This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer (raw, json) Hash identifier: kZqepjEeW6IIChfBwBc1SdiIqixaU/2RQ6jk7dSh6lA= Subject key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71F9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 11 Jan 2026 14:17:52 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.56.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29177 (0x71f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 11 14:17:52 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:16:5f:d2:9e:d1:26:92:7f:c1:b0:29:38: bc:df:5d:de:75:a5:ea:22:e0:3b:6b:56:53:02:f6: 44:5c:99:a4:3c:69:06:d5:79:a6:4f:5d:4d:12:6d: 29:34:24:68:3b:27:63:e4:0d:0e:90:60:57:53:d2: a7:01:97:68:6b:10:8f:0f:96:03:49:1a:95:c6:6e: 11:18:67:36:e7:87:22:e1:7f:a5:46:27:ff:c1:95: 4c:c9:a8:56:59:f7:6a:3f:87:09:95:fc:6f:79:f5: 7d:dc:0e:cf:d3:8f:7d:29:6a:60:59:b2:ed:fb:6a: d4:53:9c:e7:29:fc:00:6f:04:e0:52:03:24:98:95: d9:3c:80:37:3d:b0:dd:9d:b7:51:5a:62:bf:25:f7: 99:58:d8:2a:ae:4e:fd:e4:db:92:c1:c5:34:dc:42: a3:cc:cc:b8:9e:fd:6a:1b:77:5a:76:33:f9:b4:26: bc:c9:e1:bc:63:d4:e5:6a:d5:75:f6:0a:59:55:29: f4:8e:0d:d6:0b:a3:af:71:11:ef:f4:40:dc:7d:cd: 99:71:c2:ce:8f:13:93:42:c3:26:8e:ab:58:67:93: 84:3d:c5:e5:3a:69:b6:8a:70:24:13:92:f4:09:79: 36:e9:68:78:22:76:ee:42:aa:78:8a:8b:e7:0d:30: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.56.0/23 Signature Algorithm: sha256WithRSAEncryption 66:7d:57:63:6b:74:df:5a:c6:44:98:49:08:32:e9:9d:e5:f4: 9e:dc:84:6b:55:ac:3d:a1:69:91:85:6c:e6:1d:e4:37:88:35: c5:13:91:87:6b:2e:94:7e:81:d1:f3:f8:a2:3c:fa:ba:46:cc: 1b:b6:9f:67:7a:83:07:ca:88:fd:10:0a:d1:d6:cb:10:f3:ac: f4:ae:2a:c1:cc:6f:b9:8c:f2:44:41:2d:56:60:1f:d1:33:1b: 96:7c:42:b0:1b:f9:59:46:6c:51:8a:55:a1:7b:86:11:01:ef: ce:7a:b8:8a:58:40:40:fd:24:fc:7d:70:cb:6b:72:eb:5a:52: eb:f1:f2:4f:0d:ae:e9:5c:3b:eb:c4:a8:8e:73:03:f8:f8:00: f9:f0:6a:5f:dc:1a:e0:f7:00:aa:92:c4:ef:3e:11:8a:2d:1b: a0:8c:8e:f0:8b:2a:51:b9:49:89:93:0f:ea:b4:e0:b2:08:63: ed:d9:20:40:d7:5e:90:70:06:e1:52:b6:4d:30:58:44:d5:34: 11:6d:17:a2:ed:0f:65:2b:a9:38:7c:ec:65:a4:71:93:8c:d9: 9a:79:ad:5f:75:f7:c8:46:a9:4a:18:0c:0b:44:a9:f1:f9:02: b6:3b:2a:09:66:4b:25:17:ea:94:e3:52:16:44:49:db:de:29: b6:dc:70:fd -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTExMTQxNzUyWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFGRjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZF MjUwOTkxQzc1NDkxNDU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKicFl/SntEmkn/BsCk4vN9d3nWl6iLgO2tWUwL2RFyZpDxpBtV5pk9dTRJtKTQk aDsnY+QNDpBgV1PSpwGXaGsQjw+WA0kalcZuERhnNueHIuF/pUYn/8GVTMmoVln3 aj+HCZX8b3n1fdwOz9OPfSlqYFmy7ftq1FOc5yn8AG8E4FIDJJiV2TyANz2w3Z23 UVpivyX3mVjYKq5O/eTbksHFNNxCo8zMuJ79aht3WnYz+bQmvMnhvGPU5WrVdfYK WVUp9I4N1gujr3ER7/RA3H3NmXHCzo8Tk0LDJo6rWGeThD3F5TpptopwJBOS9Al5 NuloeCJ27kKqeIqL5w0wfysCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBREb6+SO+uv ljVyh/4lCZHHVJFFTTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkYxQ0MvM0FGQzMzRTJFRjYzMTFFRkJGNjRBQjZBQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZGMUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZy cjVZMWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaH4ODANBgkqhkiG9w0BAQsFAAOCAQEAZn1XY2t031rGRJhJCDLp neX0ntyEa1WsPaFpkYVs5h3kN4g1xRORh2sulH6B0fP4ojz6ukbMG7afZ3qDB8qI /RAK0dbLEPOs9K4qwcxvuYzyREEtVmAf0TMblnxCsBv5WUZsUYpVoXuGEQHvznq4 ilhAQP0k/H1wy2ty61pS6/HyTw2u6Vw768SojnMD+PgA+fBqX9wa4PcAqpLE7z4R ii0boIyO8IsqUblJiZMP6rTgsghj7dkgQNdekHAG4VK2TTBYRNU0EW0Xou0PZSup OHzsZaRxk4zZmnmtX3X3yEapShgMC0Sp8fkCtjsqCWZLJRfqlONSFkRJ294pttxw /Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:18:23 2026 by rpki-client