This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer File: cPEzmWaoGrwgfjvuM3CR2fLzydc.cer (raw, json) Hash identifier: 3qVubs2WdHoy1MoZeNCkbvzf0xC20LnTW8vyi3nU2vM= Subject key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FD9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 18:44:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 3119 AS: 40747 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28633 (0x6fd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 8 18:44:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:33:24:b9:77:43:52:4d:f8:69:e6:50:69: ae:83:ee:85:7d:73:0c:d7:0b:ee:71:f7:32:03:6c: 00:37:52:f7:cc:82:cb:22:01:9d:3c:7a:0e:57:55: 39:31:af:1e:ff:0f:8d:2b:b5:79:b0:b0:88:3d:b4: 08:07:14:b5:3e:7f:e4:54:b4:a0:10:5d:38:f5:ab: cd:df:3f:65:e6:8b:25:ea:fd:27:14:a6:b2:29:0c: 23:1a:65:73:94:2e:ea:b8:e0:00:1c:d1:20:fb:d5: 46:b7:dd:bc:e1:43:b4:af:62:d6:0a:e2:bd:0d:d7: 14:f8:91:71:81:66:5d:b9:39:6f:62:6b:90:73:09: d8:e0:34:2e:6d:7a:ed:dd:87:a8:42:32:7b:e4:a1: 46:15:13:92:30:5b:50:41:c5:53:4c:63:6e:ef:41: 68:de:b6:0a:c9:0f:7d:84:0d:3c:24:ff:4d:03:fa: 87:9e:9f:8f:d8:15:e0:f5:e1:6b:d5:91:8a:a5:76: fe:91:ae:ec:16:6e:89:59:f7:7b:77:52:3b:8d:cb: ca:89:66:23:e0:e9:eb:26:51:2c:e2:ea:69:c4:7b: 82:77:bd:7a:a6:34:ad:77:35:63:29:b1:53:81:07: 7b:e0:92:40:a0:86:73:45:aa:50:11:c3:a9:c6:24: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 3119 40747 Signature Algorithm: sha256WithRSAEncryption 54:39:46:df:e7:c4:97:7d:05:ee:42:30:de:f6:35:68:6a:83: ec:1d:61:32:58:2a:de:ce:86:dd:84:71:e6:f7:ba:12:de:fa: f2:d1:e4:f1:20:9e:20:75:4e:f8:fb:88:b1:e2:87:92:66:14: 7f:52:44:cf:56:7c:71:68:01:de:57:65:9d:e4:f9:3d:49:74: a9:c8:e8:65:ff:bd:ba:cc:da:47:06:68:a0:ee:c3:92:ba:8e: c2:02:81:22:3a:6f:bc:69:d0:79:b3:17:65:97:4e:08:09:d4: d5:57:7a:41:96:f8:71:ad:35:d5:92:8d:a7:ec:45:b0:52:84: 2e:87:5c:56:bd:01:63:16:f4:c2:74:0e:f6:9d:7d:77:24:c4: 7c:24:3b:f1:67:d9:90:fc:73:c6:0f:a5:f3:85:9f:7d:78:39: 31:ec:d7:f7:8d:dd:7d:65:bc:ff:5e:e5:1a:95:6a:26:51:93: 4a:88:55:85:37:9d:28:64:54:31:65:ad:05:1e:f3:99:59:ca: b1:91:58:0d:91:af:6e:97:f3:c0:50:3d:d9:cc:cc:c3:3d:76: 5d:fb:8e:43:d8:83:92:7f:4a:dc:32:ed:b7:ca:20:88:a6:5a: 9b:b8:f8:16:f8:52:94:ac:d1:4a:0c:53:e5:42:2a:66:05:31: c3:ba:cc:bd -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICb9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA4MTg0NDMzWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFDOTMyNDExMC8GA1UEBRMoNzBGMTMzOTk2NkE4MUFCQzIwN0UzQkVF MzM3MDkxRDlGMkYzQzlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMAFMyS5d0NSTfhp5lBproPuhX1zDNcL7nH3MgNsADdS98yCyyIBnTx6DldVOTGv Hv8PjSu1ebCwiD20CAcUtT5/5FS0oBBdOPWrzd8/ZeaLJer9JxSmsikMIxplc5Qu 6rjgABzRIPvVRrfdvOFDtK9i1grivQ3XFPiRcYFmXbk5b2JrkHMJ2OA0Lm167d2H qEIye+ShRhUTkjBbUEHFU0xjbu9BaN62CskPfYQNPCT/TQP6h56fj9gV4PXha9WR iqV2/pGu7BZuiVn3e3dSO43LyolmI+Dp6yZRLOLqacR7gne9eqY0rXc1YymxU4EH e+CSQKCGc0WqUBHDqcYkgz0CAwEAAaOCAvIwggLuMB0GA1UdDgQWBBRw8TOZZqga vCB+O+4zcJHZ8vPJ1zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzMjQvMjJCRjhEMzJFMDJGMTFFRDk1MTUzRDMxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM5MzI0LzIyQkY4RDMyRTAyRjExRUQ5NTE1M0QzMUM0RjlBRTAyL2NQRXptV2Fv R3J3Z2ZqdnVNM0NSMmZMenlkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgIMLwIDAJ8rMA0GCSqGSIb3DQEBCwUAA4IBAQBUOUbf58SXfQXuQjDe9jVo aoPsHWEyWCrezobdhHHm97oS3vry0eTxIJ4gdU74+4ix4oeSZhR/UkTPVnxxaAHe V2Wd5Pk9SXSpyOhl/726zNpHBmig7sOSuo7CAoEiOm+8adB5sxdll04ICdTVV3pB lvhxrTXVko2n7EWwUoQuh1xWvQFjFvTCdA72nX13JMR8JDvxZ9mQ/HPGD6XzhZ99 eDkx7Nf3jd19Zbz/XuUalWomUZNKiFWFN50oZFQxZa0FHvOZWcqxkVgNka9ul/PA UD3ZzMzDPXZd+45D2IOSf0rcMu23yiCIplqbuPgW+FKUrNFKDFPlQipmBTHDusy9 -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:01 2025 by rpki-client