This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer (raw, json) Hash identifier: IQfolPl46duzrOdBgxe3GRLfxlQSf1Ur/Afom8TIQDk= Subject key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 727F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft caRepository: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:29:19 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.50.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29311 (0x727f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 19 12:29:19 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:85:e1:13:23:0c:59:da:04:92:0d:64:68: 50:6d:cc:63:92:a9:c7:b2:1a:6f:b6:d2:bf:44:b5: 24:a1:7c:ce:7f:16:70:7a:17:62:d4:63:26:a6:f5: 45:5e:b4:52:85:a5:61:92:ca:a8:16:71:20:e6:94: 98:2f:82:fc:2f:a5:2f:c4:56:57:69:89:1e:1d:da: b7:1e:52:0f:79:d0:27:f1:49:97:a1:a4:19:43:6b: e3:c3:f9:03:ac:3a:50:52:b3:6e:8f:b1:2f:eb:cc: 71:d1:19:3f:ea:55:6a:9e:23:9c:a3:f2:7e:2a:85: 60:9b:e3:0a:c8:c4:9c:85:7a:09:e4:d8:d0:f3:49: ac:bd:8d:13:a2:ab:34:ea:89:fc:4a:80:45:33:e0: 9e:0a:c2:5d:a9:ed:69:fa:46:9b:1e:3f:2b:70:0c: 5a:81:78:ea:90:be:5e:2d:63:f7:40:fc:b4:ef:f6: 0e:8c:ed:8a:81:b5:c3:11:d5:32:dc:66:c4:d8:27: 43:7e:40:df:a2:f4:03:38:79:b9:06:f1:0b:27:7c: 05:ee:c3:15:2c:b6:a8:2d:ae:a8:7f:fd:8f:d1:e4: a0:6f:9e:00:ba:28:21:d1:1c:da:a8:05:f2:24:f0: 0e:4e:14:bb:cc:f9:40:0d:60:7e:23:d9:b9:8e:71: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.50.0/23 Signature Algorithm: sha256WithRSAEncryption b7:0d:0e:98:5f:af:b2:e9:c1:dd:91:24:a3:31:8f:11:87:14: 61:48:b2:af:02:2c:7e:68:48:eb:1c:09:bf:86:58:47:0a:ab: c4:db:f5:7c:b6:b2:3b:43:d2:af:c8:8d:59:d4:e9:e2:0c:92: e1:25:c3:03:a0:00:f1:da:e8:c6:9a:c0:6a:fd:bf:60:ff:a4: f1:8f:f1:bc:f1:0b:26:23:65:5d:7f:8f:53:71:9d:18:4c:6b: b5:d0:11:51:5e:2e:08:84:e4:99:05:32:3b:a1:d1:b6:97:fe: 0c:ee:a4:c9:de:fa:bc:ee:bf:69:dd:97:e9:aa:82:25:7d:2f: c5:72:fd:bf:9f:85:f1:51:43:06:9f:f2:c1:43:9d:df:e7:e6: 8a:62:7c:d8:b4:55:7a:75:2f:d9:1a:b6:d9:a6:0a:6d:9a:c7: 01:07:3a:f4:dc:91:0e:ee:28:46:a5:8f:5f:53:85:3e:b3:ee: 70:86:7c:59:bf:52:41:fe:ba:ae:5c:23:2d:4d:fa:a5:34:49: 15:8f:35:56:1f:54:b0:cc:1a:6a:f6:e1:35:72:70:a9:be:31: c3:b8:8d:58:9f:ce:44:f9:3d:87:61:47:e5:fa:82:ce:84:68: 0d:c5:f3:97:83:00:a4:9a:82:84:4f:5b:2c:84:f6:bb:5c:c3: 97:54:09:08 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTE5MTIyOTE5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTExRTBCNDExMC8GA1UEBRMoMEZENDQzNzUyMURCNUMwQkM5OUU0NUI1 OTc1NEZGN0I2NzFGODZGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK1WheETIwxZ2gSSDWRoUG3MY5Kpx7Iab7bSv0S1JKF8zn8WcHoXYtRjJqb1RV60 UoWlYZLKqBZxIOaUmC+C/C+lL8RWV2mJHh3atx5SD3nQJ/FJl6GkGUNr48P5A6w6 UFKzbo+xL+vMcdEZP+pVap4jnKPyfiqFYJvjCsjEnIV6CeTY0PNJrL2NE6KrNOqJ /EqARTPgngrCXantafpGmx4/K3AMWoF46pC+Xi1j90D8tO/2DoztioG1wxHVMtxm xNgnQ35A36L0Azh5uQbxCyd8Be7DFSy2qC2uqH/9j9HkoG+eALooIdEc2qgF8iTw Dk4Uu8z5QA1gfiPZuY5xts8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQP1EN1Idtc C8meRbWXVP97Zx+G8zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUwQjQvRTk2NDg5QUVBRjM4MTFFRkEyMEREMDEzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFFMEI0L0U5NjQ4OUFFQUYzODExRUZBMjBERDAxM0M0RjlBRTAyL0Q5UkRkU0hi WEF2Sm5rVzFsMVRfZTJjZmh2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6MjANBgkqhkiG9w0BAQsFAAOCAQEAtw0OmF+vsunB3ZEkozGP EYcUYUiyrwIsfmhI6xwJv4ZYRwqrxNv1fLayO0PSr8iNWdTp4gyS4SXDA6AA8dro xprAav2/YP+k8Y/xvPELJiNlXX+PU3GdGExrtdARUV4uCITkmQUyO6HRtpf+DO6k yd76vO6/ad2X6aqCJX0vxXL9v5+F8VFDBp/ywUOd3+fmimJ82LRVenUv2Rq22aYK bZrHAQc69NyRDu4oRqWPX1OFPrPucIZ8Wb9SQf66rlwjLU36pTRJFY81Vh9UsMwa avbhNXJwqb4xw7iNWJ/ORPk9h2FH5fqCzoRoDcXzl4MApJqChE9bLIT2u1zDl1QJ CA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:53:53 2026 by rpki-client