This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer (raw, json) Hash identifier: lI8B5znnjbhNHDhcAEH8UIZK5GKSS3g0lBR5w+BqpJU= Subject key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 72A6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 14:25:15 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 206.209.76.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29350 (0x72a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 21 14:25:15 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:5a:1a:4c:14:6c:f5:63:07:e2:f7:1f:b4: a2:51:84:65:fa:c6:80:8e:61:be:c5:25:c6:ec:c0: 7c:bd:59:f7:7b:73:1a:bd:ad:4e:26:69:0f:e4:5d: 0b:42:7f:5c:75:66:43:35:c1:01:50:82:a5:cc:1a: e1:da:9b:07:99:81:1c:49:ba:bb:8c:83:37:fe:9c: 8a:64:74:b4:25:f6:90:11:b5:30:89:d5:93:8f:7d: 4b:37:0b:65:06:34:79:e2:93:08:53:ac:02:f3:f7: ea:84:5f:44:57:bf:95:07:95:21:52:30:84:99:51: e9:29:22:c2:f5:6e:f9:78:33:d2:34:91:0d:04:15: 2c:2c:c3:67:0b:18:1d:21:9b:47:c7:a8:a2:c9:e8: 50:42:9e:37:32:69:2c:dd:00:2b:b0:fc:5c:fd:8d: 1c:6d:7f:69:2c:87:09:68:2c:6d:ac:49:a6:ee:b2: 02:88:b3:87:e9:a7:f1:fb:81:1e:09:ee:5c:83:b6: 56:1c:a1:95:ee:05:df:5a:d2:45:c6:4b:e9:98:13: b7:01:83:7d:c1:89:7e:6d:7c:92:b3:56:6a:0b:48: e8:c9:3c:b1:89:bc:61:8e:95:7a:7f:3a:76:99:b4: 48:94:21:ad:f1:db:e3:0f:e7:61:de:e6:bb:e4:8a: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.209.76.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:c6:9f:2a:7b:8b:4e:b6:50:f3:d9:2b:02:ff:5e:35:47:3b: 43:25:15:aa:67:7e:2e:d1:0e:f0:7c:4b:39:78:53:b8:d5:6b: d3:5b:23:42:b9:75:43:cb:83:3a:aa:67:e1:5c:86:4a:a5:c2: 44:65:a5:54:63:f8:1b:b9:e6:72:94:c7:24:6e:aa:b4:9d:9e: b1:4f:70:75:b9:09:ae:a4:0d:d3:47:d4:25:2c:be:b7:4c:56: b2:87:5d:c1:f0:d5:52:55:10:c8:0a:33:83:cd:0e:eb:9b:ed: ef:05:52:b3:a4:3d:6e:52:12:f1:88:f3:9e:c1:e7:7a:a9:79: 11:1f:50:e2:01:99:99:91:67:48:e9:fa:fe:54:1f:00:43:5c: 81:61:6a:ac:89:8c:f1:58:76:3e:da:cb:1a:03:fb:81:d6:52: d5:e8:32:5c:c8:8b:20:4d:49:2f:b8:d0:9b:41:b4:66:17:dd: 94:aa:f7:67:d7:ba:92:f0:e6:aa:61:ac:b7:fc:02:74:d8:7f: fe:99:eb:77:e3:72:06:b6:63:db:17:25:88:66:99:1a:a0:8d: 67:a6:86:0d:ea:a5:e1:e5:fb:63:23:42:2d:47:9c:64:02:61: b6:5a:c0:4b:6e:51:af:41:1d:11:af:28:c0:19:d2:0a:50:36: 58:3b:d8:8d -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTIxMTQyNTE1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFGNTlBNjExMC8GA1UEBRMoRTI1RkNEOUI3NzI1ODUzOTQyNzkxQTYy RDQ3NUVDRkVEN0MwM0Y2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALb0WhpMFGz1Ywfi9x+0olGEZfrGgI5hvsUlxuzAfL1Z93tzGr2tTiZpD+RdC0J/ XHVmQzXBAVCCpcwa4dqbB5mBHEm6u4yDN/6cimR0tCX2kBG1MInVk499SzcLZQY0 eeKTCFOsAvP36oRfRFe/lQeVIVIwhJlR6SkiwvVu+Xgz0jSRDQQVLCzDZwsYHSGb R8eoosnoUEKeNzJpLN0AK7D8XP2NHG1/aSyHCWgsbaxJpu6yAoizh+mn8fuBHgnu XIO2Vhyhle4F31rSRcZL6ZgTtwGDfcGJfm18krNWagtI6Mk8sYm8YY6Ven86dpm0 SJQhrfHb4w/nYd7mu+SK8DcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTiX82bdyWF OUJ5GmLUdez+18A/ZDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvRTRFREFDMThDQjFBMTFFQTg3Q0Q1NTQ0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY1OUE2L0U0RURBQzE4Q0IxQTExRUE4N0NENTU0NEM0RjlBRTAyLzRsX05tM2Ns aFRsQ2VScGkxSFhzX3RmQVAyUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAs7RTDANBgkqhkiG9w0BAQsFAAOCAQEAXMafKnuLTrZQ89krAv9e NUc7QyUVqmd+LtEO8HxLOXhTuNVr01sjQrl1Q8uDOqpn4VyGSqXCRGWlVGP4G7nm cpTHJG6qtJ2esU9wdbkJrqQN00fUJSy+t0xWsoddwfDVUlUQyAozg80O65vt7wVS s6Q9blIS8YjznsHneql5ER9Q4gGZmZFnSOn6/lQfAENcgWFqrImM8Vh2PtrLGgP7 gdZS1egyXMiLIE1JL7jQm0G0ZhfdlKr3Z9e6kvDmqmGst/wCdNh//pnrd+NyBrZj 2xcliGaZGqCNZ6aGDeql4eX7YyNCLUecZAJhtlrAS25Rr0EdEa8owBnSClA2WDvY jQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:01 2026 by rpki-client