This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer File: KBiMFu7JB0JxcnjCic-C9QTyWqk.cer (raw, json) Hash identifier: c4lz0FVnOyIqo3VHECOj9T1j4Lq4cW7ds113IL3Ceyg= Subject key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70A9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft caRepository: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 12:40:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.209.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28841 (0x70a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 22 12:40:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:c0:f5:b9:54:e5:13:e2:09:ec:6c:e0:ca: 5d:80:f3:cd:c3:2d:17:34:b3:6f:07:f3:20:a4:42: 68:15:60:ab:0f:9c:2b:ca:7d:c8:20:5f:46:63:ae: 51:ba:84:a2:60:47:c5:cc:9e:58:90:a8:04:c0:4d: 3d:e2:96:31:c0:01:49:d4:94:1f:87:57:b6:ef:32: e3:a1:55:47:41:90:e6:d9:5b:91:75:d6:6e:81:ba: 12:91:10:b0:d0:eb:36:ba:1b:f8:0c:6a:63:1f:60: 55:9b:2f:a4:e1:ad:8c:fc:cd:2a:a1:aa:82:4d:b4: e2:70:a4:8d:3b:93:48:b2:6d:8e:84:ba:e8:69:7c: 6f:7c:05:e6:9d:50:c5:27:c5:fd:53:51:c5:d4:f9: ac:91:3d:87:d1:cc:68:96:01:ed:ef:7f:46:5b:91: a4:e4:98:6e:ce:f9:47:f6:d2:82:03:41:78:ff:e8: 2b:7b:ae:b3:52:d5:24:a8:d2:06:78:e7:f2:cc:a1: f6:9d:22:2f:94:9b:eb:52:85:bb:75:a1:78:10:77: a8:16:95:2e:6f:31:58:14:2e:e7:cc:66:8e:22:5e: 86:96:bf:2a:5e:32:34:d1:d0:c6:b0:05:63:70:79: 9a:db:8c:66:5a:92:69:f9:2b:45:ae:42:f9:04:d9: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.209.0/24 Signature Algorithm: sha256WithRSAEncryption c2:83:62:a3:7a:cd:11:71:ee:45:7d:99:74:c4:97:3b:95:30: fa:ac:41:81:15:f2:73:6d:ff:00:a8:f4:7e:4d:44:ea:b6:55: 97:35:92:9b:ce:e5:7a:81:99:e7:1b:ee:b9:0b:63:9c:0f:3e: db:6f:9f:7f:73:65:10:16:df:98:eb:73:61:80:f3:57:b9:70: a4:9c:d4:7f:9e:da:46:45:12:22:81:5a:f8:d6:1c:50:95:19: 45:e5:b3:d6:df:07:d6:a1:66:17:16:76:08:59:5d:23:a6:84: 7a:ca:b9:f3:db:81:8c:db:97:f1:67:a2:57:74:7b:af:8e:d0: 00:29:e3:f5:eb:e5:82:88:3b:39:95:08:6b:35:16:12:68:21: d6:31:5e:67:24:5e:e2:95:44:f0:d3:6b:4c:ed:05:54:25:9a: eb:c9:82:d4:e0:ce:0b:5e:a2:18:16:ab:f3:b7:42:13:3c:61: ca:87:08:78:02:31:07:cc:f5:03:cb:a8:f5:fd:27:28:58:7c: 7f:19:ea:fe:cf:98:82:91:27:1d:31:49:a7:d4:a4:cf:9a:24: f9:3d:96:96:c2:cb:0c:24:15:c0:e1:57:e0:c3:17:cb:9e:ea: 81:9b:84:79:b2:f5:3e:f2:5f:95:dd:ea:35:07:3f:e4:70:b2: c9:1b:3d:80 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIyMTI0MDUyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEyRjM4NzExMC8GA1UEBRMoMjgxODhDMTZFRUM5MDc0MjcxNzI3OEMy ODlDRjgyRjUwNEYyNUFBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANBtwPW5VOUT4gnsbODKXYDzzcMtFzSzbwfzIKRCaBVgqw+cK8p9yCBfRmOuUbqE omBHxcyeWJCoBMBNPeKWMcABSdSUH4dXtu8y46FVR0GQ5tlbkXXWboG6EpEQsNDr Nrob+AxqYx9gVZsvpOGtjPzNKqGqgk204nCkjTuTSLJtjoS66Gl8b3wF5p1QxSfF /VNRxdT5rJE9h9HMaJYB7e9/RluRpOSYbs75R/bSggNBeP/oK3uus1LVJKjSBnjn 8syh9p0iL5Sb61KFu3WheBB3qBaVLm8xWBQu58xmjiJehpa/Kl4yNNHQxrAFY3B5 mtuMZlqSafkrRa5C+QTZlQ8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQoGIwW7skH QnFyeMKJz4L1BPJaqTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYzODcvRkU0RDc4RTJCNUMxMTFFRTk1QjU4MzQxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJGMzg3L0ZFNEQ3OEUyQjVDMTExRUU5NUI1ODM0MUM0RjlBRTAyL0tCaU1GdTdK QjBKeGNuakNpYy1DOVFUeVdxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJ0K0TANBgkqhkiG9w0BAQsFAAOCAQEAwoNio3rNEXHuRX2ZdMSX O5Uw+qxBgRXyc23/AKj0fk1E6rZVlzWSm87leoGZ5xvuuQtjnA8+22+ff3NlEBbf mOtzYYDzV7lwpJzUf57aRkUSIoFa+NYcUJUZReWz1t8H1qFmFxZ2CFldI6aEesq5 89uBjNuX8WeiV3R7r47QACnj9evlgog7OZUIazUWEmgh1jFeZyRe4pVE8NNrTO0F VCWa68mC1ODOC16iGBar87dCEzxhyocIeAIxB8z1A8uo9f0nKFh8fxnq/s+YgpEn HTFJp9Skz5ok+T2WlsLLDCQVwOFX4MMXy57qgZuEebL1PvJfld3qNQc/5HCyyRs9 gA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:21 2026 by rpki-client