22:56:01:5c:a4:b8:2e: 8b:f2:53:69:61:5d:c4:a9:a3:96:7d:2e:b1:ab:5f: f9:3d:a3:59:55:49:f1:f7:58:b6:2b:77:5e:78:f5: 6f:bb:92:cc:b6:5d:f3:f4:e9:fc:a7:d6:9e:43:0d: 69:91:56:31:e4:83:68:8d:d1:a7:d6:f1:e5:72:b0: df:03:f1:a4:db:6c:1c:e6:fb:34:13:24:01:e9:87: e7:49:f8:eb:79:02:36:d5:33:56:40:7f:d3:25:4d: ee:16:ac:04:d5:be:28:b0:af:e6:b8:39:08:db:cb: 3b:9e:05:bf:80:9c:ce:d5:31:72:bd:1f:d4:72:aa: 59:81:73:59:de:e5:18:af:56:72:c1:31:89:31:bf: ff:93:07:1e:b5:ff:19:c1:c7:82:d1:d1:a4:88:23: 0a:f7:8d:03:21:25:6c:43:ea:4c:6c:c0:dc:04:76: 0a:f0:d0:4d:60:17:4d:20:93:f0:e2:5f:5f:c1:e4: 77:3c:6c:70:57:e3:46:c4:20:0e:82:b2:20:a1:94: 06:35:94:2a:41:88:d6:c3:c6:d9:46:31:97:e7:6d: a2:3f:ca:75:e8:f2:93:cf:c7:2b:d6:3f:e2:d6:67: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.244.0/23 Signature Algorithm: sha256WithRSAEncryption 04:95:f5:64:21:aa:b5:6c:a4:34:d0:d4:cb:3e:81:97:96:34: 3c:0c:05:eb:46:73:5f:0e:e0:82:ea:c2:77:23:38:38:8f:66: ac:12:fc:e6:a2:20:2d:81:85:a3:f9:16:b5:ad:d9:f1:c3:40: 0b:c4:38:ed:3a:89:db:64:3b:af:4f:f4:9a:91:85:8a:a0:00: 3f:ff:d4:70:45:ff:63:80:d4:41:ca:42:3a:40:a5:5c:99:dc: 10:82:21:8f:e1:0e:f4:5c:59:bd:cc:fa:c4:ea:f1:e8:e4:ad: d2:bf:0d:fb:cb:6f:c3:ca:ed:4f:e8:21:5b:96:a3:ef:be:8c: a1:55:38:4b:1f:f6:e9:e9:9e:b7:7b:04:8a:46:e0:d9:47:c1: 49:a3:f1:73:04:7d:b7:34:8e:5e:7b:c6:aa:d9:7a:5c:d5:78: 7b:6e:4f:83:22:73:6c:c9:7d:8f:63:28:e6:5b:56:cf:b6:52: bb:34:9e:dc:bb:cb:c1:46:d2:ff:12:93:a2:d5:f7:e9:5f:9f: c1:9b:52:49:82:95:bd:81:b3:a2:69:ca:cd:8a:ef:a3:86:f0: ef:e0:c9:60:45:c0:a3:a6:38:75:f7:ce:6a:ed:f0:ee:a3:81: ed:ec:8e:b3:3b:c1:75:7b:ce:87:16:61:f3:b3:c4:26:e3:f4: 89:7c:f6:90 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE0MTYwNjA3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFQzIyNTExMC8GA1UEBRMoMjJDN0VDM0NEOUVENEM1MEU4OTRBMTFC Q0Q3MEQwMzEwQ0Q1Rjg1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMtK7tojq0Nmsj2pp5J1kizV9OnbQkciVgFcpLgui/JTaWFdxKmjln0usatf+T2j WVVJ8fdYtit3Xnj1b7uSzLZd8/Tp/KfWnkMNaZFWMeSDaI3Rp9bx5XKw3wPxpNts HOb7NBMkAemH50n463kCNtUzVkB/0yVN7hasBNW+KLCv5rg5CNvLO54Fv4CcztUx cr0f1HKqWYFzWd7lGK9WcsExiTG//5MHHrX/GcHHgtHRpIgjCveNAyElbEPqTGzA 3AR2CvDQTWAXTSCT8OJfX8HkdzxscFfjRsQgDoKyIKGUBjWUKkGI1sPG2UYxl+dt oj/Kdejyk8/HK9Y/4tZno1sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQix+w82e1M UOiUoRvNcNAxDNX4WTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUMyMjUvQzk0NDdGRjBCRUY5MTFFRkJDRjY4OTQ0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVDMjI1L0M5NDQ3RkYwQkVGOTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50 VEZEb2xLRWJ6WERRTVF6Vi1Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD69DANBgkqhkiG9w0BAQsFAAOCAQEABJX1ZCGqtWykNNDUyz6B l5Y0PAwF60ZzXw7ggurCdyM4OI9mrBL85qIgLYGFo/kWta3Z8cNAC8Q47TqJ22Q7 r0/0mpGFiqAAP//UcEX/Y4DUQcpCOkClXJncEIIhj+EO9FxZvcz6xOrx6OSt0r8N +8tvw8rtT+ghW5aj776MoVU4Sx/26emet3sEikbg2UfBSaPxcwR9tzSOXnvGqtl6 XNV4e25PgyJzbMl9j2Mo5ltWz7ZSuzSe3LvLwUbS/xKTotX36V+fwZtSSYKVvYGz omnKzYrvo4bw7+DJYEXAo6Y4dffOau3w7qOB7eyOszvBdXvOhxZh87PEJuP0iXz2 kA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:19 2025 by rpki-client