This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer (raw, json) Hash identifier: BVfaLX9H1NH9A6dSk2FdLIx0jo1W3jA+x8fz4sEcdrk= Subject key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FE1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 05:15:51 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 155.35.1.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28641 (0x6fe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 9 05:15:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:ee:56:01:db:eb:53:2d:cc:a7:e6:0d:eb: 01:e7:bb:cb:c7:17:d4:e5:2f:86:55:18:13:32:ee: 2a:10:6f:f1:ce:23:71:2d:7a:be:0c:fb:e1:66:a2: 70:24:4c:e3:24:e9:55:2e:fa:55:51:f1:45:40:65: 48:b7:af:9f:19:37:a6:c2:93:66:2f:c5:64:03:73: 73:4a:9d:f0:a4:2f:14:e7:de:0a:93:09:7f:48:54: 3a:4d:b3:8e:7b:4a:70:0d:2b:23:8e:cc:be:32:72: 91:29:5e:49:5e:7a:ee:f6:bb:b7:22:c0:db:4a:62: a0:d8:41:f3:c6:45:d5:21:82:22:45:6b:70:94:dc: 77:07:bc:c9:fe:9c:05:15:05:6b:88:41:e7:99:1d: 1e:26:87:9f:be:d0:a0:7e:6b:60:24:7a:b6:a7:fb: 80:e0:a1:27:03:03:f8:8c:ba:01:71:49:96:06:6c: 13:fb:89:27:d5:ee:6b:82:7b:e3:05:80:af:49:f9: 53:ca:e3:43:da:41:0e:ad:3b:e6:4c:e7:f7:72:9e: ac:aa:f0:8a:1f:5b:d5:df:d6:cc:c1:73:b4:7b:7c: c2:e1:69:d2:91:48:f5:1a:6a:4b:94:37:73:97:24: 89:fe:f4:62:ac:c4:58:4d:8e:2f:95:10:9a:44:42: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.35.1.0/24 Signature Algorithm: sha256WithRSAEncryption bc:f8:d4:95:e3:d4:fa:ac:0b:0f:7e:f4:a1:c9:59:26:86:0b: 43:f0:a8:0b:41:8a:40:c0:44:80:c7:c1:1a:a2:eb:d7:57:3b: af:d2:34:a2:de:e6:63:75:44:d7:cd:68:81:39:03:6d:a2:79: 2d:67:ee:ab:0d:45:62:18:7f:b2:ed:b1:99:a9:f1:06:7f:d8: c8:d6:2b:11:30:80:67:c4:03:11:d9:a4:5f:14:9c:d4:6d:8f: e0:d2:bd:f9:73:0f:ea:11:3f:e4:37:ab:f2:fe:b9:32:be:ed: 2e:80:09:16:4b:d2:74:01:68:5e:62:f9:4a:ea:43:02:5c:0b: 33:11:21:13:21:0c:12:53:b8:6e:56:22:55:32:46:4d:e0:68: e1:c9:d7:f8:e1:f5:53:e7:b0:84:5d:ce:53:45:09:22:4d:5b: 3b:9b:d2:27:f1:ea:34:0d:fe:a6:cf:3c:86:db:44:40:af:29: e7:88:46:b0:d9:bc:4f:62:d6:5c:aa:b7:71:69:7c:b5:fd:1e: 57:16:2f:42:8d:28:8e:a2:0c:33:2e:15:67:2b:e0:00:7d:ee: 02:47:39:c8:be:56:de:5b:78:53:88:8d:96:4c:0b:54:34:c2: 18:fd:49:7a:53:95:bf:f2:7f:36:dc:9b:dd:08:0a:d7:e3:1c: 6e:60:18:20 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA5MDUxNTUxWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4NzhCMzExMC8GA1UEBRMoQTYyMTZGQjFEOEJDNzg1NUY3NzA3MzVE NDUxMjhBODdDNzEzQUZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMm07lYB2+tTLcyn5g3rAee7y8cX1OUvhlUYEzLuKhBv8c4jcS16vgz74WaicCRM 4yTpVS76VVHxRUBlSLevnxk3psKTZi/FZANzc0qd8KQvFOfeCpMJf0hUOk2zjntK cA0rI47MvjJykSleSV567va7tyLA20pioNhB88ZF1SGCIkVrcJTcdwe8yf6cBRUF a4hB55kdHiaHn77QoH5rYCR6tqf7gOChJwMD+Iy6AXFJlgZsE/uJJ9Xua4J74wWA r0n5U8rjQ9pBDq075kzn93KerKrwih9b1d/WzMFztHt8wuFp0pFI9RpqS5Q3c5ck if70YqzEWE2OL5UQmkRCLIcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSmIW+x2Lx4 Vfdwc11FEoqHxxOvxDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc4QjMvMUU1MzBGQ0NENEJFMTFGMEJGOUZFMjE2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3OEIzLzFFNTMwRkNDRDRCRTExRjBCRjlGRTIxNkM0RjlBRTAyL3BpRnZzZGk4 ZUZYM2NITmRSUktLaDhjVHI4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJsjATANBgkqhkiG9w0BAQsFAAOCAQEAvPjUlePU+qwLD370oclZ JoYLQ/CoC0GKQMBEgMfBGqLr11c7r9I0ot7mY3VE181ogTkDbaJ5LWfuqw1FYhh/ su2xmanxBn/YyNYrETCAZ8QDEdmkXxSc1G2P4NK9+XMP6hE/5Der8v65Mr7tLoAJ FkvSdAFoXmL5SupDAlwLMxEhEyEMElO4blYiVTJGTeBo4cnX+OH1U+ewhF3OU0UJ Ik1bO5vSJ/HqNA3+ps88httEQK8p54hGsNm8T2LWXKq3cWl8tf0eVxYvQo0ojqIM My4VZyvgAH3uAkc5yL5W3lt4U4iNlkwLVDTCGP1JelOVv/J/Ntyb3QgK1+McbmAY IA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:31 2025 by rpki-client