This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer (raw, json) Hash identifier: fMMQyWwWNv7bir7HacJxr9yclhHrUSbmdShJaYb18yM= Subject key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71A5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft caRepository: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:43:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 96.9.160.0/20 IP: 132.147.64.0/18 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29093 (0x71a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 6 13:43:12 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0a:31:4e:b8:c7:f8:6b:b1:7b:e5:91:65:26: 98:cf:1e:49:80:aa:e5:9a:c0:f0:58:10:a3:96:db: 5a:70:f7:5b:cf:82:9a:06:af:ff:d7:0d:8e:48:b3: cb:e4:85:67:2b:cb:55:b0:58:09:43:41:6b:02:82: cb:13:29:df:c0:64:08:d2:bd:46:a8:b6:f6:5b:c4: 1b:eb:5f:77:42:15:be:72:85:d6:66:46:d6:af:b6: 25:29:d6:d7:49:c1:59:5c:d4:cc:35:bd:6d:1c:97: 86:ee:a5:2c:87:10:1b:b9:53:f6:cc:44:7f:9f:95: bb:37:79:0c:9b:b7:00:86:f7:5c:0e:e2:0b:41:a3: 3d:a5:cf:c1:c5:f0:9d:1a:a5:a5:df:02:8f:7a:8f: 04:88:5d:e5:22:52:a2:46:a1:28:66:89:64:59:3f: c1:11:37:c3:4a:2e:7c:46:f8:cb:ad:4d:3a:dc:20: 42:20:0d:43:43:6e:a2:15:5c:1e:2a:d2:f1:06:2a: bb:93:ef:5d:9e:db:e6:a7:3d:c2:96:38:7b:37:91: 0e:8b:17:91:47:80:62:ff:e6:dc:eb:7e:69:98:9a: d9:b1:58:6b:45:50:2d:ff:fc:61:79:23:d0:39:7d: 2a:d1:6c:54:8b:a4:48:20:10:f8:09:71:25:e8:b2: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 96.9.160.0/20 132.147.64.0/18 Signature Algorithm: sha256WithRSAEncryption 59:d4:f0:e1:32:2e:cd:3f:27:04:99:93:f3:2d:8e:9e:13:00: 8e:a0:5a:27:4b:83:38:32:41:2a:f0:99:8c:01:c4:0b:7a:8d: 1a:67:d5:7b:e8:eb:ac:8a:92:34:42:be:7f:80:c6:6c:57:9e: cd:f6:cc:52:94:3d:ea:3a:ff:74:b2:86:3c:ce:cd:0f:6a:27: 90:d8:ba:ff:b8:3b:b9:b4:1d:3e:33:a7:c9:4d:9a:fb:d2:3d: 55:b3:5c:33:36:4c:15:9a:61:f5:c1:22:ed:ec:96:1b:10:51: 1e:16:25:8f:14:ef:cb:c3:5c:36:d7:77:45:d4:62:67:b5:c9: a1:1f:04:10:23:3b:b7:c3:a4:4a:33:b3:ad:74:1b:95:bb:e4: 12:fe:2a:c1:ee:a1:6c:83:b0:f8:68:43:bb:c7:20:9b:dc:4e: 09:e3:ab:35:66:db:fd:40:8d:f0:4b:ee:c7:b6:dd:14:83:f1: a1:fa:5d:0e:49:cf:d0:71:1e:84:b3:83:4c:47:2b:56:06:b4: 42:d5:5c:15:29:61:34:23:96:b3:14:08:9e:a8:29:02:5d:08: 64:e2:a0:38:ca:00:21:c9:cb:3a:c6:7f:4f:fe:47:05:91:8c: 23:a8:cb:48:ec:82:c2:32:db:89:71:9c:56:e8:e0:c8:be:eb: 39:5f:94:8e -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICcaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA2MTM0MzEyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5NUJBOTExMC8GA1UEBRMoMjI0NUFEOTE1NDNBRERBRDc4MTIzREQ0 MTVENjU5QkI1MkQ1RkI2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APMKMU64x/hrsXvlkWUmmM8eSYCq5ZrA8FgQo5bbWnD3W8+Cmgav/9cNjkizy+SF ZyvLVbBYCUNBawKCyxMp38BkCNK9Rqi29lvEG+tfd0IVvnKF1mZG1q+2JSnW10nB WVzUzDW9bRyXhu6lLIcQG7lT9sxEf5+Vuzd5DJu3AIb3XA7iC0GjPaXPwcXwnRql pd8Cj3qPBIhd5SJSokahKGaJZFk/wRE3w0oufEb4y61NOtwgQiANQ0NuohVcHirS 8QYqu5PvXZ7b5qc9wpY4ezeRDosXkUeAYv/m3Ot+aZia2bFYa0VQLf/8YXkj0Dl9 KtFsVIukSCAQ+AlxJeiylZ8CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQiRa2RVDrd rXgSPdQV1lm7UtX7YjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVCQTkvRDg5MTQ3OEM4MzhFMTFFQThDRUEwOTYwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk1QkE5L0Q4OTE0NzhDODM4RTExRUE4Q0VBMDk2MEM0RjlBRTAyL0lrV3RrVlE2 M2ExNEVqM1VGZFpadTFMVi0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEBGAJoAMEBoSTQDANBgkqhkiG9w0BAQsFAAOCAQEAWdTw4TIuzT8n BJmT8y2OnhMAjqBaJ0uDODJBKvCZjAHEC3qNGmfVe+jrrIqSNEK+f4DGbFeezfbM UpQ96jr/dLKGPM7ND2onkNi6/7g7ubQdPjOnyU2a+9I9VbNcMzZMFZph9cEi7eyW GxBRHhYljxTvy8NcNtd3RdRiZ7XJoR8EECM7t8OkSjOzrXQblbvkEv4qwe6hbIOw +GhDu8cgm9xOCeOrNWbb/UCN8Evux7bdFIPxofpdDknP0HEehLODTEcrVga0QtVc FSlhNCOWsxQInqgpAl0IZOKgOMoAIcnLOsZ/T/5HBZGMI6jLSOyCwjLbiXGcVujg yL7rOV+Ujg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:57:45 2026 by rpki-client