This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer (raw, json) Hash identifier: az4/ejWXsfBUQH/xSdZ71lmzKLqp/LpDf4lKRaMTX+A= Subject key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7058 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 17:17:39 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 128.94.0.0/16 IP: 135.149.0.0/16 IP: 138.239.0.0/16 IP: 147.145.0.0/16 IP: 148.7.0.0/16 IP: 155.62.0.0/16 IP: 158.23.0.0/16 IP: 158.158.0.0/16 IP: 160.4.0.0/16 IP: 167.105.0.0/16 IP: 167.220.224.0 -- 167.220.243.255 IP: 167.220.248.0/21 IP: 169.138.0.0/16 IP: 170.165.0.0/16 IP: 192.146.133.0/24 IP: 192.153.251.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28760 (0x7058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 16 17:17:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:55:ae:8c:26:11:18:89:cc:fb:f2:19:94: b6:3f:db:a2:5e:b3:85:f3:83:8b:47:e4:bc:2a:a2: 1e:5d:52:ee:b0:2e:68:82:7a:80:b8:67:c9:a4:c2: 2b:8c:3c:81:d9:a8:40:b1:b2:ee:b6:04:dd:ad:d4: ca:cd:d8:98:3b:e0:19:ac:72:b2:a2:5a:bd:4b:1a: 5e:be:28:d4:62:01:a5:b3:ce:de:9b:a6:36:fa:60: e7:c2:89:5e:b5:a4:db:d5:ce:6b:2b:50:75:ec:4b: 1c:55:f1:3a:10:54:6d:88:1d:b7:46:3b:ff:3c:4d: 5e:4b:95:bf:c9:a0:d0:8f:19:ed:e9:ea:71:97:d9: 32:35:6f:91:07:03:3b:8a:f8:b8:11:2e:74:73:f4: 81:e0:13:c5:8f:a7:8f:0d:79:f0:ad:12:36:1c:54: cd:8a:bc:18:38:ef:6e:0a:9c:fa:6c:84:6e:9b:6d: a5:7b:af:66:29:3f:bc:47:b4:3e:61:20:e3:55:66: 93:60:c7:c2:26:da:48:aa:10:4c:00:88:a6:5c:c7: af:e2:1b:0f:b5:d4:4e:d2:6e:d7:53:20:1c:13:0a: 1e:bc:a6:ad:94:7f:29:39:0c:bf:96:74:aa:31:97: 3a:44:3c:b6:3d:96:50:2b:de:df:11:56:56:78:7b: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.94.0.0/16 135.149.0.0/16 138.239.0.0/16 147.145.0.0/16 148.7.0.0/16 155.62.0.0/16 158.23.0.0/16 158.158.0.0/16 160.4.0.0/16 167.105.0.0/16 167.220.224.0-167.220.243.255 167.220.248.0/21 169.138.0.0/16 170.165.0.0/16 192.146.133.0/24 192.153.251.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:a3:e1:3e:16:49:6f:a1:8e:76:f6:cf:72:ec:48:64:f9:45: 33:6c:8c:2d:59:f3:5b:c4:99:72:c2:2c:d3:af:9e:0c:c4:7c: 4b:70:2c:2b:b2:e6:b0:df:79:fe:21:89:ba:17:2a:2f:32:6e: d5:7b:eb:00:21:52:5b:56:66:cf:95:83:27:dc:bf:2c:96:ce: 05:8b:11:e9:32:b7:0a:80:8e:4d:7b:26:37:82:7e:52:a8:da: 5b:65:16:0d:b0:31:86:00:f2:8d:e8:b5:6a:34:dd:f0:27:95: 2f:db:f9:01:49:cb:17:75:57:b3:b1:61:6f:db:f0:f9:80:23: e8:be:f7:9c:18:5d:fd:43:1d:13:f8:c4:c2:b3:7a:7f:ef:81: 68:1b:5e:85:06:cc:73:79:76:3b:c3:79:ba:1c:28:06:e1:6a: 91:f6:34:59:1d:0e:aa:81:48:f7:93:be:91:af:30:93:2f:86: 96:ea:7d:86:58:e6:a1:a6:b8:49:57:e7:92:b9:a4:06:5d:4f: 24:d7:f0:58:7f:54:63:3b:89:e8:8b:b7:fb:16:40:45:bb:9c: 89:7f:5b:b4:70:69:ba:c9:da:75:8f:9f:79:d6:64:11:cc:a2: df:89:85:79:2c:4c:b6:ed:8d:d1:c4:a9:d7:f2:4b:c5:b2:37: 91:89:1e:0c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgICcFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE2MTcxNzM5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBM0UzRjExMC8GA1UEBRMoOTQzRDNFMTBCOEJCRTEzOEI0NzczNDU1 NEI2OTA1MzExMEQ0NUJFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALBGVa6MJhEYicz78hmUtj/bol6zhfODi0fkvCqiHl1S7rAuaIJ6gLhnyaTCK4w8 gdmoQLGy7rYE3a3Uys3YmDvgGaxysqJavUsaXr4o1GIBpbPO3pumNvpg58KJXrWk 29XOaytQdexLHFXxOhBUbYgdt0Y7/zxNXkuVv8mg0I8Z7enqcZfZMjVvkQcDO4r4 uBEudHP0geATxY+njw158K0SNhxUzYq8GDjvbgqc+myEbpttpXuvZik/vEe0PmEg 41Vmk2DHwibaSKoQTACIplzHr+IbD7XUTtJu11MgHBMKHrymrZR/KTkMv5Z0qjGX OkQ8tj2WUCve3xFWVnh76HcCAwEAAaOCA0kwggNFMB0GA1UdDgQWBBSUPT4QuLvh OLR3NFVLaQUxENRb4zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNFM0YvMzA1RUI4NzY3Q0RCMTFFREFCODQ0QzE5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEzRTNGLzMwNUVCODc2N0NEQjExRURBQjg0NEMxOUM0RjlBRTAyL2xEMC1FTGk3 NFRpMGR6UlZTMmtGTVJEVVctTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDB1BggrBgEFBQcBBwEB/wRmMGQw YgQCAAEwXAMDAIBeAwMAh5UDAwCK7wMDAJORAwMAlAcDAwCbPgMDAJ4XAwMAnp4D AwCgBAMDAKdpMAwDBAWn3OADBAKn3PADBAOn3PgDAwCpigMDAKqlAwQAwJKFAwQA wJn7MA0GCSqGSIb3DQEBCwUAA4IBAQB6o+E+FklvoY529s9y7Ehk+UUzbIwtWfNb xJlywizTr54MxHxLcCwrsuaw33n+IYm6FyovMm7Ve+sAIVJbVmbPlYMn3L8sls4F ixHpMrcKgI5NeyY3gn5SqNpbZRYNsDGGAPKN6LVqNN3wJ5Uv2/kBScsXdVezsWFv 2/D5gCPovvecGF39Qx0T+MTCs3p/74FoG16FBsxzeXY7w3m6HCgG4WqR9jRZHQ6q gUj3k76RrzCTL4aW6n2GWOahprhJV+eSuaQGXU8k1/BYf1RjO4noi7f7FkBFu5yJ f1u0cGm6ydp1j5951mQRzKLfiYV5LEy27Y3RxKnX8kvFsjeRiR4M -----END CERTIFICATE-----Generated at Fri Dec 19 23:13:30 2025 by rpki-client