This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hhIZKNm0AeMdansgbrAWLThuBHI.cer File: hhIZKNm0AeMdansgbrAWLThuBHI.cer (raw, json) Hash identifier: MX0hBXgz+Vov2pdO6YIbMS5HwQR+ubPeo3N/rOpTajE= Subject key identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FF8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 07:01:21 +0000 Certificate not after: Mon 01 May 2028 00:00:00 +0000 Subordinate resources: IP: 144.79.112.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28664 (0x6ff8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 11 07:01:21 2025 GMT Not After : May 1 00:00:00 2028 GMT Subject: CN=A91B8C6C, serialNumber=86121928D9B401E31D6A7B206EB0162D386E0472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:92:05:99:59:e4:fc:04:c0:80:36:76:e2: 30:96:9c:b5:8f:a2:78:36:72:6b:d7:f3:4d:4f:d8: 8e:b2:82:02:fe:4c:2c:65:7f:0f:5c:cb:3b:9e:93: 47:3a:a8:31:9c:0e:d9:4a:3b:c4:f6:80:9e:30:9e: 85:4e:a8:64:d1:74:fb:44:b9:21:54:c6:34:12:7d: 18:48:9c:d5:2a:da:9c:e4:f6:8c:bc:89:88:6a:24: 00:e4:ae:22:79:d1:68:e8:ee:24:92:f4:96:3e:dc: 4f:8f:12:05:36:91:a8:da:a1:39:fc:a6:4a:52:27: c8:84:ef:4f:1a:8d:4f:e6:ef:5b:2d:6e:7e:f8:c8: 3c:ce:8b:cf:c3:8f:a3:a6:c7:80:88:31:4c:2e:30: 7b:1b:f9:76:36:12:72:a2:15:6c:6e:73:6d:56:fe: 32:b3:51:da:a7:a3:2f:46:f2:bf:ad:be:56:89:c9: f2:1e:1c:c8:2e:f4:07:66:f2:e6:cc:4d:51:5e:7e: 2f:a6:a2:0a:1e:b6:3e:78:a4:f9:4b:26:ba:ff:c0: 92:95:1d:44:9a:e6:9b:0e:70:21:91:a2:ea:de:37: a6:a7:36:cb:fa:9b:de:bf:8c:44:eb:9a:bf:0c:84: 32:12:22:fe:4b:d2:e4:af:22:41:d9:a2:2c:a1:91: bc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:12:19:28:D9:B4:01:E3:1D:6A:7B:20:6E:B0:16:2D:38:6E:04:72 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/30A54F6CD65F11F0B06FD8A20AB43E13/hhIZKNm0AeMdansgbrAWLThuBHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.112.0/23 Signature Algorithm: sha256WithRSAEncryption 89:53:ad:f5:c6:c4:26:c6:64:dc:a9:bc:e2:bf:fe:0a:66:eb: 32:8b:71:6a:52:ba:7f:48:f0:39:7f:22:93:7a:9e:9b:76:80: 53:45:22:c4:7c:93:80:36:1a:7f:ae:63:99:3a:74:c0:ec:de: 2e:4f:bd:0c:bc:b9:99:1f:48:9a:54:87:d1:47:12:02:0e:46: 31:b0:02:4a:e1:74:fd:d2:13:78:3a:64:8f:6f:37:25:ec:98: 09:81:32:51:21:f7:a3:80:c0:7e:0c:99:a2:f4:6b:53:3e:76: 86:bf:69:11:a0:04:9e:58:b5:71:3b:c0:e6:14:bd:cf:29:75: d4:9e:da:02:5e:ed:61:c9:47:bc:14:f6:1f:2f:ff:20:30:f1: da:3c:87:fe:62:d1:85:d2:be:75:f4:87:bc:d8:89:3e:bd:e0: a9:61:57:de:c9:25:5c:f2:36:c7:ee:ca:63:4e:ce:f1:99:4f: ab:0f:61:ff:50:c0:46:d5:3d:5c:e8:e1:ec:67:ec:16:87:26: d7:9f:16:cd:67:f1:2b:51:1a:58:00:76:25:30:fe:8d:37:72: bf:a2:d3:07:6d:06:00:75:74:d2:da:81:31:ea:72:e2:90:87: 83:dc:e4:b9:e1:5f:72:dc:0a:d6:35:5d:67:17:a1:c8:3b:6c: 53:ab:16:6c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjExMDcwMTIxWhcNMjgwNTAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCOEM2QzExMC8GA1UEBRMoODYxMjE5MjhEOUI0MDFFMzFENkE3QjIw NkVCMDE2MkQzODZFMDQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALqikgWZWeT8BMCANnbiMJactY+ieDZya9fzTU/YjrKCAv5MLGV/D1zLO56TRzqo MZwO2Uo7xPaAnjCehU6oZNF0+0S5IVTGNBJ9GEic1SranOT2jLyJiGokAOSuInnR aOjuJJL0lj7cT48SBTaRqNqhOfymSlInyITvTxqNT+bvWy1ufvjIPM6Lz8OPo6bH gIgxTC4wexv5djYScqIVbG5zbVb+MrNR2qejL0byv62+VonJ8h4cyC70B2by5sxN UV5+L6aiCh62Pnik+Usmuv/AkpUdRJrmmw5wIZGi6t43pqc2y/qb3r+MROuavwyE MhIi/kvS5K8iQdmiLKGRvJsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSGEhko2bQB 4x1qeyBusBYtOG4EcjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhDNkMvMzBBNTRGNkNENjVGMTFGMEIwNkZEOEEyMEFCNDNFMTMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI4QzZDLzMwQTU0RjZDRDY1RjExRjBCMDZGRDhBMjBBQjQzRTEzL2hoSVpLTm0w QWVNZGFuc2dickFXTFRodUJISS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPcDANBgkqhkiG9w0BAQsFAAOCAQEAiVOt9cbEJsZk3Km84r/+ CmbrMotxalK6f0jwOX8ik3qem3aAU0UixHyTgDYaf65jmTp0wOzeLk+9DLy5mR9I mlSH0UcSAg5GMbACSuF0/dITeDpkj283JeyYCYEyUSH3o4DAfgyZovRrUz52hr9p EaAEnli1cTvA5hS9zyl11J7aAl7tYclHvBT2Hy//IDDx2jyH/mLRhdK+dfSHvNiJ Pr3gqWFX3sklXPI2x+7KY07O8ZlPqw9h/1DARtU9XOjh7GfsFocm158WzWfxK1Ea WAB2JTD+jTdyv6LTB20GAHV00tqBMepy4pCHg9zkueFfctwK1jVdZxehyDtsU6sW bA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:03:47 2025 by rpki-client