This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer File: 9lz9HPOxxajqYIcfo8NAYdtM84M.cer (raw, json) Hash identifier: Y1LZNVMTImFz8yxTRnlmI0zrUKKPdsOn19tz2zx48JI= Subject key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F26 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft caRepository: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:43:58 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 195.133.128.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20262 (0x4f26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 6 13:43:58 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:bc:8b:f5:e9:7f:4c:b4:67:96:2c:12:cd: 9e:ad:80:85:44:32:94:03:76:11:a2:55:4e:b1:01: 06:99:4d:6a:50:dc:1c:1f:ef:13:cd:49:5f:93:c3: 10:6e:94:0b:56:f5:d6:89:6c:c0:4b:2f:53:c2:92: b3:a7:b7:fa:70:7d:4c:d4:e6:a6:3e:45:74:51:06: ad:19:95:73:65:63:e4:a9:c1:8a:52:e7:67:87:28: c5:6e:eb:84:a4:82:83:19:0c:e7:b0:3e:2d:12:44: 72:cf:24:ef:15:68:72:8d:d6:19:bb:b2:25:98:67: 9b:91:92:2f:43:43:ee:62:d7:7e:1d:45:b8:69:0a: 8b:67:8e:77:3e:01:bd:6e:6b:17:74:d4:ab:63:ec: 14:f6:b3:1a:d4:1c:05:dc:a3:7c:ae:15:67:04:2e: 96:58:3d:e7:f5:ad:f8:13:d1:d1:f1:87:6e:3a:04: e6:c9:23:a6:3f:2f:74:87:b8:7e:f7:58:57:12:f5: 4d:12:2d:bf:35:52:e4:38:16:f2:17:6b:23:8b:35: 16:c2:0c:73:48:35:07:e5:78:ee:79:0b:93:d8:27: 7c:c4:af:20:04:e6:b0:88:a0:91:27:67:8b:a8:69: 6b:75:d3:40:cd:1f:cd:98:ad:b5:33:42:d3:33:a0: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 195.133.128.0/20 Signature Algorithm: sha256WithRSAEncryption 32:fc:c4:3d:55:37:ca:48:7c:84:97:55:73:52:bd:04:1c:3e: 04:b7:ac:30:5d:17:d9:ec:41:81:af:f2:cf:93:96:f9:15:2b: 14:f0:a0:b8:e2:43:63:d5:2c:dc:d1:1b:16:9a:c0:8c:7b:2f: 4d:b1:28:e6:ea:32:29:c6:ba:6c:1a:31:89:82:72:0d:f6:45: 8b:7a:56:73:39:72:bb:df:28:1b:fc:51:03:54:4a:63:8c:d7: b4:1e:23:7f:80:b3:b6:b0:25:59:46:71:4d:96:16:a4:c6:a0: 39:ab:e7:56:ff:4f:4f:c8:b0:74:32:21:bf:9e:91:f9:8e:be: 20:b7:56:69:e2:ca:75:c3:86:7d:a7:0b:a3:bc:10:c3:29:70: 11:75:ff:bb:47:45:f2:ce:75:59:4b:75:df:cf:da:48:b0:ab: 5e:e5:8a:41:02:23:fd:79:9a:b1:09:62:7d:8a:8a:98:a4:27: 46:c9:a0:ec:8f:c2:8d:28:0b:85:77:45:a5:d8:6f:c8:54:f6: 0b:53:61:fe:8b:56:07:ae:ef:23:3f:5d:e0:bb:2d:6e:82:1e: be:db:f9:99:db:2b:1e:55:20:2d:90:11:68:fa:29:58:8c:02: 1c:d0:e3:a3:96:79:98:f5:a2:5d:08:25:3f:ae:c9:9e:e6:e6: c1:71:31:87 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICTyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTA2MTM0MzU4WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5NUJBOTExMC8GA1UEBRMoRjY1Q0ZEMUNGM0IxQzVBOEVBNjA4NzFG QTNDMzQwNjFEQjRDRjM4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJMcvIv16X9MtGeWLBLNnq2AhUQylAN2EaJVTrEBBplNalDcHB/vE81JX5PDEG6U C1b11olswEsvU8KSs6e3+nB9TNTmpj5FdFEGrRmVc2Vj5KnBilLnZ4coxW7rhKSC gxkM57A+LRJEcs8k7xVoco3WGbuyJZhnm5GSL0ND7mLXfh1FuGkKi2eOdz4BvW5r F3TUq2PsFPazGtQcBdyjfK4VZwQullg95/Wt+BPR0fGHbjoE5skjpj8vdIe4fvdY VxL1TRItvzVS5DgW8hdrI4s1FsIMc0g1B+V47nkLk9gnfMSvIATmsIigkSdni6hp a3XTQM0fzZittTNC0zOgxzkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT2XP0c87HF qOpghx+jw0Bh20zzgzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVCQTkvQ0VFNjg4MjIzN0JFMTFFRUE2NDBBQjU1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk1QkE5L0NFRTY4ODIyMzdCRTExRUVBNjQwQUI1NUM0RjlBRTAyLzlsejlIUE94 eGFqcVlJY2ZvOE5BWWR0TTg0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBMOFgDANBgkqhkiG9w0BAQsFAAOCAQEAMvzEPVU3ykh8hJdVc1K9 BBw+BLesMF0X2exBga/yz5OW+RUrFPCguOJDY9Us3NEbFprAjHsvTbEo5uoyKca6 bBoxiYJyDfZFi3pWczlyu98oG/xRA1RKY4zXtB4jf4CztrAlWUZxTZYWpMagOavn Vv9PT8iwdDIhv56R+Y6+ILdWaeLKdcOGfacLo7wQwylwEXX/u0dF8s51WUt138/a SLCrXuWKQQIj/XmasQlifYqKmKQnRsmg7I/CjSgLhXdFpdhvyFT2C1Nh/otWB67v Iz9d4LstboIevtv5mdsrHlUgLZARaPopWIwCHNDjo5Z5mPWiXQglP67JnubmwXEx hw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:58 2026 by rpki-client