This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer File: ALcq1TM86q4aWFyCgInERVmZY_I.cer (raw, json) Hash identifier: KWJfiixN/4Mm2mJN+4lmP7yGGqr+OaJG0Zs0iL6vL5U= Subject key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7275 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft caRepository: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 18 Jan 2026 12:45:06 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.48.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29301 (0x7275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 18 12:45:06 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:cb:81:83:c2:43:34:2d:de:8c:18:d4:32: 80:3a:de:65:6b:41:c6:5c:f4:28:4a:ea:41:d1:11: 43:ea:4b:1a:cd:21:e0:74:43:9e:96:97:0c:e8:9f: bd:90:34:37:bf:5b:5d:49:59:af:a9:73:b1:81:c5: 80:97:7e:b3:71:c5:48:78:92:77:1f:74:52:58:83: 4b:7f:9c:7e:18:2b:50:7c:50:8c:b0:ea:49:f1:e3: 47:f0:d8:df:9e:53:7f:9e:98:59:ef:4e:32:3c:ac: b9:5a:8b:51:93:09:d7:03:58:29:91:1d:d0:76:4f: 96:9f:62:1c:b9:fc:64:67:79:51:6d:8a:c1:53:13: 76:2e:38:cd:fa:6b:72:62:14:fc:7b:87:3f:88:f3: 0e:ca:3b:c8:b1:4a:2c:de:6e:2b:3c:67:2d:a6:32: 2a:f5:0c:89:07:13:7c:cb:4b:cc:d2:fb:4d:b7:49: ed:b2:18:ff:a9:5f:54:79:32:6d:ba:3f:63:d7:16: d6:12:c8:df:00:d2:b6:f9:c7:4f:36:3d:fa:f7:db: 5c:45:d9:fa:fe:22:05:a8:1d:9d:db:ab:bd:81:45: 40:42:82:cc:16:76:90:64:db:c6:16:b1:3f:10:3d: 12:0c:23:ad:8f:bd:78:bc:6d:31:71:13:24:32:d5: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.48.0/23 Signature Algorithm: sha256WithRSAEncryption 17:a4:59:bb:fb:23:88:f6:23:fc:aa:4f:2f:e9:f3:23:c9:a1: 59:bc:ef:59:23:2c:57:de:36:3c:38:e8:62:47:4a:e7:b9:f0: 2c:f0:8d:e0:42:b9:52:60:0f:ba:c1:83:32:2f:85:6d:89:1d: f6:dd:11:a8:df:ea:87:81:33:47:62:81:c1:ea:1c:36:c7:02: 24:ff:ed:1c:ef:d2:3e:8c:e6:86:72:07:56:a0:38:6e:df:99: d4:5a:25:83:c0:b8:9a:0e:6e:55:33:9a:25:42:04:f6:41:b0: 0b:6b:3d:32:4a:9d:84:07:08:aa:6d:5f:56:7b:a9:b8:e6:f8: d3:54:46:e0:b8:45:d4:e8:c6:ce:a7:29:1e:b1:d7:58:2b:aa: 56:d5:e8:52:d7:73:c2:4e:c1:fe:c9:15:fa:a5:cf:42:eb:52: 12:65:c9:cd:9d:80:f5:76:53:93:78:76:2a:1a:1c:14:74:21: 59:ab:e2:af:26:a9:4a:78:c5:fa:33:01:b7:ca:62:f4:be:9d: a5:5a:e6:6a:82:40:20:1c:6f:ff:5d:3e:45:15:03:c6:05:2b: b5:b8:a5:a1:f6:d7:90:3b:45:cd:11:63:2d:a7:02:8d:f1:45: 54:bc:31:a8:76:60:dd:f3:09:6e:3d:8f:4d:8a:95:c9:a8:f4: a8:93:66:76 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTE4MTI0NTA2WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEzODBGNzExMC8GA1UEBRMoMDBCNzJBRDUzMzNDRUFBRTFBNTg1Qzgy ODA4OUM0NDU1OTk5NjNGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALNUy4GDwkM0Ld6MGNQygDreZWtBxlz0KErqQdERQ+pLGs0h4HRDnpaXDOifvZA0 N79bXUlZr6lzsYHFgJd+s3HFSHiSdx90UliDS3+cfhgrUHxQjLDqSfHjR/DY355T f56YWe9OMjysuVqLUZMJ1wNYKZEd0HZPlp9iHLn8ZGd5UW2KwVMTdi44zfprcmIU /HuHP4jzDso7yLFKLN5uKzxnLaYyKvUMiQcTfMtLzNL7TbdJ7bIY/6lfVHkybbo/ Y9cW1hLI3wDStvnHTzY9+vfbXEXZ+v4iBagdndurvYFFQEKCzBZ2kGTbxhaxPxA9 EgwjrY+9eLxtMXETJDLVx40CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQAtyrVMzzq rhpYXIKAicRFWZlj8jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzgwRjcvOUY3NjhBRkFBN0Y4MTFFRkJCNDRGMzcxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM4MEY3LzlGNzY4QUZBQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04 NnE0YVdGeUNnSW5FUlZtWllfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6MDANBgkqhkiG9w0BAQsFAAOCAQEAF6RZu/sjiPYj/KpPL+nz I8mhWbzvWSMsV942PDjoYkdK57nwLPCN4EK5UmAPusGDMi+FbYkd9t0RqN/qh4Ez R2KBweocNscCJP/tHO/SPozmhnIHVqA4bt+Z1Folg8C4mg5uVTOaJUIE9kGwC2s9 MkqdhAcIqm1fVnupuOb401RG4LhF1OjGzqcpHrHXWCuqVtXoUtdzwk7B/skV+qXP QutSEmXJzZ2A9XZTk3h2KhocFHQhWaviryapSnjF+jMBt8pi9L6dpVrmaoJAIBxv /10+RRUDxgUrtbilofbXkDtFzRFjLacCjfFFVLwxqHZg3fMJbj2PTYqVyaj0qJNm dg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:10 2026 by rpki-client