This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer (raw, json) Hash identifier: 0Qwz5mlbX2d4zBC7uZmaL8Hidp6cyRaFANuZGLQSkWU= Subject key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 708D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 13:04:37 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 45.129.228.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28813 (0x708d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 19 13:04:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:24:0a:f9:9b:41:0c:b7:8c:88:e5:a9:96: 3f:f7:92:d7:82:2a:32:b2:fd:04:09:93:82:7b:73: 8c:78:d4:fc:b9:6e:0c:0f:06:b5:cd:69:c9:05:24: 35:de:42:dc:f2:1f:28:04:92:99:9a:20:1c:66:e4: 48:2c:fa:0b:e0:12:80:59:4d:04:b2:07:13:99:b9: c0:1a:ba:04:10:5e:a4:a8:3d:79:ff:1c:b4:7c:f8: 43:e3:f4:5e:6d:d1:47:73:f1:59:7b:d9:f9:34:39: 3d:07:40:2d:92:79:20:18:59:c7:8b:c5:8e:d7:af: f4:b2:41:81:ba:32:00:2e:e5:fa:53:73:77:b2:49: 6c:b6:9a:60:22:e4:d1:32:d9:50:9b:62:89:f2:76: ee:8e:29:71:9b:0d:0c:98:b6:8b:e1:cb:9c:8f:67: a4:2f:ec:cd:a3:ce:11:d3:b2:e0:04:36:a0:f7:20: ad:83:ce:84:8e:b7:5d:29:46:5e:1c:97:fb:2d:52: e4:4d:2f:05:c9:eb:08:3c:46:05:56:d6:f2:40:0b: 09:4f:a7:a8:dd:97:69:58:e1:55:fb:6b:a3:67:91: fe:22:97:bb:c8:61:2b:91:73:6a:e3:bb:6f:01:c0: fe:1f:2d:c5:95:5d:22:d8:1d:95:71:e2:1f:23:af: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.129.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:83:5d:23:25:58:c8:17:1e:2c:7b:6d:18:f1:ee:de:11:bc: d5:c5:db:62:5f:2c:47:2c:8b:0a:ac:39:f4:a8:b1:de:8c:b8: f8:2e:ee:06:6d:e2:13:d2:c9:2d:d2:8b:08:67:15:11:92:c6: 0a:e5:03:9d:29:22:1b:33:ed:db:07:a5:64:55:a8:02:ba:bd: c9:58:3b:02:b1:f5:b0:a5:2b:ae:7c:78:84:56:38:b3:c6:a9: d8:d6:1e:c6:eb:b7:64:13:96:e0:83:64:17:3c:6f:51:45:a0: 80:c5:da:61:a6:f0:52:78:ea:1e:7d:70:81:df:22:c6:9c:a1: ee:05:26:0d:91:f0:10:6a:da:0e:71:c6:3f:13:af:8f:b4:bb: 80:44:0c:62:bf:c0:db:7e:f3:a9:28:8f:92:35:82:a8:4c:9b: c8:a1:b2:1e:c8:f5:43:be:69:62:25:d3:cd:86:f6:b5:9a:4d: 0e:96:e6:d7:7d:c5:69:01:ea:92:99:c0:c9:74:df:f9:b6:4a: 59:48:f9:6e:73:7c:82:64:98:a5:49:eb:23:f0:9e:f4:9d:8f: 23:58:89:00:6d:6d:12:00:60:f8:b8:6a:03:9a:2c:2c:e2:91: 40:b7:65:7a:24:6f:85:77:0d:ae:fa:30:eb:8c:15:1c:96:58: 15:27:34:d8 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE5MTMwNDM3WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1N0RBRTExMC8GA1UEBRMoNzYwRTZBN0YwOEI3MkZGODBFQjU2RjY3 NTAzMjNCMTY0QTcwREExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANexJAr5m0EMt4yI5amWP/eS14IqMrL9BAmTgntzjHjU/LluDA8Gtc1pyQUkNd5C 3PIfKASSmZogHGbkSCz6C+ASgFlNBLIHE5m5wBq6BBBepKg9ef8ctHz4Q+P0Xm3R R3PxWXvZ+TQ5PQdALZJ5IBhZx4vFjtev9LJBgboyAC7l+lNzd7JJbLaaYCLk0TLZ UJtiifJ27o4pcZsNDJi2i+HLnI9npC/szaPOEdOy4AQ2oPcgrYPOhI63XSlGXhyX +y1S5E0vBcnrCDxGBVbW8kALCU+nqN2XaVjhVftro2eR/iKXu8hhK5FzauO7bwHA /h8txZVdItgdlXHiHyOv3rsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR2Dmp/CLcv +A61b2dQMjsWSnDaHTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU3REFFLzVCNEM0RTM2NTk2OTExRUM5NEEzRTc3MEM0RjlBRTAyL2RnNXFmd2kz TF9nT3RXOW5VREk3RmtwdzJoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi2B5DANBgkqhkiG9w0BAQsFAAOCAQEADoNdIyVYyBceLHttGPHu 3hG81cXbYl8sRyyLCqw59Kix3oy4+C7uBm3iE9LJLdKLCGcVEZLGCuUDnSkiGzPt 2welZFWoArq9yVg7ArH1sKUrrnx4hFY4s8ap2NYexuu3ZBOW4INkFzxvUUWggMXa YabwUnjqHn1wgd8ixpyh7gUmDZHwEGraDnHGPxOvj7S7gEQMYr/A237zqSiPkjWC qEybyKGyHsj1Q75pYiXTzYb2tZpNDpbm133FaQHqkpnAyXTf+bZKWUj5bnN8gmSY pUnrI/Ce9J2PI1iJAG1tEgBg+LhqA5osLOKRQLdleiRvhXcNrvow64wVHJZYFSc0 2A== -----END CERTIFICATE-----Generated at Fri Dec 19 23:11:23 2025 by rpki-client