This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer (raw, json) Hash identifier: XA1LO/9nNIco6Au8H+V+GHzFN53+oTjw52qF3IfzZUU= Subject key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 721B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 14:15:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 104.250.32.0/19 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29211 (0x721b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 14:15:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:68:7b:ac:73:bc:24:0f:c0:e4:03:eb:cd: 94:5e:0f:d0:a7:2d:43:50:81:f7:76:87:d2:e1:7e: b1:d1:3e:ea:5c:e1:ef:59:11:0c:08:19:ef:77:d8: 1f:27:47:86:0c:49:b2:c0:8a:32:5f:8d:0c:75:c0: 69:48:57:c4:b0:85:46:ce:d4:18:16:8a:09:fa:e3: 4f:ff:97:c1:5c:5e:c4:fc:32:f6:6b:b0:53:bd:b7: 43:e4:be:b9:ae:0c:6a:d9:75:f1:96:85:83:ce:d5: 98:9f:b7:10:ad:55:81:b7:84:74:09:6a:ae:28:b3: d2:1f:41:29:12:ee:75:a2:dc:15:ea:f9:8f:d8:be: 87:07:5b:24:72:9b:4e:1f:cc:e8:92:58:5c:00:77: e4:91:5e:d8:91:4d:21:78:dd:55:8d:bd:41:0b:60: ac:66:d9:7e:17:d9:53:49:3e:e1:d3:96:c2:d7:b8: 85:53:65:73:79:6a:90:30:21:5d:36:82:35:9f:e9: 92:3a:fe:89:e7:78:1a:3f:1d:51:b3:5e:4c:8d:b6: e6:b2:9a:29:a2:36:94:bd:9c:e1:97:7a:65:1e:dc: e8:fc:e1:f8:a5:af:25:ab:14:59:e4:4a:3a:cf:30: 20:6a:55:35:d0:e3:7c:06:1c:0f:35:f3:40:9d:df: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 104.250.32.0/19 Signature Algorithm: sha256WithRSAEncryption 23:78:ad:b9:50:ec:7c:80:57:66:83:f9:a0:20:eb:00:4a:89: 5e:bd:90:b5:9e:4a:2b:eb:59:48:ef:d2:4e:39:6b:bd:b4:df: 42:50:6b:71:05:13:42:90:c2:d7:85:3f:65:e0:a7:7e:c7:b8: ce:4e:86:a2:23:26:1b:fb:d0:1f:3f:97:ef:95:21:9a:3b:57: 80:d8:fe:72:45:00:9b:19:4a:3b:7d:dc:d8:d1:38:77:dd:e4: ac:2c:f8:b2:d0:c7:d6:c4:54:0d:be:9c:83:0b:75:12:de:6d: be:84:54:82:3c:59:ec:80:e5:a7:ff:9f:67:c1:3a:2e:32:d7: 2a:01:30:a7:ea:75:fe:be:98:c1:fe:09:20:66:bc:ca:99:0c: 15:c7:5e:6c:7f:77:fb:6a:9c:7f:30:be:09:9d:67:05:fd:85: 7a:80:81:5d:45:83:cf:0a:94:c8:4e:a0:b2:03:bd:3f:38:4b: 56:0d:6a:b1:29:75:56:68:02:f8:f0:b6:46:bc:a1:94:53:92: b6:67:0b:01:bf:1c:f7:c5:5a:a3:2a:ce:b0:25:f0:c0:87:4c: d7:1a:48:c9:84:a3:81:83:8a:95:c0:44:6e:fc:49:c6:ba:92: 46:9d:57:8e:55:9c:4d:af:a2:ec:00:e2:bd:27:81:90:68:69: 80:61:c7:4b -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICchswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTQxNTI1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDQjhCQTExMC8GA1UEBRMoNDcwQTkzNDQ5RTYxMUZBOUFEMDVBMjg5 RDYxODgyMjBCNUZDRkMzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKo4aHusc7wkD8DkA+vNlF4P0KctQ1CB93aH0uF+sdE+6lzh71kRDAgZ73fYHydH hgxJssCKMl+NDHXAaUhXxLCFRs7UGBaKCfrjT/+XwVxexPwy9muwU723Q+S+ua4M atl18ZaFg87VmJ+3EK1VgbeEdAlqriiz0h9BKRLudaLcFer5j9i+hwdbJHKbTh/M 6JJYXAB35JFe2JFNIXjdVY29QQtgrGbZfhfZU0k+4dOWwte4hVNlc3lqkDAhXTaC NZ/pkjr+ied4Gj8dUbNeTI225rKaKaI2lL2c4Zd6ZR7c6Pzh+KWvJasUWeRKOs8w IGpVNdDjfAYcDzXzQJ3fkusCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRHCpNEnmEf qa0FoonWGIIgtfz8OjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I4QkEvMkI3MzJFNzBCQTg1MTFFQUJBODM4RTMwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNCOEJBLzJCNzMyRTcwQkE4NTExRUFCQTgzOEUzMEM0RjlBRTAyL1J3cVRSSjVo SDZtdEJhS0oxaGlDSUxYOF9Eby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBWj6IDANBgkqhkiG9w0BAQsFAAOCAQEAI3ituVDsfIBXZoP5oCDr AEqJXr2QtZ5KK+tZSO/STjlrvbTfQlBrcQUTQpDC14U/ZeCnfse4zk6GoiMmG/vQ Hz+X75UhmjtXgNj+ckUAmxlKO33c2NE4d93krCz4stDH1sRUDb6cgwt1Et5tvoRU gjxZ7IDlp/+fZ8E6LjLXKgEwp+p1/r6Ywf4JIGa8ypkMFcdebH93+2qcfzC+CZ1n Bf2FeoCBXUWDzwqUyE6gsgO9PzhLVg1qsSl1VmgC+PC2RryhlFOStmcLAb8c98Va oyrOsCXwwIdM1xpIyYSjgYOKlcBEbvxJxrqSRp1XjlWcTa+i7ADivSeBkGhpgGHH Sw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:10 2026 by rpki-client