This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer File: X-7enTglQ_BRUn-lM9R6kXB35jI.cer (raw, json) Hash identifier: Df3XKGaQi0LXeRX5PcdlqEf42XZzpzpScDKjvrImlp4= Subject key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 701B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 16:01:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 8.128.0.0/10 IP: 8.208.0.0/12 IP: 149.129.0.0/16 IP: 161.117.0.0/16 IP: 170.33.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28699 (0x701b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 12 16:01:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:20:67:2f:24:f5:70:bd:cd:f9:ca:95:94: 24:7a:40:ad:6f:e2:3f:3b:6d:19:9e:fa:e7:c8:65: 04:ca:08:ea:d7:42:57:dc:ea:6b:eb:b5:05:4c:58: 42:c9:fd:3a:43:d6:f7:75:62:d7:ff:1f:4f:a2:49: a0:5b:8f:f0:69:4a:f8:39:25:1c:18:db:f6:51:d0: d3:cb:19:7b:b4:af:51:9f:cf:bf:4f:52:84:5c:f2: f5:57:38:6e:e4:d8:cb:29:b1:c5:38:d0:35:69:a8: 28:f3:91:b4:de:82:54:af:ac:70:ff:53:5c:ce:e8: 2f:25:cb:e8:87:17:8d:40:11:1d:40:47:eb:26:8d: ad:ea:0e:a2:52:13:ea:73:69:e3:be:10:31:a2:54: a4:21:5b:39:be:4e:a9:cb:d8:1e:8d:d3:ae:1b:65: 9c:2f:b3:4a:81:a2:eb:11:5e:be:42:9d:8f:d1:04: dc:85:f9:5e:4a:13:23:ac:2e:ce:19:1d:29:d9:09: 54:8f:72:33:00:b5:18:42:26:71:9e:f9:0a:73:b8: a1:5a:b2:8f:a0:94:ab:96:f9:e8:bf:da:b9:2d:76: 66:04:c7:60:23:dc:d7:16:1e:2b:4c:33:5e:a0:a5: 67:b5:e6:48:21:15:63:4c:6c:5c:3e:38:1c:49:78: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 8.128.0.0/10 8.208.0.0/12 149.129.0.0/16 161.117.0.0/16 170.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:be:ad:f2:52:63:f4:b4:17:57:21:98:58:c2:4c:08:52:a7: f6:32:96:63:9c:fe:1e:a6:88:34:dd:62:f6:fd:a8:ca:c7:4b: 51:f5:73:91:f8:50:af:80:46:54:95:58:c5:4f:87:9a:e4:21: 6e:d6:56:1f:d8:59:51:17:70:0b:55:70:5e:56:8a:27:d5:6f: e1:1c:fc:85:91:9a:5a:f5:3c:d8:72:25:e0:d9:28:b9:fc:35: 08:71:5d:de:13:97:5b:42:8d:ca:30:97:55:73:d4:c1:df:72: 11:a7:30:63:7f:c2:33:74:a3:f5:c4:f0:ff:fd:93:b1:50:16: c3:f5:37:58:a1:0e:40:33:97:72:7d:3b:76:d4:e3:6c:12:24: 87:78:c0:c2:1c:94:86:70:11:e0:cb:bb:34:7b:ad:5c:10:8b: e6:3d:df:19:f8:df:3d:2a:0a:83:f6:24:f8:90:c7:5a:c4:ee: 96:08:06:99:4d:7c:51:a9:77:05:22:2a:f3:3a:3f:93:f2:f0: b1:8b:31:cb:45:f3:e1:ce:74:29:ef:7b:d9:95:b1:fc:82:8f: d6:c3:7d:c0:55:b7:b5:fd:28:f7:a5:e8:22:b6:ab:13:c2:4f: f5:5b:7f:80:06:df:6e:84:a0:bb:f3:2e:2a:73:04:f6:6c:88: 43:94:0e:ad -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgICcBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjEyMTYwMTAzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFFQTE5ODExMC8GA1UEBRMoNUZFRURFOUQzODI1NDNGMDUxNTI3RkE1 MzNENDdBOTE3MDc3RTYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN/SIGcvJPVwvc35ypWUJHpArW/iPzttGZ7658hlBMoI6tdCV9zqa+u1BUxYQsn9 OkPW93Vi1/8fT6JJoFuP8GlK+DklHBjb9lHQ08sZe7SvUZ/Pv09ShFzy9Vc4buTY yymxxTjQNWmoKPORtN6CVK+scP9TXM7oLyXL6IcXjUARHUBH6yaNreoOolIT6nNp 474QMaJUpCFbOb5OqcvYHo3TrhtlnC+zSoGi6xFevkKdj9EE3IX5XkoTI6wuzhkd KdkJVI9yMwC1GEImcZ75CnO4oVqyj6CUq5b56L/auS12ZgTHYCPc1xYeK0wzXqCl Z7XmSCEVY0xsXD44HEl4FrECAwEAAaOCAwYwggMCMB0GA1UdDgQWBBRf7t6dOCVD 8FFSf6Uz1HqRcHfmMjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvQUQ2MjkyMjJCNTI1MTFFNkFGNkM4OTVFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBMTk4L0FENjI5MjIyQjUyNTExRTZBRjZDODk1RUM0RjlBRTAyL1gtN2VuVGds UV9CUlVuLWxNOVI2a1hCMzVqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAyBggrBgEFBQcBBwEB/wQjMCEw HwQCAAEwGQMDBgiAAwMECNADAwCVgQMDAKF1AwMAqiEwDQYJKoZIhvcNAQELBQAD ggEBAHm+rfJSY/S0F1chmFjCTAhSp/YylmOc/h6miDTdYvb9qMrHS1H1c5H4UK+A RlSVWMVPh5rkIW7WVh/YWVEXcAtVcF5WiifVb+Ec/IWRmlr1PNhyJeDZKLn8NQhx Xd4Tl1tCjcowl1Vz1MHfchGnMGN/wjN0o/XE8P/9k7FQFsP1N1ihDkAzl3J9O3bU 42wSJId4wMIclIZwEeDLuzR7rVwQi+Y93xn43z0qCoP2JPiQx1rE7pYIBplNfFGp dwUiKvM6P5Py8LGLMctF8+HOdCnve9mVsfyCj9bDfcBVt7X9KPel6CK2qxPCT/Vb f4AG326EoLvzLipzBPZsiEOUDq0= -----END CERTIFICATE-----Generated at Fri Dec 19 23:17:28 2025 by rpki-client