This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer (raw, json) Hash identifier: O7h+/hqrlZknmqrA2EHSN+Ly/8TZJaeLn+9TR//Tz0o= Subject key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 721D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 14:17:44 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.120.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 10:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29213 (0x721d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 14:17:44 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:b0:64:ac:6b:0a:62:e1:37:18:03:4a:53: 80:0a:34:76:72:60:c2:19:dc:d2:db:bc:fa:bd:fa: 89:1f:69:c3:45:9d:c4:c4:f8:2c:d5:27:fd:54:cb: c9:23:d3:b9:46:74:2f:17:37:e4:e3:46:cf:2a:92: 65:a4:67:d9:d4:70:3c:da:e7:ba:58:c9:ce:ce:37: 15:aa:9c:9e:93:6e:ea:39:c2:9e:1f:a6:b2:5c:19: e2:bc:9c:02:d4:ed:10:34:27:0b:87:bd:a6:f9:d0: 6e:d6:bf:bb:33:f5:17:e8:36:59:c9:48:69:c4:19: 63:cf:b4:a2:61:6e:dc:6e:dd:8b:13:66:1a:53:9c: 15:1a:d4:04:40:11:fc:42:c1:9a:39:43:8a:a2:a5: bb:98:72:02:6e:a5:4a:fe:53:fa:9c:71:43:75:b5: 45:d4:03:e4:e7:7b:ed:db:83:ee:80:e3:f9:08:e5: 47:2d:67:e1:a4:37:7f:62:ee:75:69:c4:20:71:0a: 98:a9:56:57:5c:90:92:17:14:4e:15:9b:e1:ba:ef: e3:9b:76:86:6e:98:9d:26:83:6b:b7:59:46:9c:e8: d1:44:e7:87:9b:da:36:a5:b6:ec:57:69:70:e4:31: 42:d4:ab:59:95:c8:3f:6f:10:62:db:70:76:97:71: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.120.0/23 Signature Algorithm: sha256WithRSAEncryption 04:21:f5:75:df:86:a5:c0:f7:70:22:1c:76:96:a1:9d:0f:c6: 89:57:80:d6:93:16:41:57:ba:4e:82:d8:cb:ad:5a:1c:e4:b3: ce:33:0a:66:42:45:6c:0e:b2:dd:ee:cd:f2:4b:cd:dd:57:80: 31:ae:2a:72:68:d9:90:ac:c9:20:a8:72:37:ed:7a:d2:8d:64: b3:ee:12:7a:27:d6:51:09:d2:4a:e8:39:1e:ce:ea:f9:dd:5e: a1:cb:45:4c:51:93:c3:65:0a:eb:5a:23:a4:bb:ed:d8:8c:8e: d0:1c:2d:a2:e3:bd:52:4f:7b:8c:95:81:28:49:14:ab:e4:e7: 5a:64:46:00:ea:28:67:c1:b6:45:07:8f:29:f8:19:42:b8:25: 62:b6:80:78:73:b4:82:6c:55:4f:72:f0:c9:e7:71:b5:cb:7c: 3a:f9:61:c7:ed:0e:bb:24:7f:d8:cd:85:05:5e:66:d9:f2:b3: 25:59:45:ad:91:7b:97:ef:e1:10:c1:df:0e:4f:14:1d:c0:b3: 86:5f:4c:de:b7:6c:40:ab:bb:ba:48:94:1d:6a:82:04:e4:6b: e8:c7:2c:2e:92:08:7b:46:09:1b:11:9a:95:46:f0:77:90:54: 0e:82:7a:e5:e8:41:40:c1:0b:ff:e5:7f:a1:b1:6d:19:60:fb: 6b:07:78:16 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICch0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTQxNzQ0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDRUU4NTExMC8GA1UEBRMoMDcyNDRBOTk0Q0RDNEI5MzgwNzQ3MTFD NDI0OEQ0OUY5RDUwRDgyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALVqsGSsawpi4TcYA0pTgAo0dnJgwhnc0tu8+r36iR9pw0WdxMT4LNUn/VTLySPT uUZ0Lxc35ONGzyqSZaRn2dRwPNrnuljJzs43FaqcnpNu6jnCnh+mslwZ4rycAtTt EDQnC4e9pvnQbta/uzP1F+g2WclIacQZY8+0omFu3G7dixNmGlOcFRrUBEAR/ELB mjlDiqKlu5hyAm6lSv5T+pxxQ3W1RdQD5Od77duD7oDj+QjlRy1n4aQ3f2LudWnE IHEKmKlWV1yQkhcUThWb4brv45t2hm6YnSaDa7dZRpzo0UTnh5vaNqW27FdpcOQx QtSrWZXIP28QYttwdpdxzpsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQHJEqZTNxL k4B0cRxCSNSfnVDYJzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VFODUvRkM2NkY1QUU0NUFEMTFFRkI0MzVFQjZGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNFRTg1L0ZDNjZGNUFFNDVBRDExRUZCNDM1RUI2RkM0RjlBRTAyL0J5UkttVXpj UzVPQWRIRWNRa2pVbjUxUTJDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KeDANBgkqhkiG9w0BAQsFAAOCAQEABCH1dd+GpcD3cCIcdpah nQ/GiVeA1pMWQVe6ToLYy61aHOSzzjMKZkJFbA6y3e7N8kvN3VeAMa4qcmjZkKzJ IKhyN+160o1ks+4SeifWUQnSSug5Hs7q+d1eoctFTFGTw2UK61ojpLvt2IyO0Bwt ouO9Uk97jJWBKEkUq+TnWmRGAOooZ8G2RQePKfgZQrglYraAeHO0gmxVT3Lwyedx tct8Ovlhx+0OuyR/2M2FBV5m2fKzJVlFrZF7l+/hEMHfDk8UHcCzhl9M3rdsQKu7 ukiUHWqCBORr6McsLpIIe0YJGxGalUbwd5BUDoJ65ehBQMEL/+V/obFtGWD7awd4 Fg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:46 2026 by rpki-client