This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer File: TbOy41mbZG6fMK90pYxmePrx0rc.cer (raw, json) Hash identifier: 0pv1qwSp+hZYNY7QxSvIsVCrnGEjOuAK4mjtJjwKm0A= Subject key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7071 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 18 Dec 2025 09:51:21 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: IP: 144.79.167.0/24 IP: 160.22.43.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28785 (0x7071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 18 09:51:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:51:b9:93:3b:c4:24:f6:8e:c2:21:4d:3f: b2:54:6c:f0:d8:54:ae:39:90:17:2d:dd:41:58:e5: 4b:47:50:8d:38:90:5d:11:5f:0e:f5:b3:35:b1:fb: 8e:4c:c5:24:66:e4:26:9f:c1:39:0a:3b:86:9f:ac: cc:cb:c8:7e:f1:e5:82:c6:a5:80:20:ad:08:ca:e0: 5a:62:68:e6:3a:81:21:14:7e:04:b6:3a:9e:de:0b: d1:7a:72:6d:76:98:ea:ac:6f:c7:0c:38:bb:b2:2c: a1:ad:92:0b:3f:71:bb:14:9c:a3:a5:8d:d1:40:2b: 3e:ef:4a:4f:0b:8c:d5:23:c6:89:fb:79:3d:d0:93: 17:d5:46:d9:30:3e:d0:2c:2d:a9:93:f1:0f:15:a1: 60:04:d6:42:ff:b6:10:4a:b2:36:eb:4e:78:63:72: 1e:3a:b8:89:61:70:c1:ea:f8:df:ee:ce:24:f3:5d: 49:db:1e:d2:cd:19:b3:8e:c1:74:1f:8e:3e:c1:5a: bd:06:d7:19:53:8f:8f:12:ae:ed:21:f6:3c:2a:dd: a6:76:84:2d:70:81:fd:6e:c0:d4:44:c0:24:d4:46: 13:4e:36:0c:45:ce:13:22:13:95:ca:8b:25:6d:eb: 72:23:f0:be:1f:ce:63:7d:4f:cd:6a:dc:db:b8:89: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.167.0/24 160.22.43.0/24 Signature Algorithm: sha256WithRSAEncryption 61:83:b4:28:30:a5:38:4a:41:e8:be:93:9d:7b:67:61:ec:89: 5a:83:6a:ac:6c:6e:41:55:52:e2:d4:16:b4:92:4d:7c:b0:76: a3:fc:c1:bb:ee:0d:bd:4d:b7:48:1a:1c:bd:e1:c0:af:32:47: 4b:75:3d:78:cd:e1:96:33:31:72:c1:96:67:79:0f:2c:be:47: bc:7c:33:03:47:23:48:f2:b1:d5:d5:19:6b:5a:71:05:7d:8e: 75:c9:99:e0:85:24:53:fc:71:74:2e:49:ac:d8:f3:c9:ae:be: 55:15:48:61:26:66:c0:75:cf:bd:cb:f7:44:54:7a:43:ac:48: 0b:17:c2:28:2b:13:cd:fb:15:e4:31:6b:64:cd:c5:e5:30:10: ad:07:d5:ae:3e:b4:88:6c:41:35:f1:c5:66:44:c6:49:20:76: 52:e9:60:36:a9:61:22:a9:21:56:4b:ed:68:be:74:f8:55:e5: c9:d1:3d:41:ec:d7:a9:92:d0:98:25:40:97:0d:ab:ac:32:cd: dd:bc:d2:1e:55:5a:a5:9f:12:43:90:81:44:7c:2f:07:fd:65: 0a:fc:9e:58:49:9f:46:65:52:44:39:30:ed:2d:7d:a1:39:8a: 30:45:7e:3b:46:50:04:4d:4c:d5:63:18:c5:94:2a:b7:1b:c3: e7:c8:af:cc -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICcHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE4MDk1MTIxWhcNMjYwODMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2OThFQzExMC8GA1UEBRMoNERCM0IyRTM1OTlCNjQ2RTlGMzBBRjc0 QTU4QzY2NzhGQUYxRDJCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALGDUbmTO8Qk9o7CIU0/slRs8NhUrjmQFy3dQVjlS0dQjTiQXRFfDvWzNbH7jkzF JGbkJp/BOQo7hp+szMvIfvHlgsalgCCtCMrgWmJo5jqBIRR+BLY6nt4L0XpybXaY 6qxvxww4u7Isoa2SCz9xuxSco6WN0UArPu9KTwuM1SPGift5PdCTF9VG2TA+0Cwt qZPxDxWhYATWQv+2EEqyNutOeGNyHjq4iWFwwer43+7OJPNdSdse0s0Zs47BdB+O PsFavQbXGVOPjxKu7SH2PCrdpnaELXCB/W7A1ETAJNRGE042DEXOEyITlcqLJW3r ciPwvh/OY31PzWrc27iJVn8CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBRNs7LjWZtk bp8wr3SljGZ4+vHStzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk4RUMvM0E4Rjg0MTAyMTQ5MTFFRkJFODhDRjI5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY5OEVDLzNBOEY4NDEwMjE0OTExRUZCRTg4Q0YyOUM0RjlBRTAyL1RiT3k0MW1i Wkc2Zk1LOTBwWXhtZVByeDByYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAJBPpwMEAKAWKzANBgkqhkiG9w0BAQsFAAOCAQEAYYO0KDClOEpB 6L6TnXtnYeyJWoNqrGxuQVVS4tQWtJJNfLB2o/zBu+4NvU23SBocveHArzJHS3U9 eM3hljMxcsGWZ3kPLL5HvHwzA0cjSPKx1dUZa1pxBX2OdcmZ4IUkU/xxdC5JrNjz ya6+VRVIYSZmwHXPvcv3RFR6Q6xICxfCKCsTzfsV5DFrZM3F5TAQrQfVrj60iGxB NfHFZkTGSSB2UulgNqlhIqkhVkvtaL50+FXlydE9QezXqZLQmCVAlw2rrDLN3bzS HlVapZ8SQ5CBRHwvB/1lCvyeWEmfRmVSRDkw7S19oTmKMEV+O0ZQBE1M1WMYxZQq txvD58ivzA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:13:32 2025 by rpki-client