This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer File: PzbQyAdues-oPQS3IwcXKogp1bM.cer (raw, json) Hash identifier: dU+qfATz9sRbVeSkgxEVunfrC5QCThb8PR7QbObZdCI= Subject key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 720F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft caRepository: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:21:08 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.138.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29199 (0x720f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 13:21:08 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:e0:9b:b1:ff:10:44:da:47:6b:b7:ab:05: 5e:b8:b0:3e:4c:48:1d:3e:13:97:6f:50:75:d5:63: cb:2c:48:01:ef:11:63:4f:1a:27:2e:46:4f:a1:2a: d2:72:69:24:ec:1d:e7:f6:f8:de:de:28:26:f1:93: 53:1e:61:00:71:96:04:e4:a2:c6:e5:ea:2d:2c:04: d3:7d:9a:45:f0:5b:66:fa:e1:f0:e8:2b:b1:fc:1a: 9b:df:53:93:37:df:54:8e:7c:13:ef:be:be:91:93: b4:3d:a0:24:ed:6d:bb:a1:7d:84:74:6f:58:5d:5a: 09:c4:d1:e6:f6:c0:ac:7e:0d:4c:0e:bb:ef:52:2d: 0b:a8:c6:89:0a:7e:88:e5:4d:da:10:b7:19:ec:0d: 41:6f:ff:19:02:7c:dd:8d:9f:74:3c:c8:1d:4a:4c: 02:99:69:01:ed:f3:85:01:d8:26:f4:6f:32:b1:b9: 28:03:8b:b9:6e:35:ec:e6:78:ba:1c:b2:44:96:67: 28:4a:89:74:f1:1b:b5:30:dc:ab:38:21:b5:0c:0a: 94:c5:a8:90:12:4e:5d:12:85:a6:76:52:da:b9:72: 1a:d9:1c:09:0a:f8:0c:53:d6:ab:9e:d9:4e:53:e7: 8c:c3:9f:96:27:0d:a1:1e:91:1f:6f:c4:2b:63:ec: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.138.0/23 Signature Algorithm: sha256WithRSAEncryption 65:f7:1f:f9:c7:73:1c:09:6c:0a:d6:9c:f9:9e:ab:ac:8e:a5: a5:d8:1f:3c:59:c7:9c:01:03:57:ee:05:c0:0e:78:97:13:d8: 3d:b5:21:4a:71:a6:9c:dd:8c:3f:00:55:b8:fb:fe:18:9a:d6: 53:c0:c8:00:ae:98:cd:f9:01:c1:b2:cf:a4:f7:a8:13:99:05: 79:d2:f6:f4:11:01:53:66:91:ba:be:a0:d5:b2:d7:e2:ee:27: 3b:b1:70:a5:66:31:ac:93:1c:f6:ea:56:3f:27:11:06:dd:cb: 9d:1b:47:2e:45:3d:fe:c9:93:52:ae:ac:99:88:c6:c4:cf:dc: 15:c2:41:9a:3b:81:98:34:30:7e:32:ea:20:8d:6c:26:90:8b: 21:9c:17:5e:4f:08:7b:93:65:af:80:d0:bd:85:6c:ad:a0:ac: 3e:83:5d:b0:70:ee:60:44:48:1c:33:11:de:42:75:52:cc:f5: 8b:e2:2e:03:76:08:9e:26:00:6c:06:00:c9:b3:cf:67:dd:b6: aa:5c:20:f3:c7:23:3f:da:fe:55:c2:a7:ed:a1:0b:5e:6e:27: 02:af:8a:18:86:55:25:f5:11:60:be:bd:83:57:bc:fe:ca:6a: 22:0e:6e:a4:7f:3f:e2:11:26:2b:00:1f:06:e9:04:55:6c:08: 78:ce:d0:21 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTMyMTA4WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE3MkI2NTExMC8GA1UEBRMoM0YzNkQwQzgwNzZFN0FDRkE4M0QwNEI3 MjMwNzE3MkE4ODI5RDVCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKlu4Jux/xBE2kdrt6sFXriwPkxIHT4Tl29QddVjyyxIAe8RY08aJy5GT6Eq0nJp JOwd5/b43t4oJvGTUx5hAHGWBOSixuXqLSwE032aRfBbZvrh8Ogrsfwam99Tkzff VI58E+++vpGTtD2gJO1tu6F9hHRvWF1aCcTR5vbArH4NTA6771ItC6jGiQp+iOVN 2hC3GewNQW//GQJ83Y2fdDzIHUpMAplpAe3zhQHYJvRvMrG5KAOLuW417OZ4uhyy RJZnKEqJdPEbtTDcqzghtQwKlMWokBJOXRKFpnZS2rlyGtkcCQr4DFPWq57ZTlPn jMOflicNoR6RH2/EK2PsvnMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ/NtDIB256 z6g9BLcjBxcqiCnVszAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCNjUvMDE1RjZERUU0NUI3MTFFRkE1OUUxMzMyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcyQjY1LzAxNUY2REVFNDVCNzExRUZBNTlFMTMzMkM0RjlBRTAyL1B6YlF5QWR1 ZXMtb1BRUzNJd2NYS29ncDFiTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KijANBgkqhkiG9w0BAQsFAAOCAQEAZfcf+cdzHAlsCtac+Z6r rI6lpdgfPFnHnAEDV+4FwA54lxPYPbUhSnGmnN2MPwBVuPv+GJrWU8DIAK6YzfkB wbLPpPeoE5kFedL29BEBU2aRur6g1bLX4u4nO7FwpWYxrJMc9upWPycRBt3LnRtH LkU9/smTUq6smYjGxM/cFcJBmjuBmDQwfjLqII1sJpCLIZwXXk8Ie5Nlr4DQvYVs raCsPoNdsHDuYERIHDMR3kJ1Usz1i+IuA3YIniYAbAYAybPPZ922qlwg88cjP9r+ VcKn7aELXm4nAq+KGIZVJfURYL69g1e8/spqIg5upH8/4hEmKwAfBukEVWwIeM7Q IQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:56:59 2026 by rpki-client