This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer File: Gb4TIRiPCXbTLoNtGvulRidmV-M.cer (raw, json) Hash identifier: HP+E2nqi0ktzVUl5KDczhZbTKhvI06i4XUVrXTM0HEw= Subject key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7289 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft caRepository: rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Jan 2026 07:23:05 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.42.86.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29321 (0x7289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 20 07:23:05 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:5e:65:b8:ab:f7:99:ba:d8:b9:ff:59:12: 64:9c:51:b0:93:a9:c5:ad:9d:80:fc:42:2e:73:c0: d4:15:db:96:c3:e6:27:d1:b7:28:a2:a3:70:28:ab: 3f:47:e8:3d:1b:a3:d9:41:28:c7:06:c6:81:21:db: 64:f0:36:f0:8e:53:a5:0a:b7:a3:73:b4:b9:ca:69: 0e:97:9a:6f:c3:36:00:c1:d1:40:91:a9:be:70:ce: 7d:47:25:bf:35:79:71:c3:08:7e:9e:df:e8:2e:bf: ea:7e:6c:ca:99:b7:e0:70:ad:e8:37:46:fb:bd:66: b4:d9:27:2d:f6:c1:41:1c:87:5a:93:ff:19:7d:51: 7f:24:d1:bf:cc:6a:83:1b:aa:27:d8:56:9d:39:35: 5e:01:cb:0b:01:a9:a9:c7:5b:f1:12:db:1c:04:f0: b1:a3:83:5d:37:86:ab:b9:4b:1a:0d:33:f3:0f:41: bb:e8:89:d6:d7:2f:42:90:ff:99:87:27:2c:1b:85: ce:e6:db:2a:1c:f6:8e:67:5f:7a:b1:54:1f:34:34: 62:0c:ab:4e:0b:5e:82:de:46:72:0c:56:63:c7:ae: 18:05:d8:aa:ab:0a:32:c0:34:10:10:7e:7f:ac:d4: a6:4f:2a:f8:e7:b2:b6:dc:b8:e5:37:05:d7:67:3c: ed:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.42.86.0/24 Signature Algorithm: sha256WithRSAEncryption 14:cf:fe:b4:8e:3d:54:07:56:d8:68:5b:1a:85:8d:55:2c:45: 0c:2d:f1:ca:f4:bf:14:63:76:f4:d2:81:66:50:7f:d8:87:39: 68:0d:17:6f:ec:fb:b3:96:63:5c:ab:5e:95:13:e0:e8:b6:da: 40:36:b1:81:56:33:ba:2e:41:e5:4f:b3:36:5b:c8:32:ae:38: 14:40:a9:3c:5a:30:b5:9b:b8:3e:ad:3b:be:c4:42:1d:98:eb: e8:d7:0a:1b:00:a7:bd:a4:41:40:c4:e9:ec:ef:d9:f4:f5:d4: 25:cc:a0:b5:eb:bc:20:e1:1a:67:31:34:04:64:da:34:2a:53: cb:56:1b:2c:9f:d8:67:76:00:32:33:4b:ab:44:f4:c5:f3:7b: 09:bf:07:64:26:aa:9e:38:29:5a:35:21:ba:85:a9:a1:68:fa: b1:d5:98:6e:c9:5e:84:e3:df:79:de:1a:24:c4:79:3d:0e:3d: 14:6d:02:ad:72:25:29:cd:71:58:f7:24:98:14:36:71:da:74: 71:0d:3a:94:20:dc:a6:86:5d:8f:d9:60:99:30:5a:26:d7:15: 78:dd:e5:4e:2d:0d:76:36:ed:9e:7e:0a:b9:2b:f1:73:67:09: 83:ca:35:e5:9e:17:a1:b8:1b:e8:03:ce:dd:09:9f:05:58:58: 85:57:53:07 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTIwMDcyMzA1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTExNzRERDExMC8GA1UEBRMoMTlCRTEzMjExODhGMDk3NkQzMkU4MzZE MUFGQkE1NDYyNzY2NTdFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMnJXmW4q/eZuti5/1kSZJxRsJOpxa2dgPxCLnPA1BXblsPmJ9G3KKKjcCirP0fo PRuj2UEoxwbGgSHbZPA28I5TpQq3o3O0ucppDpeab8M2AMHRQJGpvnDOfUclvzV5 ccMIfp7f6C6/6n5sypm34HCt6DdG+71mtNknLfbBQRyHWpP/GX1RfyTRv8xqgxuq J9hWnTk1XgHLCwGpqcdb8RLbHATwsaODXTeGq7lLGg0z8w9Bu+iJ1tcvQpD/mYcn LBuFzubbKhz2jmdferFUHzQ0YgyrTgtegt5GcgxWY8euGAXYqqsKMsA0EBB+f6zU pk8q+Oeytty45TcF12c87W0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQZvhMhGI8J dtMug20a+6VGJ2ZX4zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc0REQvRDk0NzYzMThGNUQwMTFGMEEwNjUxN0QyNDc2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE3NEREL0Q5NDc2MzE4RjVEMDExRjBBMDY1MTdEMjQ3NkY1NkJDL0diNFRJUmlQ Q1hiVExvTnRHdnVsUmlkbVYtTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMAqVjANBgkqhkiG9w0BAQsFAAOCAQEAFM/+tI49VAdW2GhbGoWN VSxFDC3xyvS/FGN29NKBZlB/2Ic5aA0Xb+z7s5ZjXKtelRPg6LbaQDaxgVYzui5B 5U+zNlvIMq44FECpPFowtZu4Pq07vsRCHZjr6NcKGwCnvaRBQMTp7O/Z9PXUJcyg teu8IOEaZzE0BGTaNCpTy1YbLJ/YZ3YAMjNLq0T0xfN7Cb8HZCaqnjgpWjUhuoWp oWj6sdWYbslehOPfed4aJMR5PQ49FG0CrXIlKc1xWPckmBQ2cdp0cQ06lCDcpoZd j9lgmTBaJtcVeN3lTi0Ndjbtnn4KuSvxc2cJg8o15Z4Xobgb6APO3QmfBVhYhVdT Bw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:54 2026 by rpki-client