This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer File: HG_z7AmClLQtl58ltpYFkj4czu8.cer (raw, json) Hash identifier: j2kmArWCfyPYRLrSoXlWSf/mz4JcWA20ONI2UvSLNcA= Subject key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70B6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft caRepository: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 06:42:22 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 144.79.194.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28854 (0x70b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 23 06:42:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:b7:70:20:c7:7f:f4:0d:60:1b:44:06:50: 6c:76:c8:1c:10:1b:66:4a:d1:a7:6a:14:2e:8e:21: a9:2d:51:29:68:33:d4:3b:b9:6e:b2:c5:d5:bc:51: 11:13:35:a3:4e:fb:66:5f:a7:b7:de:77:11:ff:4a: 1e:87:2e:94:08:8a:48:21:4a:e2:fc:79:fc:df:b5: f2:46:a7:c2:ad:6a:ff:de:12:27:e9:e6:a4:03:ff: 7e:55:e4:31:87:62:1b:23:6b:81:d2:43:c8:2c:f5: 92:cc:27:68:af:32:ee:46:bb:e8:9a:c1:81:05:5c: eb:f7:31:6f:e7:b0:50:d3:2e:5e:04:67:6a:0a:87: 52:c1:2e:17:1a:d8:82:3b:32:31:ba:05:87:d6:8a: 52:61:0a:f5:2d:15:b4:fc:07:75:c2:d5:75:48:2d: 42:1f:31:6c:f5:f7:5d:71:78:23:c2:f6:23:5c:ad: 39:54:d3:6a:d7:0f:55:49:17:1a:9f:17:aa:c2:8b: ac:19:f0:8e:c2:37:da:52:c3:88:18:ef:b5:9b:f5: 5d:bc:8d:c2:41:45:95:54:30:92:26:8c:52:04:e8: fb:20:b7:05:07:c4:2e:95:7a:d8:e1:73:5a:f6:17: 5a:15:e4:fd:4b:35:da:b5:1f:31:58:e3:a5:d4:1c: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.194.0/24 Signature Algorithm: sha256WithRSAEncryption 27:46:a0:fd:01:3a:d1:0e:92:6c:c4:aa:0c:e3:ed:8c:63:2b: bc:99:ac:d6:52:64:63:8d:c7:25:4a:d3:7f:5e:e1:02:29:fb: 52:12:83:db:98:42:3c:25:42:2c:cd:b1:8b:c4:fe:8c:ac:b7: 15:99:ce:e4:50:de:6b:04:11:18:a6:03:32:34:d8:04:91:23: 67:4b:91:0b:3e:db:91:c6:70:1b:3c:48:a7:02:e1:49:71:18: 9b:1c:a0:98:8f:10:e3:e0:f0:b3:2f:9c:63:e5:43:22:19:0e: 21:fa:0d:9c:68:c3:d8:a0:06:1a:eb:5e:86:6f:7c:18:64:e6: 3a:e8:40:8d:59:07:97:3d:a4:8b:0f:98:dc:4b:01:f6:89:d0: f5:88:77:7c:2f:df:8a:bf:1f:0c:15:de:da:0e:68:1e:e5:c0: 1f:44:5f:b2:9d:0e:95:c7:e8:a9:99:47:3a:1e:88:81:99:38: 46:87:0b:53:c5:54:53:fe:cc:a8:b8:c4:5f:fc:54:6e:d9:27: 5b:ba:65:95:e5:8b:97:0f:3d:e3:6f:63:01:b1:cc:eb:51:18: f2:bc:69:5e:4d:72:c9:e6:e9:e6:d7:b0:25:68:a3:45:96:09: a5:c6:5f:b5:c8:b1:ec:0b:ba:45:21:a9:3a:d1:2a:f9:9e:2b: 57:0f:db:aa -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIzMDY0MjIyWhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD VQQDDAhBOTE3QzgxQzExMC8GA1UEBRMoMUM2RkYzRUMwOTgyOTRCNDJEOTc5RjI1 QjY5NjA1OTIzRTFDQ0VFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANGet3Agx3/0DWAbRAZQbHbIHBAbZkrRp2oULo4hqS1RKWgz1Du5brLF1bxRERM1 o077Zl+nt953Ef9KHoculAiKSCFK4vx5/N+18kanwq1q/94SJ+nmpAP/flXkMYdi GyNrgdJDyCz1kswnaK8y7ka76JrBgQVc6/cxb+ewUNMuXgRnagqHUsEuFxrYgjsy MboFh9aKUmEK9S0VtPwHdcLVdUgtQh8xbPX3XXF4I8L2I1ytOVTTatcPVUkXGp8X qsKLrBnwjsI32lLDiBjvtZv1XbyNwkFFlVQwkiaMUgTo+yC3BQfELpV62OFzWvYX WhXk/Us12rUfMVjjpdQc4OcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQcb/PsCYKU tC2XnyW2lgWSPhzO7zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M4MUMvODYyMEZDQTZERkNBMTFGMEE0NTU0ODU2NEY2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdDODFDLzg2MjBGQ0E2REZDQTExRjBBNDU1NDg1NjRGNkY1NkJDL0hHX3o3QW1D bExRdGw1OGx0cFlGa2o0Y3p1OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPwjANBgkqhkiG9w0BAQsFAAOCAQEAJ0ag/QE60Q6SbMSqDOPt jGMrvJms1lJkY43HJUrTf17hAin7UhKD25hCPCVCLM2xi8T+jKy3FZnO5FDeawQR GKYDMjTYBJEjZ0uRCz7bkcZwGzxIpwLhSXEYmxygmI8Q4+Dwsy+cY+VDIhkOIfoN nGjD2KAGGutehm98GGTmOuhAjVkHlz2kiw+Y3EsB9onQ9Yh3fC/fir8fDBXe2g5o HuXAH0Rfsp0OlcfoqZlHOh6IgZk4RocLU8VUU/7MqLjEX/xUbtknW7plleWLlw89 429jAbHM61EY8rxpXk1yyebp5tewJWijRZYJpcZftcix7Au6RSGpOtEq+Z4rVw/b qg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:17 2026 by rpki-client