This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer File: JnQ7Hk4OkKGbJAwJNpecojdojfI.cer (raw, json) Hash identifier: oMNs1VtUgv9+snaatjv8DEhAu5dXfMR8aAOqK5uA3eE= Subject key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FCB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 13:06:28 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 146.88.64.0/20 IP: 155.137.64.0/18 IP: 209.141.0.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28619 (0x6fcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 8 13:06:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:50:ac:fa:29:4b:08:3c:59:ba:f3:9d:e0: 74:32:12:b7:b6:f4:95:3c:6f:87:79:93:24:60:d2: e3:3b:32:38:f0:c0:51:d3:dc:71:1d:59:a9:22:67: ac:2f:1f:17:34:31:2d:76:2f:5a:5e:77:55:a8:25: a4:b3:dd:cb:96:d0:48:68:83:96:29:21:fc:5a:ce: 7c:7d:0e:2e:2d:75:0a:3e:27:0b:25:63:06:b8:ae: 48:7f:05:83:1b:c9:eb:e6:d2:b1:d1:05:7b:d7:bc: 71:71:c6:cd:17:f5:59:10:06:84:35:26:73:48:f9: c4:3a:73:74:c6:5a:00:f9:79:27:c8:26:49:f0:a8: 8c:3d:43:26:46:92:9c:1a:2e:af:ad:9d:31:05:11: ad:6a:f0:96:a9:93:11:8b:eb:83:8a:7d:a8:93:ab: 3d:e0:97:6a:7d:43:8a:c3:62:21:38:80:ec:52:b1: b6:1e:6b:3e:77:ed:e3:79:1a:d8:0e:3f:a1:b4:46: 83:61:a2:a7:86:ec:83:27:fa:80:27:64:03:1a:fb: 70:47:19:22:e3:67:ae:bb:c1:8e:6f:e5:3e:91:72: 84:12:67:b2:1d:e0:94:28:05:1c:5a:b4:d7:8e:dd: 7f:de:b7:f3:18:4a:10:8b:4b:98:fc:4e:df:a7:71: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.64.0/20 155.137.64.0/18 209.141.0.0/20 Signature Algorithm: sha256WithRSAEncryption 97:65:d7:13:e5:09:20:7e:72:ee:9e:af:e6:38:9c:71:b3:ce: 94:0f:38:31:a7:6d:13:35:03:62:91:a0:fc:39:9e:72:19:d6: b6:53:35:6a:8c:e2:3f:cd:14:fa:26:29:49:8c:01:35:00:d2: bc:25:bc:d1:d4:5d:52:e6:70:21:83:4f:f8:cf:7e:69:8f:7c: 9f:ce:0a:05:71:96:15:8e:91:bb:72:98:d5:25:ac:42:64:16: 5c:02:79:5a:42:d7:2c:3a:6a:da:ed:70:9b:70:2b:f3:57:b9: ad:a1:8d:5e:03:94:c4:60:6e:f9:e3:cb:03:04:b3:24:c3:7b: 20:48:44:94:66:17:e9:b8:c9:22:ec:2c:0c:e8:1d:a9:18:be: af:3e:40:26:79:0d:48:3c:f0:14:bb:8c:6c:f1:43:01:23:54: ec:97:8c:49:af:56:1c:be:b3:00:40:6a:49:03:8a:65:3b:2e: 2e:c7:27:67:b5:fc:b8:f2:2d:fc:27:b7:d2:ae:62:c8:ba:44: 9b:10:f5:39:25:d3:c7:8c:94:68:d4:4f:50:de:6b:44:5d:ce: 2d:67:b8:86:ae:40:34:74:a6:ab:73:ef:22:e0:48:7f:a5:61: d4:b2:0d:c2:38:63:01:c9:c0:ae:82:5d:c6:17:1b:4a:c9:e7: c6:10:68:36 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICb8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA4MTMwNjI4WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0NEY1OTExMC8GA1UEBRMoMjY3NDNCMUU0RTBFOTBBMTlCMjQwQzA5 MzY5NzlDQTIzNzY4OERGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALusUKz6KUsIPFm6853gdDISt7b0lTxvh3mTJGDS4zsyOPDAUdPccR1ZqSJnrC8f FzQxLXYvWl53VaglpLPdy5bQSGiDlikh/FrOfH0OLi11Cj4nCyVjBriuSH8FgxvJ 6+bSsdEFe9e8cXHGzRf1WRAGhDUmc0j5xDpzdMZaAPl5J8gmSfCojD1DJkaSnBou r62dMQURrWrwlqmTEYvrg4p9qJOrPeCXan1DisNiITiA7FKxth5rPnft43ka2A4/ obRGg2Gip4bsgyf6gCdkAxr7cEcZIuNnrrvBjm/lPpFyhBJnsh3glCgFHFq0147d f9638xhKEItLmPxO36dxUVUCAwEAAaOCAv8wggL7MB0GA1UdDgQWBBQmdDseTg6Q oZskDAk2l5yiN2iN8jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNDRBNkZGNjQwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ0RjU5LzQ0QTZGRjY0MDBDQjExRThCRUIxRUYxMEM0RjlBRTAyL0puUTdIazRP a0tHYkpBd0pOcGVjb2pkb2pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEBJJYQAMEBpuJQAMEBNGNADANBgkqhkiG9w0BAQsFAAOCAQEAl2XX E+UJIH5y7p6v5jiccbPOlA84MadtEzUDYpGg/DmechnWtlM1aoziP80U+iYpSYwB NQDSvCW80dRdUuZwIYNP+M9+aY98n84KBXGWFY6Ru3KY1SWsQmQWXAJ5WkLXLDpq 2u1wm3Ar81e5raGNXgOUxGBu+ePLAwSzJMN7IEhElGYX6bjJIuwsDOgdqRi+rz5A JnkNSDzwFLuMbPFDASNU7JeMSa9WHL6zAEBqSQOKZTsuLscnZ7X8uPIt/Ce30q5i yLpEmxD1OSXTx4yUaNRPUN5rRF3OLWe4hq5ANHSmq3PvIuBIf6Vh1LINwjhjAcnA roJdxhcbSsnnxhBoNg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:09:39 2025 by rpki-client