This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer File: 31_iG3yVUhWTRHF5TYsHBmPSs04.cer (raw, json) Hash identifier: +CcGdKJVBaeIOd/ddRd/mma5nCNhG2PVKHAhxZuf5U4= Subject key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70FC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 04:47:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.8.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28924 (0x70fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 04:47:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:3c:83:c1:3d:59:bc:bd:83:d9:fe:a7:fd: 9a:f8:4c:a6:e3:f2:55:e6:b1:7a:f7:56:ff:c1:34: 4e:88:a3:2b:87:67:81:de:11:ca:7c:b5:2a:a7:80: fc:b0:38:c8:26:12:87:ea:d3:c6:5a:1a:6d:9b:6f: 16:1a:99:24:b1:cf:b3:cc:aa:d2:56:e1:76:0e:70: 2b:58:f0:56:30:8a:1f:31:bc:36:d9:a4:28:66:98: 05:72:50:6c:19:93:e0:f2:ee:ea:82:eb:09:ea:0d: a5:39:f0:bb:b9:f4:5b:0f:3c:5e:d4:68:27:f9:0a: 4d:53:59:73:62:34:1d:c5:0c:29:e5:09:08:e5:87: 02:32:07:f6:0b:58:7b:45:89:73:b2:03:c8:3a:85: 2f:09:78:95:16:71:67:a5:09:fe:83:5a:75:27:ce: 43:0c:2d:de:4f:fb:0f:24:ce:dc:81:78:ba:4d:1a: 9c:3c:ec:a4:b2:c0:47:c7:d8:a0:22:09:3f:07:84: da:59:28:18:a9:e4:65:a3:26:c3:a6:9a:4c:ed:52: 1c:9e:c9:97:f9:0b:e4:5c:78:ba:76:d5:a4:72:7b: d0:0e:30:0b:2c:e7:51:cf:60:a0:46:ee:c0:09:7c: 57:53:48:71:03:cf:c9:3a:ef:f9:b8:26:ca:c9:6f: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.8.0/23 Signature Algorithm: sha256WithRSAEncryption 28:99:77:d6:ce:8e:cf:a2:95:4e:88:e0:fe:1d:43:58:72:4c: 5d:91:47:07:b2:00:1f:49:2d:9e:99:0d:86:32:d0:2d:91:02: c8:35:a9:7a:e0:c4:d7:0c:d2:5a:4a:1d:34:a2:80:e5:8a:13: 26:13:a5:8f:bb:6d:e2:69:3b:58:3a:6d:2d:f2:21:96:83:28: a9:88:2a:4c:fe:c1:f1:ea:66:b1:28:a1:e5:3b:e6:4c:3c:46: 71:6f:b1:d0:7a:fa:73:84:90:59:84:65:f8:0f:9d:4a:2b:c1: 66:15:05:61:9b:1a:c7:bc:cb:79:25:97:70:03:69:60:cb:db: bc:ca:f7:42:5f:73:8a:9d:31:ae:cd:76:02:ab:1c:0c:b9:14: e1:45:35:d5:d5:f7:59:0a:b6:b3:a1:2b:5b:35:53:b3:da:20: af:1c:0b:c0:45:d9:78:66:e2:56:74:86:1a:ab:96:ea:e9:51: 3d:18:6e:cc:08:a9:ce:1c:ce:22:7f:9d:fb:ec:81:b9:b2:66: e9:bf:d6:24:95:ce:37:a2:9d:e8:8e:e2:fb:33:c9:91:9a:b0: 71:d9:a2:73:07:c9:63:63:d6:86:a1:17:c6:61:f0:78:86:35: 5a:a6:7d:1b:76:32:4c:80:e3:91:ac:9c:99:86:ad:12:f5:05: 4b:64:cd:e5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MDQ0NzQ2WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFGNzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5 NEQ4QjA3MDY2M0QyQjM0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJS3PIPBPVm8vYPZ/qf9mvhMpuPyVeaxevdW/8E0ToijK4dngd4Ryny1KqeA/LA4 yCYSh+rTxloabZtvFhqZJLHPs8yq0lbhdg5wK1jwVjCKHzG8NtmkKGaYBXJQbBmT 4PLu6oLrCeoNpTnwu7n0Ww88XtRoJ/kKTVNZc2I0HcUMKeUJCOWHAjIH9gtYe0WJ c7IDyDqFLwl4lRZxZ6UJ/oNadSfOQwwt3k/7DyTO3IF4uk0anDzspLLAR8fYoCIJ PweE2lkoGKnkZaMmw6aaTO1SHJ7Jl/kL5Fx4unbVpHJ70A4wCyznUc9goEbuwAl8 V1NIcQPPyTrv+bgmyslvoHUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTfX+IbfJVS FZNEcXlNiwcGY9KzTjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjc1MzcvODAyQUU2NDZBMjcxMTFFRkEzOTJGMDc5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY3NTM3LzgwMkFFNjQ2QTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lW VWhXVFJIRjVUWXNIQm1QU3MwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6CDANBgkqhkiG9w0BAQsFAAOCAQEAKJl31s6Oz6KVTojg/h1D WHJMXZFHB7IAH0ktnpkNhjLQLZECyDWpeuDE1wzSWkodNKKA5YoTJhOlj7tt4mk7 WDptLfIhloMoqYgqTP7B8epmsSih5TvmTDxGcW+x0Hr6c4SQWYRl+A+dSivBZhUF YZsax7zLeSWXcANpYMvbvMr3Ql9zip0xrs12AqscDLkU4UU11dX3WQq2s6ErWzVT s9ogrxwLwEXZeGbiVnSGGquW6ulRPRhuzAipzhzOIn+d++yBubJm6b/WJJXON6Kd 6I7i+zPJkZqwcdmicwfJY2PWhqEXxmHweIY1WqZ9G3YyTIDjkaycmYatEvUFS2TN 5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 08:53:57 2026 by rpki-client