This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer (raw, json) Hash identifier: nPyg6aCYF16Zy3pDCXKzl6oVyT5Qk+xewPKq37xiQVk= Subject key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7064 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 10:32:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.158.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28772 (0x7064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 17 10:32:27 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2a:dc:4c:84:fa:2f:a4:35:47:3d:d8:d6:bb: fd:3c:99:b9:09:37:c6:21:bf:d6:b8:6c:59:e8:34: ee:1c:1f:6c:54:b9:d0:4f:db:c2:45:94:50:19:07: cf:3c:eb:7a:e5:69:76:52:a1:87:d3:e1:5c:13:f4: f9:a9:60:c4:32:6c:be:39:4a:44:d7:a1:4e:ec:1f: 19:01:95:25:4f:75:1c:1d:12:65:12:77:a1:66:2d: 71:47:d3:57:eb:7f:8e:76:84:21:e9:e0:0d:51:7b: 94:49:c0:6f:dc:22:7a:a8:71:2c:35:a8:06:bf:26: 17:d5:f1:a0:a0:42:e2:53:4a:8c:ff:d7:40:3a:97: b1:f8:df:f1:49:6c:8a:65:cc:0d:02:16:94:f4:b3: 04:1b:fe:43:15:06:5d:a5:42:89:17:fd:21:e2:df: 20:fc:88:48:f6:0e:16:5e:6e:83:48:1d:12:50:65: d3:5a:c5:bd:38:66:58:09:a9:5a:ba:5d:16:ae:dd: 8d:8c:be:ff:65:7e:3b:a5:51:62:5f:c6:c6:93:2b: 17:6f:33:c2:40:96:61:5a:ea:ce:e1:83:49:0d:20: 0c:73:0e:ba:6e:97:6d:5e:a5:a6:33:e4:9d:c8:99: f8:04:23:61:b6:4b:59:2a:d6:92:b7:1b:83:4f:3e: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.158.0/23 Signature Algorithm: sha256WithRSAEncryption aa:09:b1:4e:ee:77:6f:d1:da:af:7d:10:e9:59:a1:b5:e3:d4: ca:69:ae:4f:c0:94:dc:22:52:23:ab:ff:27:8d:cd:48:22:60: dc:4b:c3:41:b5:6f:88:87:98:08:bf:20:cc:1d:31:60:c8:6f: 86:b9:bd:14:ff:90:77:fb:86:59:e1:00:f7:8e:e4:64:6f:39: f8:5b:bb:62:ce:e1:67:15:dd:69:b2:f6:18:5b:6f:bd:a3:4a: 40:24:e0:10:3d:d8:c0:fc:d7:95:27:97:17:ea:72:98:9a:5e: 94:62:5c:d4:59:73:30:dc:a8:f5:0b:fc:32:eb:95:73:41:6e: 08:ba:77:98:9e:0e:97:23:30:fd:30:e6:7d:b7:fa:a6:0a:80: d6:d1:37:8a:2c:75:38:14:56:3c:16:a5:f6:21:86:8b:65:0a: 0e:f1:cf:e5:37:a5:b8:af:02:fb:03:4f:34:c7:88:f4:f9:e8: 84:4e:7e:3b:bb:46:89:44:c9:08:c5:0b:4c:af:a8:60:cf:98: 33:0b:f7:e3:67:a3:d0:01:ec:74:5b:51:38:7d:45:ff:d3:8f: 86:bf:99:2e:8a:2f:5d:a8:8c:73:6c:52:f8:08:f8:ae:ac:13: f5:6d:03:ad:70:46:d6:3d:05:a5:20:e0:a6:dc:c7:0c:17:f5: 98:69:fe:32 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE3MTAzMjI3WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBMjk0NjExMC8GA1UEBRMoQzhFQkMyNDVDMDRDRjNFNDZDRkVFNzgx MjM4N0NDMUQ1QUQzOEU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO8q3EyE+i+kNUc92Na7/TyZuQk3xiG/1rhsWeg07hwfbFS50E/bwkWUUBkHzzzr euVpdlKhh9PhXBP0+algxDJsvjlKRNehTuwfGQGVJU91HB0SZRJ3oWYtcUfTV+t/ jnaEIengDVF7lEnAb9wieqhxLDWoBr8mF9XxoKBC4lNKjP/XQDqXsfjf8UlsimXM DQIWlPSzBBv+QxUGXaVCiRf9IeLfIPyISPYOFl5ug0gdElBl01rFvThmWAmpWrpd Fq7djYy+/2V+O6VRYl/GxpMrF28zwkCWYVrqzuGDSQ0gDHMOum6XbV6lpjPknciZ +AQjYbZLWSrWkrcbg08+VWECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTI68JFwEzz 5Gz+54Ejh8wdWtOOXTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTI5NDYvQUNENEZCNUVEQjMzMTFGMEEyQ0U1MzY4OENEMzY0MUQvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEyOTQ2L0FDRDRGQjVFREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JN OC1Sc191ZUJJNGZNSFZyVGpsMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPnjANBgkqhkiG9w0BAQsFAAOCAQEAqgmxTu53b9Har30Q6Vmh tePUymmuT8CU3CJSI6v/J43NSCJg3EvDQbVviIeYCL8gzB0xYMhvhrm9FP+Qd/uG WeEA947kZG85+Fu7Ys7hZxXdabL2GFtvvaNKQCTgED3YwPzXlSeXF+pymJpelGJc 1FlzMNyo9Qv8MuuVc0FuCLp3mJ4OlyMw/TDmfbf6pgqA1tE3iix1OBRWPBal9iGG i2UKDvHP5TeluK8C+wNPNMeI9PnohE5+O7tGiUTJCMULTK+oYM+YMwv342ej0AHs dFtROH1F/9OPhr+ZLoovXaiMc2xS+Aj4rqwT9W0DrXBG1j0FpSDgptzHDBf1mGn+ Mg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:11 2025 by rpki-client