This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer File: -bspsKvoSef-GA4znkscKCNoxSE.cer (raw, json) Hash identifier: wvz/F5JVtFYuGVT6LiJM+Qui/q5/mzUPAHyXh7TI3uU= Subject key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 710C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft caRepository: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 12:48:21 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 143.92.112.0/20 IP: 148.222.64.0 -- 148.222.87.255 IP: 148.222.92.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28940 (0x710c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 12:48:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:05:7e:96:70:d8:83:fa:5b:a9:38:fe:9e: 98:dd:01:1b:e9:da:ab:52:2e:c3:1f:6c:56:75:af: 50:74:5a:86:5e:a4:60:c0:d6:73:ad:6a:80:16:2b: af:04:bd:ff:b2:da:43:f7:fa:0e:1a:15:b9:d6:08: 84:79:f7:da:01:1f:37:9a:15:d4:1c:e8:dc:2f:05: 07:42:67:b6:02:e3:ba:3d:23:dd:1c:b9:b0:24:b5: 0d:d8:7d:7f:b6:8b:73:20:57:05:12:a9:94:f2:29: 0c:35:5b:2d:5b:ab:62:28:bf:42:5b:ea:d1:3f:6b: a3:dd:2d:d4:ac:fc:6a:fd:d5:c4:30:0d:ac:e1:bf: a5:a5:0d:32:75:94:9b:4e:3e:a4:f6:23:5c:7a:40: 01:78:80:b2:80:04:95:ab:31:63:59:3c:66:53:73: 4a:f6:eb:d0:2f:e9:47:f7:cd:02:45:e0:0c:50:24: fc:21:64:36:97:a1:6a:d2:e5:ac:19:8d:f4:91:64: aa:ed:db:99:ee:49:08:73:78:9b:67:83:4a:e6:6f: f5:09:36:11:da:0b:f2:3a:e3:5d:80:3d:c6:9f:32: c7:1e:5c:b2:09:2a:d0:e9:3a:6c:56:81:e9:d6:cd: 38:12:11:85:27:15:7f:a6:55:94:ab:8a:03:c8:29: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.92.112.0/20 148.222.64.0-148.222.87.255 148.222.92.0/24 Signature Algorithm: sha256WithRSAEncryption 57:e6:e0:8a:5a:c8:02:f4:4a:82:65:9c:f5:da:5f:71:e1:82: 4a:e9:49:80:a5:11:66:59:98:67:88:0f:6e:15:13:af:94:54: 1d:9a:90:22:49:24:f1:e9:a7:89:80:bf:d8:ec:2e:47:3c:39: 66:57:17:d4:1f:0c:52:bb:c3:fb:bf:2a:99:9b:fa:89:fe:6f: f5:e5:a6:f1:84:53:0b:78:21:07:54:3b:41:cb:55:8a:26:25: 4a:f3:36:7d:6b:4d:f2:39:7e:12:5e:f2:27:e7:86:41:cd:94: aa:5b:1b:8c:03:f3:3b:e2:6b:44:c3:57:34:e4:27:6b:9d:03: af:1c:f1:de:09:bf:16:f8:50:29:74:38:de:37:cb:1e:6b:87: 34:cd:2b:cc:a0:a0:96:83:23:6f:ba:6d:8d:4b:a9:ab:4c:2a: 9b:ce:43:33:08:15:3b:51:56:84:2d:2d:36:7f:de:2f:eb:c8: 73:4e:07:ec:0a:56:e5:21:e7:27:da:f7:e7:78:e0:4b:13:37: 4e:b9:f9:0f:90:21:99:59:7a:c8:92:4f:8b:c6:ce:29:f0:2b: a9:c8:13:9f:ab:2b:f4:45:64:6d:9a:9a:10:aa:67:53:f8:10: 3f:89:17:a0:fd:f8:35:16:d5:24:de:7c:38:80:73:40:70:e4: 48:63:ca:78 -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgICcQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MTI0ODIxWhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEzRThGMzExMC8GA1UEBRMoRjlCQjI5QjBBQkU4NDlFN0ZFMTgwRTMz OUU0QjFDMjgyMzY4QzUyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALy+BX6WcNiD+lupOP6emN0BG+naq1Iuwx9sVnWvUHRahl6kYMDWc61qgBYrrwS9 /7LaQ/f6DhoVudYIhHn32gEfN5oV1Bzo3C8FB0JntgLjuj0j3Ry5sCS1Ddh9f7aL cyBXBRKplPIpDDVbLVurYii/Qlvq0T9ro90t1Kz8av3VxDANrOG/paUNMnWUm04+ pPYjXHpAAXiAsoAElasxY1k8ZlNzSvbr0C/pR/fNAkXgDFAk/CFkNpehatLlrBmN 9JFkqu3bme5JCHN4m2eDSuZv9Qk2EdoL8jrjXYA9xp8yxx5csgkq0Ok6bFaB6dbN OBIRhScVf6ZVlKuKA8gp8YECAwEAAaOCAwcwggMDMB0GA1UdDgQWBBT5uymwq+hJ 5/4YDjOeSxwoI2jFITAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U4RjMvMEEwNEY0RTI1NDk0MTFFOUI1OTdFNTcxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNFOEYzLzBBMDRGNEUyNTQ5NDExRTlCNTk3RTU3MUM0RjlBRTAyLy1ic3BzS3Zv U2VmLUdBNHpua3NjS0NOb3hTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQkMCIw IAQCAAEwGgMEBI9ccDAMAwQGlN5AAwQDlN5QAwQAlN5cMA0GCSqGSIb3DQEBCwUA A4IBAQBX5uCKWsgC9EqCZZz12l9x4YJK6UmApRFmWZhniA9uFROvlFQdmpAiSSTx 6aeJgL/Y7C5HPDlmVxfUHwxSu8P7vyqZm/qJ/m/15abxhFMLeCEHVDtBy1WKJiVK 8zZ9a03yOX4SXvIn54ZBzZSqWxuMA/M74mtEw1c05CdrnQOvHPHeCb8W+FApdDje N8sea4c0zSvMoKCWgyNvum2NS6mrTCqbzkMzCBU7UVaELS02f94v68hzTgfsClbl Iecn2vfneOBLEzdOufkPkCGZWXrIkk+Lxs4p8CupyBOfqyv0RWRtmpoQqmdT+BA/ iReg/fg1FtUk3nw4gHNAcORIY8p4 -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:10 2026 by rpki-client