This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer (raw, json) Hash identifier: coJsJ0Q0qmFpJ5mI5p8rLjM1ZE0I1C+NNGcKT4aMQT4= Subject key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7042 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 19:24:26 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.208.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28738 (0x7042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 15 19:24:26 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:c6:91:c3:d4:b4:9a:1d:9a:20:cf:d1:92: 67:65:42:4e:ae:22:2e:88:19:7b:80:0d:9c:61:ac: 12:28:0a:dd:ad:4a:81:0e:0b:2c:a9:de:4e:6d:77: ac:98:a9:ad:d4:c6:e2:63:3d:63:93:72:06:58:ce: 7a:12:7c:8b:ee:55:35:77:7d:95:a8:5b:dc:e4:66: 27:d8:7c:73:9e:3c:13:26:04:33:d4:f3:81:ac:45: ff:c1:b7:4d:da:e3:c2:f2:5a:97:81:32:e3:20:88: df:ce:07:d0:bc:07:c9:74:d5:3c:69:35:d1:a8:5c: 14:5a:77:b5:6c:1d:01:6c:66:78:f1:b7:18:85:eb: e5:87:1f:6b:86:e0:f8:73:a8:c9:88:57:f0:6e:56: 76:1d:80:cc:40:03:18:e1:48:c1:ec:2a:c7:05:6e: 8f:42:de:f6:1c:8b:7d:a6:48:7d:d1:5b:b3:33:4a: 11:eb:70:d0:d6:87:66:db:05:bc:07:0b:86:3f:ad: a5:db:e2:c8:ca:4f:fe:62:72:50:0d:e5:83:85:4f: 6f:9e:d2:ff:09:74:9b:88:8d:0f:41:3c:29:ce:17: 7f:32:2c:51:dd:66:e9:54:c0:e5:5a:a5:06:86:38: 0d:55:26:72:d6:a2:f9:57:ce:db:42:5b:f1:fd:25: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.208.0/23 Signature Algorithm: sha256WithRSAEncryption 34:57:69:68:af:3a:a3:67:6c:4d:fa:23:34:1f:e4:a2:58:da: e1:8d:0d:f2:2a:fc:d9:3f:47:3c:24:91:77:a1:73:e8:25:e9: 7e:d1:0b:72:d1:15:07:8e:dd:fa:6a:46:03:b3:1d:18:da:a0: 71:05:f5:9f:ec:ac:a6:cc:00:03:e6:5b:87:4b:0c:5b:93:11: 33:9d:e4:b6:95:59:a5:40:46:68:3c:02:4b:0c:02:9e:9f:75: 76:a9:12:22:28:52:82:36:d8:cb:fe:e0:ac:f7:7f:d6:f8:bd: d6:a5:f1:e5:4c:91:95:74:e1:3a:87:3a:cb:b3:e4:63:0d:90: 78:08:c5:53:9c:8c:3d:b9:8f:76:8d:7c:ec:a7:75:82:6c:e1: 0d:39:b9:f6:7c:69:6e:3d:b5:5d:35:35:98:6d:7e:3c:59:04: 2d:12:94:75:34:d3:0a:37:5e:d4:1f:59:8b:68:a3:d4:a7:be: 07:c7:fc:90:6a:4c:36:d3:1e:61:cc:88:2c:d9:1e:69:a9:ed: e6:18:83:bd:ab:4d:64:49:61:4f:20:25:d6:8b:de:62:50:b3: 14:e5:5c:25:75:eb:4f:11:79:cb:e4:f6:de:1c:20:dc:ab:e5: 77:2c:82:c9:b7:f7:90:a5:54:98:66:34:c7:0d:93:bf:a2:c7: 27:2b:6e:67 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE1MTkyNDI2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDMTQ2RDExMC8GA1UEBRMoNjY0RTU5QTAwMEI5MUU3MkY4MDNFNkQ4 Njg0MTE1NEM4MDU2Qjg4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALeIxpHD1LSaHZogz9GSZ2VCTq4iLogZe4ANnGGsEigK3a1KgQ4LLKneTm13rJip rdTG4mM9Y5NyBljOehJ8i+5VNXd9lahb3ORmJ9h8c548EyYEM9TzgaxF/8G3Tdrj wvJal4Ey4yCI384H0LwHyXTVPGk10ahcFFp3tWwdAWxmePG3GIXr5Ycfa4bg+HOo yYhX8G5Wdh2AzEADGOFIwewqxwVuj0Le9hyLfaZIfdFbszNKEetw0NaHZtsFvAcL hj+tpdviyMpP/mJyUA3lg4VPb57S/wl0m4iND0E8Kc4XfzIsUd1m6VTA5VqlBoY4 DVUmctai+VfO20Jb8f0lGcsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRmTlmgALke cvgD5thoQRVMgFa4ijAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE0NkQvRUNCMDBCNDIwMDM3MTFGMEJCRDcyNDc1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMxNDZEL0VDQjAwQjQyMDAzNzExRjBCQkQ3MjQ3NUM0RjlBRTAyL1prNVpvQUM1 SG5MNEEtYllhRUVWVElCV3VJby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/0DANBgkqhkiG9w0BAQsFAAOCAQEANFdpaK86o2dsTfojNB/k olja4Y0N8ir82T9HPCSRd6Fz6CXpftELctEVB47d+mpGA7MdGNqgcQX1n+yspswA A+Zbh0sMW5MRM53ktpVZpUBGaDwCSwwCnp91dqkSIihSgjbYy/7grPd/1vi91qXx 5UyRlXThOoc6y7PkYw2QeAjFU5yMPbmPdo187Kd1gmzhDTm59nxpbj21XTU1mG1+ PFkELRKUdTTTCjde1B9Zi2ij1Ke+B8f8kGpMNtMeYcyILNkeaant5hiDvatNZElh TyAl1oveYlCzFOVcJXXrTxF5y+T23hwg3KvldyyCybf3kKVUmGY0xw2Tv6LHJytu Zw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:08:11 2025 by rpki-client