This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer File: JMi7-TDNLRI5mr35ycqxSxzXn2s.cer (raw, json) Hash identifier: R4AkXiuH202v0Bu4DE29iODYc8dNKY/QzGa5hPFE63A= Subject key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7213 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft caRepository: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:46:53 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 168.153.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29203 (0x7213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 13:46:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:84:51:96:07:ca:29:e8:ab:e8:4e:e0:1a: ae:fa:11:df:a6:ff:ed:29:f0:4e:8c:00:5b:7a:64: 20:c9:12:86:1e:43:6d:f9:42:08:85:7d:a8:9e:61: 98:0d:27:ab:86:b9:ba:34:1e:e3:b7:6e:92:68:9d: c0:6b:c0:12:d0:5e:b8:28:cb:0b:ab:2e:20:3d:d4: e9:cb:dc:46:06:9a:8f:b8:34:ae:0e:85:b0:d7:15: 02:b9:04:c7:d0:4d:d7:90:98:b1:9c:c1:ac:c7:dd: 88:28:14:c6:86:51:b8:1c:ff:fb:cb:ff:4d:5c:b8: 70:15:dd:15:de:53:07:44:84:20:e9:8a:9f:c4:d2: 82:7d:3d:91:b3:06:4e:2b:40:76:20:3f:16:16:d9: 3f:cb:5b:fa:3f:34:25:c9:ed:53:a3:75:4f:d6:19: 3e:07:96:1e:6f:b8:8f:64:aa:7a:d6:17:e5:d5:58: 80:c1:f4:f1:91:d2:87:45:3f:00:7f:d8:0c:ba:94: a8:7e:f0:c8:70:5d:0f:5f:02:b1:83:1f:81:3d:3c: 42:43:35:91:24:65:46:0a:cf:73:30:8b:69:7b:02: 14:ad:97:2b:8d:27:a0:dc:95:7b:3b:7c:f9:66:c4: 57:78:9c:d0:2a:d4:bd:94:30:4a:7d:c9:42:7b:03: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption c1:fe:44:ee:85:09:08:1c:dd:a1:ec:0c:9f:f2:31:bf:a4:f7: a5:df:c6:75:f2:66:9c:88:07:a6:18:0a:34:6a:8c:1c:7c:f2: 06:26:c0:93:34:bd:2b:73:db:d2:e5:c1:92:da:33:79:c7:18: 5c:df:e8:74:83:bf:74:a9:c7:d9:f7:59:af:dc:f9:f3:84:00: b4:be:a1:4f:e2:08:dc:26:fa:5a:60:9f:66:20:cd:c8:75:13: 69:37:56:27:3b:2d:ea:2f:1a:27:b1:34:b8:54:ce:05:96:6c: a8:75:47:36:74:99:98:c6:5e:47:b3:fa:d7:fe:7f:b3:fa:3f: cd:90:7c:26:c9:cd:7b:d7:2d:35:55:32:95:ed:24:ed:ab:2a: dd:47:8e:af:4a:b8:8e:6e:b7:3f:bb:69:9d:16:1e:2c:72:8a: 68:94:cd:19:1d:a4:d5:00:c2:de:0a:49:23:86:99:6d:59:4b: 6d:3b:6a:97:18:c9:8d:64:04:a1:f3:c1:a5:73:30:d3:63:98: b2:2c:37:71:31:3a:a0:73:2b:8c:8d:e2:66:93:16:41:62:af: c0:7b:45:77:5a:43:10:24:e2:eb:de:e9:fd:00:91:6c:16:7c: bb:0e:6b:e6:6a:31:81:bb:8c:a3:0a:ed:c0:90:79:ef:3f:dc: 7d:b2:87:9a -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICchMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTM0NjUzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5QTcxMzExMC8GA1UEBRMoMjRDOEJCRjkzMENEMkQxMjM5OUFCREY5 QzlDQUIxNEIxQ0Q3OUY2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOgRhFGWB8op6KvoTuAarvoR36b/7SnwTowAW3pkIMkShh5DbflCCIV9qJ5hmA0n q4a5ujQe47dukmidwGvAEtBeuCjLC6suID3U6cvcRgaaj7g0rg6FsNcVArkEx9BN 15CYsZzBrMfdiCgUxoZRuBz/+8v/TVy4cBXdFd5TB0SEIOmKn8TSgn09kbMGTitA diA/FhbZP8tb+j80JcntU6N1T9YZPgeWHm+4j2SqetYX5dVYgMH08ZHSh0U/AH/Y DLqUqH7wyHBdD18CsYMfgT08QkM1kSRlRgrPczCLaXsCFK2XK40noNyVezt8+WbE V3ic0CrUvZQwSn3JQnsD9DsCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQkyLv5MM0t EjmavfnJyrFLHNefazAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3MTMvMzQ5OTRDQjRFMERBMTFFQzk0QzdFMDYyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlBNzEzLzM0OTk0Q0I0RTBEQTExRUM5NEM3RTA2MkM0RjlBRTAyL0pNaTctVERO TFJJNW1yMzV5Y3F4U3h6WG4ycy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAKiZMA0GCSqGSIb3DQEBCwUAA4IBAQDB/kTuhQkIHN2h7Ayf8jG/ pPel38Z18maciAemGAo0aowcfPIGJsCTNL0rc9vS5cGS2jN5xxhc3+h0g790qcfZ 91mv3PnzhAC0vqFP4gjcJvpaYJ9mIM3IdRNpN1YnOy3qLxonsTS4VM4FlmyodUc2 dJmYxl5Hs/rX/n+z+j/NkHwmyc171y01VTKV7STtqyrdR46vSriObrc/u2mdFh4s copolM0ZHaTVAMLeCkkjhpltWUttO2qXGMmNZASh88GlczDTY5iyLDdxMTqgcyuM jeJmkxZBYq/Ae0V3WkMQJOLr3un9AJFsFny7DmvmajGBu4yjCu3AkHnvP9x9soea -----END CERTIFICATE-----Generated at Sun Jan 25 07:18:56 2026 by rpki-client