This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer File: bvj-zvM56m3paYzCxfWGRc9l794.cer (raw, json) Hash identifier: bkjscOjShqznLLEMBzYOpoAl5cli2JHRApX2cr06PJI= Subject key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7082 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft caRepository: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:23:21 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 157.85.80.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28802 (0x7082) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 19 04:23:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:48:2d:fd:4e:c6:93:aa:8b:f2:93:47:a1: c0:49:3b:25:fa:7c:0c:b0:6c:35:98:d0:43:42:55: 89:03:47:bf:a4:8d:0f:9f:ba:a2:87:2e:59:0b:3d: 3b:28:99:b3:06:b8:51:54:a9:1a:a9:bb:ea:e6:5d: b5:02:a1:e3:a8:90:26:1d:ea:18:ee:2a:1d:05:54: d6:a5:99:4e:d6:3f:df:5a:3b:28:f7:2f:0a:ca:a3: 57:77:f3:cd:cd:83:31:6e:9b:4b:5b:23:1b:9d:62: a9:79:52:c8:6b:86:dd:81:a1:87:b2:89:a7:7e:48: dd:13:42:50:e7:ce:c3:92:83:2a:ff:6f:7c:3e:43: 64:d1:ff:06:45:fd:f5:35:b3:22:a6:54:20:73:64: c0:de:d6:7d:46:1b:8d:11:f3:1b:5c:d4:3e:1b:40: b5:0f:41:a5:e3:d1:d5:60:12:07:3e:c2:80:49:7c: cd:bb:47:d5:83:89:b4:33:5a:29:43:73:6c:68:6a: b4:9a:73:fd:40:e7:63:b0:3d:41:1d:85:34:f4:bc: 96:be:46:f4:f0:6a:89:cc:7e:39:90:a1:e0:61:0a: 7f:0b:8c:04:3d:ac:2d:b6:ab:79:bc:20:00:db:47: 99:28:80:22:39:22:0b:84:1f:9b:e5:5a:26:82:13: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.85.80.0/20 Signature Algorithm: sha256WithRSAEncryption b9:b9:da:43:a2:e5:13:75:e5:f3:3b:6b:8a:d5:b1:1b:5a:d2: 27:43:2d:9a:70:fa:03:4b:0f:ea:2b:67:d9:e9:3e:f2:c2:13: 55:39:ed:34:bd:c2:77:b4:36:a5:4c:03:0d:86:48:fc:54:76: 91:b5:e2:54:70:cb:91:fc:94:01:c5:7f:d2:b6:2e:2b:21:1b: f7:35:4b:94:2f:bd:4e:d5:4f:b5:85:e3:49:3a:6d:68:e4:43: 5d:86:17:67:97:55:54:f5:41:5c:92:8f:81:43:56:3f:da:3d: 5f:43:d1:ee:0b:6d:95:18:fc:16:7e:af:9c:5f:af:ee:b2:28: dc:ab:cf:85:fc:ea:5f:d5:36:e0:58:19:3f:47:66:51:35:28: 03:0b:be:89:00:9d:3d:4f:10:c4:87:90:0e:4b:2e:6d:80:c1: bc:78:12:e3:69:9c:3b:79:b9:f7:aa:66:b6:dd:a4:15:81:dc: 81:bf:e3:97:47:67:b1:41:ec:c7:c1:98:2f:a6:a6:8b:90:4f: 4c:b2:08:65:ba:a7:1c:f6:c1:b9:d3:44:4a:ec:ec:b3:f2:53: 80:b5:22:25:17:c5:07:ed:03:fc:47:f2:8a:05:1f:58:e9:a1: 5a:9f:28:ec:3e:f9:19:f0:69:69:56:b7:96:54:d0:8a:65:be: 6b:cf:46:33 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE5MDQyMzIxWhcNMjYwNzMwMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5NkY3QzExMC8GA1UEBRMoNkVGOEZFQ0VGMzM5RUE2REU5Njk4Q0My QzVGNTg2NDVDRjY1RUZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANbwSC39TsaTqovyk0ehwEk7Jfp8DLBsNZjQQ0JViQNHv6SND5+6oocuWQs9OyiZ swa4UVSpGqm76uZdtQKh46iQJh3qGO4qHQVU1qWZTtY/31o7KPcvCsqjV3fzzc2D MW6bS1sjG51iqXlSyGuG3YGhh7KJp35I3RNCUOfOw5KDKv9vfD5DZNH/BkX99TWz IqZUIHNkwN7WfUYbjRHzG1zUPhtAtQ9BpePR1WASBz7CgEl8zbtH1YOJtDNaKUNz bGhqtJpz/UDnY7A9QR2FNPS8lr5G9PBqicx+OZCh4GEKfwuMBD2sLbarebwgANtH mSiAIjkiC4Qfm+VaJoITc1UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRu+P7O8znq belpjMLF9YZFz2Xv3jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZGN0MvMDdGMzRGMDhBNEIyMTFGMEI4NEMxMzQzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk2RjdDLzA3RjM0RjA4QTRCMjExRjBCODRDMTM0M0M0RjlBRTAyL2J2ai16dk01 Nm0zcGFZekN4ZldHUmM5bDc5NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBJ1VUDANBgkqhkiG9w0BAQsFAAOCAQEAubnaQ6LlE3Xl8ztritWx G1rSJ0MtmnD6A0sP6itn2ek+8sITVTntNL3Cd7Q2pUwDDYZI/FR2kbXiVHDLkfyU AcV/0rYuKyEb9zVLlC+9TtVPtYXjSTptaORDXYYXZ5dVVPVBXJKPgUNWP9o9X0PR 7gttlRj8Fn6vnF+v7rIo3KvPhfzqX9U24FgZP0dmUTUoAwu+iQCdPU8QxIeQDksu bYDBvHgS42mcO3m596pmtt2kFYHcgb/jl0dnsUHsx8GYL6ami5BPTLIIZbqnHPbB udNESuzss/JTgLUiJRfFB+0D/EfyigUfWOmhWp8o7D75GfBpaVa3llTQimW+a89G Mw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:17:02 2025 by rpki-client