This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer (raw, json) Hash identifier: 3Ezw3JNgp+EbS+c36VH29DobnuzHCSsuyK4oLMU2Wps= Subject key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7062 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 03:41:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.124.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28770 (0x7062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 17 03:41:27 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:e3:e1:30:62:82:5f:45:af:26:cc:59:ac: a6:fb:ac:4a:e5:09:27:db:ed:7d:01:ff:66:7f:fc: d0:c4:6e:b0:fc:f9:7e:7c:68:40:99:20:9e:ce:ab: b5:07:a8:22:dd:4e:80:9b:71:08:da:61:99:a4:c7: a9:4a:50:b9:c4:4e:a1:4f:b0:55:29:77:a6:18:93: 37:9f:53:8d:0f:18:fd:bf:d9:a0:72:b8:b1:80:5f: d8:90:1b:8c:6c:00:93:44:2b:3e:ff:66:59:fe:67: 00:c7:59:cd:75:91:a8:04:fa:bd:7f:80:03:13:72: f4:cc:0a:79:14:3d:68:b4:8a:20:78:90:6e:f3:ff: 5c:b7:3f:c5:28:55:c5:a4:5b:e0:b6:b6:e6:9c:28: 30:55:2b:05:12:b8:06:43:b4:5e:aa:bd:a1:23:ae: 81:a1:77:79:ee:71:68:1d:67:7a:89:94:6c:6d:6b: 48:33:da:fc:4c:0c:f4:43:66:cf:ec:7a:45:dc:4a: 31:26:ac:25:ca:6b:40:0c:35:7f:91:10:55:f0:d6: 29:f9:16:fd:fd:f6:6f:41:d2:66:71:88:0b:4d:e7: 32:93:d7:bd:1e:d3:8b:e2:73:1b:52:63:53:f9:e7: 97:f3:50:35:17:db:8d:ff:1f:58:4a:d9:1d:19:0f: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.124.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:24:94:71:b2:8c:f7:73:03:aa:07:44:f8:6c:cf:22:6f:48: 4e:89:e9:d5:8f:68:e7:37:2e:0a:89:73:8a:70:8a:4a:74:d3: 97:9e:e0:62:2c:0e:ec:a2:c3:a6:6c:a4:92:91:fb:80:98:0a: 30:96:1d:9b:80:7d:66:ea:e8:ff:ae:f2:73:6f:1c:4f:6a:0b: 75:5d:de:07:82:49:4d:ba:43:68:0f:57:7a:26:bd:54:3d:06: 98:f0:6f:0e:05:8f:91:20:21:2f:cd:05:7f:c2:a5:73:49:9e: cb:0c:de:6e:50:c4:ac:36:b3:04:5a:96:1b:af:e9:0d:88:46: d8:51:c3:76:9e:e3:2e:db:48:c8:d9:49:5d:a2:aa:ba:e7:76: fc:a3:27:34:2b:ca:f4:83:64:21:0e:84:65:cf:1e:48:78:db: 1f:52:f1:72:77:d1:5d:ac:65:e1:b9:d4:e4:7e:4e:9c:f1:38: 1e:0d:6d:99:80:40:0c:10:67:ba:dc:a6:ac:11:35:fe:fa:2f: 3a:6f:40:37:02:34:56:51:8c:8d:3c:aa:ef:3b:c1:2a:3e:25: 13:7f:24:ea:74:31:5e:c6:32:df:50:ce:de:7d:03:b0:eb:c8: 03:d1:1d:17:a0:ce:a9:34:f2:1c:fc:11:7e:82:58:af:1e:85: ed:f9:94:f3 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE3MDM0MTI3WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0RTRFMjExMC8GA1UEBRMoODEyRkYwREUxQzM0NDE0NjNDQzk1Q0E4 ODQyM0JFNUExMEFEQjE3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKhw4+EwYoJfRa8mzFmspvusSuUJJ9vtfQH/Zn/80MRusPz5fnxoQJkgns6rtQeo It1OgJtxCNphmaTHqUpQucROoU+wVSl3phiTN59TjQ8Y/b/ZoHK4sYBf2JAbjGwA k0QrPv9mWf5nAMdZzXWRqAT6vX+AAxNy9MwKeRQ9aLSKIHiQbvP/XLc/xShVxaRb 4La25pwoMFUrBRK4BkO0Xqq9oSOugaF3ee5xaB1neomUbG1rSDPa/EwM9ENmz+x6 RdxKMSasJcprQAw1f5EQVfDWKfkW/f32b0HSZnGIC03nMpPXvR7Ti+JzG1JjU/nn l/NQNRfbjf8fWErZHRkPwU8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSBL/DeHDRB RjzJXKiEI75aEK2xdDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU0RTIvNDFDRTlERUVEQUZBMTFGMDlBRjYxNjIwN0NEMzY0MUQvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFNEUyLzQxQ0U5REVFREFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcw UVVZOHlWeW9oQ08tV2hDdHNYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPfDANBgkqhkiG9w0BAQsFAAOCAQEAaySUcbKM93MDqgdE+GzP Im9ITonp1Y9o5zcuColzinCKSnTTl57gYiwO7KLDpmykkpH7gJgKMJYdm4B9Zuro /67yc28cT2oLdV3eB4JJTbpDaA9Xeia9VD0GmPBvDgWPkSAhL80Ff8Klc0meywze blDErDazBFqWG6/pDYhG2FHDdp7jLttIyNlJXaKquud2/KMnNCvK9INkIQ6EZc8e SHjbH1LxcnfRXaxl4bnU5H5OnPE4Hg1tmYBADBBnutymrBE1/vovOm9ANwI0VlGM jTyq7zvBKj4lE38k6nQxXsYy31DO3n0DsOvIA9EdF6DOqTTyHPwRfoJYrx6F7fmU 8w== -----END CERTIFICATE-----Generated at Fri Dec 19 23:03:47 2025 by rpki-client