This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer File: sDQcND_hUl92ySmWEMoOeOk-h8M.cer (raw, json) Hash identifier: Nzw4hkFQwdZE+wf7sk7HiNM87SfUddXL+exVp3LMGMM= Subject key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FD0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft caRepository: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 15:07:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.158.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28624 (0x6fd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 8 15:07:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:e4:39:a9:fc:ca:db:2b:8b:7b:6a:03:14: b0:e9:0e:82:6b:12:f9:93:9a:12:70:50:1a:15:bd: 67:43:ad:33:f2:b8:56:e8:fe:b9:48:66:9c:29:17: 04:35:36:77:2e:71:c5:54:d5:32:7e:f7:d1:aa:c4: 53:c4:1b:3c:3b:08:c0:4a:6c:21:d8:27:12:6e:21: d7:af:f7:32:76:1d:e7:07:3a:7a:bb:d6:15:c9:8b: dc:71:2b:9e:53:f0:85:4f:fb:2f:2c:d7:77:de:f0: 76:0c:5a:66:7a:9b:19:0e:88:9b:7c:f5:49:73:1a: 4f:de:0a:c7:71:3a:f9:db:3a:20:52:21:3c:89:37: fa:f8:8b:1d:37:40:18:b4:c0:55:0d:6c:6e:32:ab: da:eb:e7:6f:7e:69:4b:c8:0f:02:c6:c0:dc:8c:04: b3:d0:30:e5:6d:2f:c1:45:43:6d:38:27:a2:fb:97: 85:1e:3d:a8:bc:67:2e:27:a1:1c:e4:d5:33:f2:ab: 70:be:34:81:ee:67:3d:96:a9:af:a4:55:c1:04:36: b2:77:86:65:84:27:44:dc:c1:75:78:2c:07:c6:1f: 22:b6:30:f9:6d:d9:dd:15:8d:74:e9:3a:12:3d:96: 74:4c:21:84:d2:d1:61:3e:df:cf:98:58:2e:35:d0: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.158.0/23 Signature Algorithm: sha256WithRSAEncryption ab:c3:ef:ff:2a:ef:3f:32:c2:b8:4e:d5:55:19:bf:83:8c:18: c4:64:bf:58:e4:cc:36:55:92:b1:7f:5a:77:fe:85:c3:a5:e7: 90:75:03:eb:0f:1a:a5:68:42:4f:62:fa:fc:cb:9a:c3:62:34: 40:d6:27:86:a7:3c:c3:8b:42:97:e5:5b:c9:08:55:00:10:99: e7:4f:fb:ae:38:e0:73:2b:74:3f:f0:f9:a7:8f:e5:47:d2:a6: 20:d3:62:f8:61:6a:88:d3:5c:22:ce:39:03:0a:86:fc:48:3c: 4a:16:f9:b6:10:78:60:db:d4:db:3b:98:ab:76:a8:c6:ea:11: 20:6b:cd:04:48:7f:15:e9:77:d0:f5:43:5b:4b:bd:42:f3:11: 1c:25:ed:f3:fc:ec:a2:34:83:78:b2:a8:b3:11:53:c1:d6:48: 2b:0e:3d:2f:74:50:43:8d:11:27:fb:86:89:c8:96:40:43:b8: a8:a1:60:82:fe:65:fa:cf:57:11:b6:48:1b:eb:35:4e:cd:3e: cc:67:fe:5f:66:0f:a4:53:a7:93:6f:44:d6:1b:4f:6f:c4:f6: b6:88:4a:c3:69:68:83:30:ae:22:b3:48:2b:bc:05:e6:6b:7c: 9b:03:f8:33:0e:09:c8:9e:58:c0:19:cd:a7:aa:15:bc:03:05: 74:fd:66:25 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA4MTUwNzEzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE2N0ZCQTExMC8GA1UEBRMoQjAzNDFDMzQzRkUxNTI1Rjc2QzkyOTk2 MTBDQTBFNzhFOTNFODdDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALjd5Dmp/MrbK4t7agMUsOkOgmsS+ZOaEnBQGhW9Z0OtM/K4Vuj+uUhmnCkXBDU2 dy5xxVTVMn730arEU8QbPDsIwEpsIdgnEm4h16/3MnYd5wc6ervWFcmL3HErnlPw hU/7LyzXd97wdgxaZnqbGQ6Im3z1SXMaT94Kx3E6+ds6IFIhPIk3+viLHTdAGLTA VQ1sbjKr2uvnb35pS8gPAsbA3IwEs9Aw5W0vwUVDbTgnovuXhR49qLxnLiehHOTV M/KrcL40ge5nPZapr6RVwQQ2sneGZYQnRNzBdXgsB8YfIrYw+W3Z3RWNdOk6Ej2W dEwhhNLRYT7fz5hYLjXQ51ECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSwNBw0P+FS X3bJKZYQyg546T6HwzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdGQkEvNDJGQzNEOEEwNDhGMTFGMDg3MkU4NTQ3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY3RkJBLzQyRkMzRDhBMDQ4RjExRjA4NzJFODU0N0M0RjlBRTAyL3NEUWNORF9o VWw5MnlTbVdFTW9PZU9rLWg4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6njANBgkqhkiG9w0BAQsFAAOCAQEAq8Pv/yrvPzLCuE7VVRm/ g4wYxGS/WOTMNlWSsX9ad/6Fw6XnkHUD6w8apWhCT2L6/Muaw2I0QNYnhqc8w4tC l+VbyQhVABCZ50/7rjjgcyt0P/D5p4/lR9KmINNi+GFqiNNcIs45AwqG/Eg8Shb5 thB4YNvU2zuYq3aoxuoRIGvNBEh/Fel30PVDW0u9QvMRHCXt8/zsojSDeLKosxFT wdZIKw49L3RQQ40RJ/uGiciWQEO4qKFggv5l+s9XEbZIG+s1Ts0+zGf+X2YPpFOn k29E1htPb8T2tohKw2logzCuIrNIK7wF5mt8mwP4Mw4JyJ5YwBnNp6oVvAMFdP1m JQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:13:00 2025 by rpki-client