This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer File: btoKR86sX5SQFUbuiaP14i4Zp2I.cer (raw, json) Hash identifier: tDsVjioolgT6oa5T4feAj9Bq6UsmDCDq4Lr1V5EHlMM= Subject key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FEF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft caRepository: rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 12:46:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.68.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28655 (0x6fef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 10 12:46:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:e0:94:86:d4:9d:d9:58:b8:9c:24:2b:66: 93:26:15:a4:d0:ed:29:ed:84:24:db:71:c3:d8:ad: 86:46:03:31:31:e4:c0:ee:b4:fc:0a:b4:46:08:b0: fd:55:ea:d6:a6:0f:77:b0:24:8c:e3:e7:4a:0d:2e: 72:ba:ef:8c:1c:7b:6e:ff:1b:af:1b:1c:3e:63:c6: 89:d5:18:63:cc:97:21:fa:62:d5:e5:8e:2d:bb:63: d6:90:97:97:0e:db:ed:e8:9a:ec:f0:e2:f1:8f:dc: 41:2e:19:f7:9c:09:9d:fe:e6:d7:72:38:bd:83:db: f9:7d:b7:d3:fa:37:6d:27:b0:c7:1d:92:2e:c9:ef: fa:fb:b2:d4:41:60:47:5c:c4:e0:62:35:7a:eb:c8: 8d:6e:9e:d5:5d:08:c1:08:6f:ce:5a:60:a6:79:ea: f1:07:45:6c:8c:da:bf:9b:68:a8:52:92:f1:c9:a5: b8:71:9d:81:dc:d6:42:68:eb:a0:cb:31:2d:e3:ce: c2:f0:ae:e9:66:9d:55:b0:df:d2:fb:1f:06:0f:e6: 9c:eb:f6:69:84:38:e8:62:8f:ac:3a:0f:96:47:f5: fe:87:62:78:a0:b5:69:3d:f1:ae:3b:ce:bf:0b:ce: 48:40:2f:75:bd:0e:b7:33:18:70:9a:a1:b6:86:31: 10:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.68.0/23 Signature Algorithm: sha256WithRSAEncryption c4:21:0d:b8:e7:7e:9e:bb:cd:48:3b:17:80:3c:2c:fb:af:a5: b7:56:ee:ca:be:76:85:e2:34:a5:12:c7:c3:8a:bc:ba:9d:39: b3:54:78:d3:c4:b3:53:34:81:61:cd:ce:93:74:e3:91:e9:62: 53:8c:2e:c4:16:c7:f0:9e:4d:fa:44:f0:77:bc:b3:45:e0:0a: a3:73:19:b4:7a:58:99:eb:d5:aa:2e:6e:fb:69:51:e1:48:8c: 43:13:42:f3:e0:0b:9f:bf:d0:95:f2:aa:4a:62:a9:f1:e5:54: e1:74:18:0a:88:84:2a:61:84:e7:f3:7e:d5:2f:ce:d5:82:c9: 97:40:57:9b:da:5b:43:04:8a:1a:6a:d2:c9:0c:af:c8:3c:09: 13:95:65:36:66:92:b2:2f:1f:39:b6:c2:fa:0b:f0:ff:b3:64: 0f:31:80:27:fe:a1:f8:64:c2:7b:f2:e6:a5:c0:9d:cd:1f:e2: 13:71:80:dd:14:c2:e4:7d:e3:9b:52:88:4a:e5:02:7c:01:b1: 27:4e:79:39:40:18:16:47:e3:d4:26:5d:8e:64:6a:34:2d:8a: fa:78:6b:29:e7:65:12:cb:dd:0a:2c:1a:81:1a:3e:ea:5b:88: 18:af:a9:ce:7d:0a:6b:df:dd:eb:6f:50:d0:9a:28:64:34:07: c4:e3:5d:5e -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjEwMTI0NjMwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzRDc1NjExMC8GA1UEBRMoNkVEQTBBNDdDRUFDNUY5NDkwMTU0NkVF ODlBM0Y1RTIyRTE5QTc2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMOs4JSG1J3ZWLicJCtmkyYVpNDtKe2EJNtxw9ithkYDMTHkwO60/Aq0Rgiw/VXq 1qYPd7AkjOPnSg0ucrrvjBx7bv8brxscPmPGidUYY8yXIfpi1eWOLbtj1pCXlw7b 7eia7PDi8Y/cQS4Z95wJnf7m13I4vYPb+X230/o3bSewxx2SLsnv+vuy1EFgR1zE 4GI1euvIjW6e1V0IwQhvzlpgpnnq8QdFbIzav5toqFKS8cmluHGdgdzWQmjroMsx LePOwvCu6WadVbDf0vsfBg/mnOv2aYQ46GKPrDoPlkf1/odieKC1aT3xrjvOvwvO SEAvdb0OtzMYcJqhtoYxEKMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRu2gpHzqxf lJAVRu6Jo/XiLhmnYjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Q3NTYvNjIzQzY1QjZCMDY3MTFFRjgyMTRENDY5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNENzU2LzYyM0M2NUI2QjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyL2J0b0tSODZz WDVTUUZVYnVpYVAxNGk0WnAySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6RDANBgkqhkiG9w0BAQsFAAOCAQEAxCENuOd+nrvNSDsXgDws +6+lt1buyr52heI0pRLHw4q8up05s1R408SzUzSBYc3Ok3TjkeliU4wuxBbH8J5N +kTwd7yzReAKo3MZtHpYmevVqi5u+2lR4UiMQxNC8+ALn7/QlfKqSmKp8eVU4XQY CoiEKmGE5/N+1S/O1YLJl0BXm9pbQwSKGmrSyQyvyDwJE5VlNmaSsi8fObbC+gvw /7NkDzGAJ/6h+GTCe/LmpcCdzR/iE3GA3RTC5H3jm1KISuUCfAGxJ055OUAYFkfj 1CZdjmRqNC2K+nhrKedlEsvdCiwagRo+6luIGK+pzn0Ka9/d629Q0JooZDQHxONd Xg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:17:03 2025 by rpki-client