This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer File: kw7wlbDGjcijfJH_jxM3Bw6pykA.cer (raw, json) Hash identifier: FgtLU4roYFoE1JfwN/qE469yl0gv30OxDTqtsmd73UA= Subject key identifier: 93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FEA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft caRepository: rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 16:50:56 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 161.139.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28650 (0x6fea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 9 16:50:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916E1C6, serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:b4:db:aa:d1:c9:91:ae:7b:08:7d:5e:be: 4c:86:90:a4:f3:41:68:ca:eb:38:37:e6:80:f6:68: 1e:74:8b:00:47:f8:51:f4:74:37:79:cd:e1:1e:2c: 51:f0:2b:37:9c:e2:03:c5:ab:0e:66:84:36:af:3f: e4:cb:02:a0:dc:d8:e9:fe:ad:d9:de:f8:41:6f:58: ac:57:4c:57:21:29:08:2a:16:d7:ed:1b:24:4a:73: 8e:1f:d5:6d:ea:08:bb:8a:fa:89:db:40:15:3f:8e: f1:85:f3:bb:36:77:6d:1b:96:fb:69:e9:4d:14:f8: f8:05:81:9e:2f:b6:57:47:95:da:4a:09:17:72:95: b7:ca:28:b7:3b:3a:c5:3f:e9:ea:d7:0b:1a:ca:6b: 21:af:ac:47:15:b8:09:7f:94:01:2a:d1:d2:0b:9d: ae:5b:79:69:2e:be:a2:2d:8c:ea:0f:28:f1:73:98: 42:b2:b1:f8:62:68:04:fc:e9:ae:f9:05:ea:ce:26: 37:97:9c:f0:f9:7a:61:9f:96:27:6a:40:b3:e9:72: d6:46:ec:1d:45:73:b6:e4:eb:c4:70:94:ee:55:9a: ab:26:2a:34:02:88:3b:80:79:62:40:c3:f5:6d:23: 13:06:a3:61:51:a2:9a:63:90:b1:3a:8a:e1:0e:b9: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.139.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:3b:54:23:4c:c1:8f:c5:80:41:90:70:3a:6b:b2:72:f7:55: 20:63:95:31:15:72:f5:45:b9:45:c2:2a:f9:98:1b:81:7a:a8: c7:23:52:e7:88:14:ec:5e:ff:27:76:12:a4:9f:06:c5:bc:bb: 50:b5:2c:ce:47:df:0a:c7:48:8f:fe:c8:64:a2:de:0c:7c:fc: fa:ae:5d:8a:4d:45:65:69:0d:2c:d4:64:9d:b8:9d:11:7c:67: 3a:aa:3e:90:29:24:d7:85:d3:86:bc:18:08:d0:dc:56:61:aa: ea:34:87:99:fc:e0:0d:30:32:6b:89:97:f0:14:4f:1f:4a:34: 46:22:95:58:c0:4f:58:6b:96:a6:cc:93:62:e0:eb:07:e4:27: cb:68:cd:c1:eb:16:27:3e:d5:aa:38:d1:9a:72:e5:ca:a5:e3: 3a:29:31:59:b6:6e:df:25:18:ce:20:9f:a6:04:39:87:2f:87: 6c:44:4b:af:ab:a3:22:21:c6:a2:5b:eb:c0:ad:8c:8d:90:39: a1:62:a3:c4:5b:f2:b6:4a:07:50:04:82:4d:28:cc:32:b4:2e: 9b:2e:a5:ef:6f:80:67:e5:3b:ee:f1:83:b5:d0:d6:9a:59:42: 09:7f:65:e2:96:c2:a4:cd:ce:dc:cf:af:68:42:7e:5d:e2:da: f6:18:da:82 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICb+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA5MTY1MDU2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2RTFDNjExMC8GA1UEBRMoOTMwRUYwOTVCMEM2OERDOEEzN0M5MUZG OEYxMzM3MDcwRUE5Q0E0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALwTtNuq0cmRrnsIfV6+TIaQpPNBaMrrODfmgPZoHnSLAEf4UfR0N3nN4R4sUfAr N5ziA8WrDmaENq8/5MsCoNzY6f6t2d74QW9YrFdMVyEpCCoW1+0bJEpzjh/VbeoI u4r6idtAFT+O8YXzuzZ3bRuW+2npTRT4+AWBni+2V0eV2koJF3KVt8ootzs6xT/p 6tcLGsprIa+sRxW4CX+UASrR0gudrlt5aS6+oi2M6g8o8XOYQrKx+GJoBPzprvkF 6s4mN5ec8Pl6YZ+WJ2pAs+ly1kbsHUVztuTrxHCU7lWaqyYqNAKIO4B5YkDD9W0j EwajYVGimmOQsTqK4Q65Z0sCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBSTDvCVsMaN yKN8kf+PEzcHDqnKQDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkUxQzYvMzk3MTg0NjJENTFGMTFGMDg3RTlCNTdEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZFMUM2LzM5NzE4NDYyRDUxRjExRjA4N0U5QjU3REM0RjlBRTAyL2t3N3dsYkRH amNpamZKSF9qeE0zQnc2cHlrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAKGLMA0GCSqGSIb3DQEBCwUAA4IBAQCdO1QjTMGPxYBBkHA6a7Jy 91UgY5UxFXL1RblFwir5mBuBeqjHI1LniBTsXv8ndhKknwbFvLtQtSzOR98Kx0iP /shkot4MfPz6rl2KTUVlaQ0s1GSduJ0RfGc6qj6QKSTXhdOGvBgI0NxWYarqNIeZ /OANMDJriZfwFE8fSjRGIpVYwE9Ya5amzJNi4OsH5CfLaM3B6xYnPtWqONGacuXK peM6KTFZtm7fJRjOIJ+mBDmHL4dsREuvq6MiIcaiW+vArYyNkDmhYqPEW/K2SgdQ BIJNKMwytC6bLqXvb4Bn5Tvu8YO10NaaWUIJf2XilsKkzc7cz69oQn5d4tr2GNqC -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:31 2025 by rpki-client