This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer File: Tcfii1RvKgtTjozfgy2aofN8yOQ.cer (raw, json) Hash identifier: 0Y2Oy6Ffcx19uQ9NwP6geC+Vp2F6R6MVng2FaSK2ziI= Subject key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71C1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 12:55:05 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.10.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29121 (0x71c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 8 12:55:05 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:10:f6:b6:63:fe:19:ea:99:fb:f2:23:9f: 7c:88:75:f8:54:21:d7:e7:7b:8a:a8:33:56:4d:70: b8:cf:6d:51:6d:73:44:1a:ad:03:b6:0b:25:b2:87: f8:c2:54:0b:44:e3:b6:33:30:e7:1d:91:ce:0d:80: 92:3f:1c:b8:cd:a3:57:0c:f0:b6:be:51:3c:8d:5e: 81:14:b9:a6:42:2a:80:8a:cd:e3:3e:df:25:39:26: 31:6d:e6:13:fa:c1:70:da:19:cf:93:ef:2d:85:20: fa:58:85:d7:79:a3:fd:15:6e:8c:38:d0:f3:dc:40: 5d:fd:12:03:06:3b:2e:e3:36:85:9e:7d:54:2b:0b: 6d:2c:68:a9:79:a7:2f:1d:b1:29:23:be:8e:86:9c: 19:38:f9:25:50:c3:34:1d:b6:17:8f:35:4c:62:2f: 64:af:9d:7b:ba:6d:ef:aa:f1:9e:e2:2e:90:19:d1: 39:1e:bc:28:62:5a:1c:5c:dd:be:e3:ca:77:ee:30: a8:32:1c:65:cc:49:c4:dc:a6:29:45:94:cf:20:e8: ac:44:c3:94:6f:63:04:ef:b9:29:16:00:68:45:80: 9b:e5:0d:a7:29:c8:69:57:4c:dc:22:fa:a1:59:5e: 71:74:13:b2:42:52:34:5c:0c:cb:41:38:29:56:72: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.10.0/24 Signature Algorithm: sha256WithRSAEncryption 39:83:da:02:4d:a1:e5:b7:d8:7b:87:13:a3:5f:c9:17:b2:99: fc:e7:8e:48:2b:ea:54:4b:73:5a:49:72:c2:b6:cf:09:09:07: 6e:22:23:34:c5:dd:34:b2:00:aa:01:37:c7:75:00:2c:ff:08: 97:95:7d:94:f3:04:14:07:d2:b5:c8:de:a9:53:51:74:42:60: 0d:19:fa:c0:48:b9:0b:8c:74:cc:5e:da:72:b4:4c:f4:d5:de: 34:5f:12:bb:1f:a4:93:77:d4:98:c1:96:a2:48:07:e0:1c:6a: 04:1b:8c:95:52:57:aa:54:55:02:b1:f8:89:a2:bd:4c:04:04: f0:25:8f:8a:ae:08:d9:f7:06:69:79:e2:35:50:bf:31:4b:e0: 17:d8:e6:aa:e6:4d:3a:e8:80:66:56:83:e4:e9:a2:54:4d:4b: 8e:1e:42:77:41:d6:81:27:a0:54:2e:36:f5:65:1a:1b:4b:6d: 44:93:0c:20:da:70:f0:7e:2d:55:01:e2:3b:cf:25:3c:f5:9d: 44:b0:ba:b5:2e:e9:0a:0c:5f:25:6d:45:24:38:b2:a6:aa:36: 8e:a8:5b:71:13:34:dd:a2:00:c2:f1:b3:2b:f3:59:2c:7d:b2: eb:28:d8:8a:91:b1:89:e6:bd:3c:ae:3f:22:34:82:95:cb:5f: 53:f9:c3:37 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICccEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA4MTI1NTA1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE0MjNDMTExMC8GA1UEBRMoNERDN0UyOEI1NDZGMkEwQjUzOEU4Q0RG ODMyRDlBQTFGMzdDQzhFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMu7EPa2Y/4Z6pn78iOffIh1+FQh1+d7iqgzVk1wuM9tUW1zRBqtA7YLJbKH+MJU C0TjtjMw5x2Rzg2Akj8cuM2jVwzwtr5RPI1egRS5pkIqgIrN4z7fJTkmMW3mE/rB cNoZz5PvLYUg+liF13mj/RVujDjQ89xAXf0SAwY7LuM2hZ59VCsLbSxoqXmnLx2x KSO+joacGTj5JVDDNB22F481TGIvZK+de7pt76rxnuIukBnROR68KGJaHFzdvuPK d+4wqDIcZcxJxNymKUWUzyDorETDlG9jBO+5KRYAaEWAm+UNpynIaVdM3CL6oVle cXQTskJSNFwMy0E4KVZyefcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRNx+KLVG8q C1OOjN+DLZqh83zI5DAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIzQzEvRDAzMjBFRjhCRjRGMTFFRkJDRjY4OTQ0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQyM0MxL0QwMzIwRUY4QkY0RjExRUZCQ0Y2ODk0NEM0RjlBRTAyL1RjZmlpMVJ2 S2d0VGpvemZneTJhb2ZOOHlPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4CjANBgkqhkiG9w0BAQsFAAOCAQEAOYPaAk2h5bfYe4cTo1/J F7KZ/OeOSCvqVEtzWklywrbPCQkHbiIjNMXdNLIAqgE3x3UALP8Il5V9lPMEFAfS tcjeqVNRdEJgDRn6wEi5C4x0zF7acrRM9NXeNF8Sux+kk3fUmMGWokgH4BxqBBuM lVJXqlRVArH4iaK9TAQE8CWPiq4I2fcGaXniNVC/MUvgF9jmquZNOuiAZlaD5Omi VE1Ljh5Cd0HWgSegVC429WUaG0ttRJMMINpw8H4tVQHiO88lPPWdRLC6tS7pCgxf JW1FJDiypqo2jqhbcRM03aIAwvGzK/NZLH2y6yjYipGxiea9PK4/IjSClctfU/nD Nw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:56:38 2026 by rpki-client