This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer File: JyLFq77mO3a52pZseNc6ZlfSROs.cer (raw, json) Hash identifier: qC+qJUU1Uo7LdA7wbRdikMHOtGS8PHZ+j6F2pdaj50o= Subject key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 704F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft caRepository: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 12:35:29 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.114.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28751 (0x704f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 16 12:35:29 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:ad:47:0b:e4:67:dc:9d:00:6b:22:41:10: 45:2e:e6:40:9e:88:0b:36:2b:19:75:73:51:f5:8c: f0:54:46:d8:ac:03:a7:6a:25:5e:ae:1d:53:ee:9d: 10:99:81:d5:b4:86:f9:25:a2:9d:ae:c1:66:56:8d: e7:dd:95:2c:94:af:14:e5:ed:76:d9:47:da:05:22: 92:79:aa:d1:91:5a:60:e3:5c:8e:7f:a1:61:a0:b6: d7:3f:f3:6a:01:80:93:53:8d:8f:1e:a2:0b:31:8c: d4:7e:cd:61:66:7b:57:2d:6a:cd:7a:bf:56:74:54: 5f:f3:01:59:7b:6c:b6:77:1d:58:6d:9c:77:bb:da: b7:76:ad:97:b9:43:2d:fc:98:ec:4d:69:55:cc:54: 7f:d6:56:c6:1a:e9:5a:53:11:54:26:8d:d7:4a:52: ba:58:77:1e:22:0f:18:78:94:5e:6f:c6:46:db:a8: 5a:65:6b:bd:76:57:16:d0:40:7d:ae:8f:46:ea:c3: b0:7a:cf:46:1c:f2:1f:e4:bd:8e:d3:90:93:d9:30: cb:12:20:7f:bc:9f:62:ca:f3:71:44:1e:36:2f:72: 0c:62:7b:af:f6:9a:77:b6:bf:c2:3c:b2:8c:06:7c: d4:5b:03:00:11:54:c1:f2:b6:58:38:47:97:cd:97: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.114.0/23 Signature Algorithm: sha256WithRSAEncryption 52:91:99:9a:2f:de:3b:38:de:84:b0:10:85:b8:1b:59:57:d5: be:80:f8:6d:54:71:39:02:22:82:42:2f:b4:f1:fe:6e:f8:f0: a0:41:73:b4:f4:3d:29:3e:8e:71:10:a3:ad:5b:72:86:c3:8b: 6b:98:62:ad:a0:eb:45:a2:56:73:6e:ea:04:cd:d9:5b:5d:4d: 73:3a:1e:ea:9c:ef:e1:d8:5e:dd:72:f3:47:10:6f:75:62:84: 85:b0:4b:d5:7e:16:ef:5d:76:82:aa:71:66:73:bd:e5:2c:1a: 1a:ff:8b:4b:ac:6a:ae:a2:2d:86:b5:4e:a4:ab:d6:9f:9c:e4: cf:96:5c:b9:99:c0:e0:85:37:0b:c0:81:0a:92:a3:6c:6c:33: 19:c6:a2:19:63:5e:61:3b:74:7e:09:c3:60:ea:73:4a:32:33: d6:d8:c0:a9:f3:d4:93:64:f9:4f:0d:bb:2a:4f:b9:46:46:8a: 97:e5:85:92:85:c6:e3:23:83:6c:6c:aa:8a:39:76:72:fe:eb: b2:7b:a3:9d:bb:64:20:43:bf:fa:73:f8:9b:57:35:24:05:fb: 1d:5c:99:2c:1b:ee:70:af:41:dd:2b:f3:e6:b7:97:c4:79:95: d5:8f:da:e0:d3:99:07:1d:96:e1:3d:63:c9:16:ba:40:cb:91: e4:4f:13:82 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE2MTIzNTI5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyQjEyQTExMC8GA1UEBRMoMjcyMkM1QUJCRUU2M0I3NkI5REE5NjZD NzhENzNBNjY1N0QyNDRFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANiLrUcL5GfcnQBrIkEQRS7mQJ6ICzYrGXVzUfWM8FRG2KwDp2olXq4dU+6dEJmB 1bSG+SWina7BZlaN592VLJSvFOXtdtlH2gUiknmq0ZFaYONcjn+hYaC21z/zagGA k1ONjx6iCzGM1H7NYWZ7Vy1qzXq/VnRUX/MBWXtstncdWG2cd7vat3atl7lDLfyY 7E1pVcxUf9ZWxhrpWlMRVCaN10pSulh3HiIPGHiUXm/GRtuoWmVrvXZXFtBAfa6P RurDsHrPRhzyH+S9jtOQk9kwyxIgf7yfYsrzcUQeNi9yDGJ7r/aad7a/wjyyjAZ8 1FsDABFUwfK2WDhHl82XQtkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQnIsWrvuY7 drnalmx41zpmV9JE6zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIxMkEvQjFENEE1OUNBRTNEMTFFRjk2Qjc2QzZBQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJCMTJBL0IxRDRBNTlDQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyL0p5TEZxNzdt TzNhNTJwWnNlTmM2WmxmU1JPcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6cjANBgkqhkiG9w0BAQsFAAOCAQEAUpGZmi/eOzjehLAQhbgb WVfVvoD4bVRxOQIigkIvtPH+bvjwoEFztPQ9KT6OcRCjrVtyhsOLa5hiraDrRaJW c27qBM3ZW11Nczoe6pzv4dhe3XLzRxBvdWKEhbBL1X4W7112gqpxZnO95SwaGv+L S6xqrqIthrVOpKvWn5zkz5ZcuZnA4IU3C8CBCpKjbGwzGcaiGWNeYTt0fgnDYOpz SjIz1tjAqfPUk2T5Tw27Kk+5RkaKl+WFkoXG4yODbGyqijl2cv7rsnujnbtkIEO/ +nP4m1c1JAX7HVyZLBvucK9B3Svz5reXxHmV1Y/a4NOZBx2W4T1jyRa6QMuR5E8T gg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:12:33 2025 by rpki-client