This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer File: MsAhMRti_kUAvI5OD0hSxkvF2ss.cer (raw, json) Hash identifier: SZw+eMvkOlsfORRpGaYC2xAqvsRPChX7bPmz+pDDSAI= Subject key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7170 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft caRepository: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 03 Jan 2026 03:19:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.145.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29040 (0x7170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 3 03:19:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:fb:2d:a3:6a:10:39:b8:3d:4b:90:18:92: 73:4d:ac:82:03:3b:d8:cc:37:09:27:12:3b:c1:4a: 41:5b:2d:65:19:aa:57:b0:bf:fa:27:fa:60:ec:9d: 52:1e:f9:ef:2a:4c:e1:ff:55:4c:3f:f7:1b:63:de: 12:42:77:6d:59:26:e1:e7:a9:54:e2:fc:4d:c0:a7: 80:b4:3e:6f:62:b5:82:bb:10:d7:7f:60:e7:29:db: ba:d7:61:19:89:c2:e5:06:5b:bb:74:3c:1f:6d:2b: 18:d7:42:82:f9:bd:bd:32:da:1f:ce:3a:4d:dc:62: 0f:91:80:53:7f:05:b5:d2:9d:81:29:a7:15:8b:c3: 9e:c0:ba:04:11:2a:13:04:de:ef:85:f4:93:10:34: e2:51:84:20:a5:8a:92:17:ed:a8:99:7c:c1:4a:b7: 5a:d1:ad:ea:2a:22:8d:09:cb:54:1c:0d:c3:3e:e4: 77:8c:c6:08:ec:2d:e9:c6:ef:01:e7:bd:c6:63:29: a0:45:21:b6:a1:f9:f0:8f:41:28:17:be:c6:68:cd: ef:d0:77:b6:23:18:6d:6e:ee:55:40:3e:2f:0c:a7: 81:cb:d3:2e:26:d9:d6:3a:61:19:3a:da:f4:27:af: 54:00:56:1b:aa:ec:af:6d:37:7a:d0:0b:10:23:23: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.145.0/24 Signature Algorithm: sha256WithRSAEncryption 94:a8:42:83:42:83:cd:5f:d3:e8:b2:6e:d7:f4:d8:79:e5:4e: 4c:85:11:41:61:34:6f:46:0e:55:2c:91:a0:cd:de:a6:f4:1f: 67:ca:35:9a:f8:2e:44:26:2b:ad:71:de:29:3a:d4:45:fb:0f: 29:ae:74:a7:16:9c:7c:f7:67:14:a3:05:a1:1d:b5:e3:b8:e5: 57:40:f1:85:11:68:31:39:93:30:06:fb:a0:ed:4c:10:81:01: 38:5e:96:4b:fd:3d:4a:08:44:03:e4:f7:11:34:cc:98:2c:4c: 4d:f3:ad:e6:14:95:df:94:0a:e0:89:48:4f:6a:29:a4:2f:eb: f7:3c:f3:a4:9d:2b:d1:2b:85:4a:b1:66:c7:cf:21:55:74:a7: 28:56:18:ec:25:64:21:e6:0a:dd:07:86:c7:6a:83:1a:b2:66: a9:85:a5:9d:27:b6:c4:06:88:83:7c:5b:22:62:ff:a8:60:d0: 15:d9:33:d8:59:60:42:f4:0d:f8:86:8c:22:82:c2:1a:99:eb: 48:e0:f1:2a:5d:de:19:e2:d9:bc:b9:0d:3d:29:6d:e0:71:39: dc:b4:90:3b:dd:90:6e:58:e7:c3:4b:cd:b8:74:b4:ac:f5:08: 8d:25:a2:4e:f1:bb:4d:f8:4e:65:25:40:9d:a7:eb:67:1e:91: 84:11:dd:1b -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTAzMDMxOTU3WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1RDhGMzExMC8GA1UEBRMoMzJDMDIxMzExQjYyRkU0NTAwQkM4RTRF MEY0ODUyQzY0QkM1REFDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALiL+y2jahA5uD1LkBiSc02sggM72Mw3CScSO8FKQVstZRmqV7C/+if6YOydUh75 7ypM4f9VTD/3G2PeEkJ3bVkm4eepVOL8TcCngLQ+b2K1grsQ139g5ynbutdhGYnC 5QZbu3Q8H20rGNdCgvm9vTLaH846TdxiD5GAU38FtdKdgSmnFYvDnsC6BBEqEwTe 74X0kxA04lGEIKWKkhftqJl8wUq3WtGt6ioijQnLVBwNwz7kd4zGCOwt6cbvAee9 xmMpoEUhtqH58I9BKBe+xmjN79B3tiMYbW7uVUA+LwyngcvTLibZ1jphGTra9Cev VABWG6rsr203etALECMju9MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQywCExG2L+ RQC8jk4PSFLGS8XayzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ4RjMvQzU3RjIzQUU5QjA3MTFFRjgzN0VBMDEyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVEOEYzL0M1N0YyM0FFOUIwNzExRUY4MzdFQTAxMkM0RjlBRTAyL01zQWhNUnRp X2tVQXZJNU9EMGhTeGt2RjJzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC/kTANBgkqhkiG9w0BAQsFAAOCAQEAlKhCg0KDzV/T6LJu1/TY eeVOTIURQWE0b0YOVSyRoM3epvQfZ8o1mvguRCYrrXHeKTrURfsPKa50pxacfPdn FKMFoR2147jlV0DxhRFoMTmTMAb7oO1MEIEBOF6WS/09SghEA+T3ETTMmCxMTfOt 5hSV35QK4IlIT2oppC/r9zzzpJ0r0SuFSrFmx88hVXSnKFYY7CVkIeYK3QeGx2qD GrJmqYWlnSe2xAaIg3xbImL/qGDQFdkz2FlgQvQN+IaMIoLCGpnrSODxKl3eGeLZ vLkNPSlt4HE53LSQO92Qbljnw0vNuHS0rPUIjSWiTvG7TfhOZSVAnafrZx6RhBHd Gw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:02 2026 by rpki-client