This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer (raw, json) Hash identifier: CJh6OmngI1rx6ndf/76Q7vXg2FjAddppydEc9zeDcHM= Subject key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7112 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 13:41:02 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 128.185.0.0/16 IP: 136.185.0.0/16 IP: 152.52.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 04:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28946 (0x7112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 13:41:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:00:7c:60:bd:28:69:da:69:8d:a0:72:be: aa:0e:fb:18:4a:e1:f2:42:c4:1f:6a:71:f5:3b:82: b4:ee:c9:f8:ac:fa:79:da:fb:49:4b:d6:b2:f3:4d: 28:48:0d:7e:e4:d3:aa:d2:79:81:2a:d9:5b:5c:16: 41:ae:3e:12:2e:62:d2:32:13:b2:8a:e7:38:cd:48: 4b:f6:77:fe:27:46:33:5e:4a:98:e2:c2:2c:d8:2c: 12:b9:94:d9:28:0f:75:02:c6:ee:69:32:a1:ce:ca: 65:2f:22:34:4f:ae:29:ac:d5:ce:ad:ab:9e:ac:54: 43:eb:db:df:ee:fb:0a:32:cc:35:c2:01:ca:6a:90: d0:a1:c8:d8:9e:e7:90:f7:ae:8d:b0:20:ee:ac:eb: fd:06:d7:fe:8c:06:62:45:55:c0:d9:02:0a:d3:e5: a8:29:bb:75:d1:57:ab:35:82:49:b2:57:5f:01:3d: 8b:e7:bd:5c:67:02:c4:54:99:b1:48:c8:df:b8:0b: 71:e4:0a:71:2b:b7:4b:22:6f:68:fb:00:7c:c7:53: 34:d6:51:81:3b:b2:20:38:a9:28:44:4f:a1:c0:ba: 59:7d:68:f1:b9:3c:8c:d5:a2:99:3a:d6:e7:b4:45: ac:59:77:49:87:39:04:e5:75:67:07:d9:b2:20:b3: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.185.0.0/16 136.185.0.0/16 152.52.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:1a:ce:52:90:64:d7:be:e7:45:3a:33:85:91:fe:c8:d2:8d: 85:02:b2:c3:36:74:02:19:1e:af:b2:88:5a:4e:ab:37:7d:7c: b7:5e:53:7a:43:11:c0:8d:be:e3:12:f2:20:c4:03:24:8c:ba: 73:00:7f:4b:8b:5c:03:c7:33:54:2f:2c:8c:6b:b7:f4:ec:4a: ac:98:0b:82:cd:38:a9:88:40:02:18:86:bd:24:2e:d4:94:af: 93:20:08:67:bc:df:28:9f:e3:a8:e6:d3:06:a9:e9:b7:2d:f4: b6:22:f7:96:02:58:30:dc:a1:a6:99:7a:61:bb:bd:1d:84:18: 86:10:b5:62:58:ee:47:6b:28:95:40:6c:50:77:7f:fe:73:62: 6b:92:12:4a:da:45:e5:78:1c:f7:ac:a8:a0:84:58:00:bb:c1: 11:f9:7f:66:ff:84:02:fb:bf:d3:6a:0f:44:bd:2c:04:2f:dd: 47:74:ab:4b:fa:19:c6:2e:b6:7e:c6:93:30:dc:5e:43:0c:ac: 10:d5:05:46:1b:a2:12:b3:e8:93:8f:24:1c:f5:46:05:4e:dc: b3:95:e8:73:f6:cd:e9:03:7b:cf:af:76:a4:70:f8:a0:25:f4: 6b:1a:73:01:27:63:9b:e8:75:71:e5:d3:d3:ce:51:c3:1b:82: 97:05:66:fe -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgICcRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MTM0MTAyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5NjRCMzExMC8GA1UEBRMoNDY0ODU0RkI1MEE5OTAzQzUyNTM0MThD NTgzRDBGMzFCODQxRDU5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMbsAHxgvShp2mmNoHK+qg77GErh8kLEH2px9TuCtO7J+Kz6edr7SUvWsvNNKEgN fuTTqtJ5gSrZW1wWQa4+Ei5i0jITsornOM1IS/Z3/idGM15KmOLCLNgsErmU2SgP dQLG7mkyoc7KZS8iNE+uKazVzq2rnqxUQ+vb3+77CjLMNcIBymqQ0KHI2J7nkPeu jbAg7qzr/QbX/owGYkVVwNkCCtPlqCm7ddFXqzWCSbJXXwE9i+e9XGcCxFSZsUjI 37gLceQKcSu3SyJvaPsAfMdTNNZRgTuyIDipKERPocC6WX1o8bk8jNWimTrW57RF rFl3SYc5BOV1ZwfZsiCzOXcCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBRGSFT7UKmQ PFJTQYxYPQ8xuEHVlzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvMkE1OTQwRjI0QkIzMTFFOUFCMTUxQzE3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk2NEIzLzJBNTk0MEYyNEJCMzExRTlBQjE1MUMxN0M0RjlBRTAyL1JraFUtMUNw a0R4U1UwR01XRDBQTWJoQjFaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAoBggrBgEFBQcBBwEB/wQZMBcw FQQCAAEwDwMDAIC5AwMAiLkDAwCYNDANBgkqhkiG9w0BAQsFAAOCAQEAPBrOUpBk 177nRTozhZH+yNKNhQKywzZ0Ahker7KIWk6rN318t15TekMRwI2+4xLyIMQDJIy6 cwB/S4tcA8czVC8sjGu39OxKrJgLgs04qYhAAhiGvSQu1JSvkyAIZ7zfKJ/jqObT Bqnpty30tiL3lgJYMNyhppl6Ybu9HYQYhhC1YljuR2solUBsUHd//nNia5ISStpF 5Xgc96yooIRYALvBEfl/Zv+EAvu/02oPRL0sBC/dR3SrS/oZxi62fsaTMNxeQwys ENUFRhuiErPok48kHPVGBU7cs5Xoc/bN6QN7z692pHD4oCX0axpzASdjm+h1ceXT 085RwxuClwVm/g== -----END CERTIFICATE-----Generated at Tue Dec 30 07:12:42 2025 by rpki-client