This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer File: V2eQJEzCknXBEjVv9iDyYg19YV4.cer (raw, json) Hash identifier: E+Nu8cgQzV3XFKaCdznn7egam85xTnrlIBH7Lv7hQPE= Subject key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71C3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft caRepository: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 13:18:56 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 23.106.48.0/21 IP: 23.106.64.0/20 IP: 23.106.120.0/21 IP: 23.106.248.0/21 IP: 23.108.96.0/21 IP: 23.111.12.0/22 IP: 64.120.92.0/22 IP: 64.120.110.0/23 IP: 142.91.96.0/21 IP: 172.255.208.0/22 IP: 173.234.0.0/20 IP: 209.58.160.0 -- 209.58.183.255 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29123 (0x71c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 8 13:18:56 2026 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:39:e5:12:cd:7b:49:73:0f:a8:35:08:62:31: 50:10:c8:df:79:28:71:78:34:88:99:c7:11:5a:51: b1:ad:a9:b4:4c:86:27:39:fc:db:c1:3f:ff:6b:a1: 47:e2:e8:9d:1d:fd:c1:6e:d2:50:4c:b0:e9:fa:f6: f3:d7:d2:8f:2b:f6:53:8b:bb:31:8b:2d:1d:f5:86: 73:7b:7a:ea:1a:94:d7:c9:10:bd:9e:ae:8d:fe:56: 16:01:22:5a:5d:72:81:b2:02:c1:8b:88:a8:b2:fe: d6:d6:51:94:f5:58:58:76:06:40:e1:30:f3:02:5f: 33:61:40:e2:6d:3d:8b:bf:2c:13:18:51:b4:26:bb: d3:29:b8:db:85:6e:94:2e:5f:50:16:45:45:f4:58: 22:e5:ef:99:bf:f1:81:f8:6b:8f:35:37:4c:30:b7: 9a:03:d6:63:57:64:93:b1:d0:7a:12:ee:72:e9:36: 3c:5f:4d:f6:48:c3:4c:90:b1:6d:b1:42:d3:e7:c0: ca:d1:82:7a:3e:45:df:93:22:24:06:6d:ba:7d:37: 04:4f:a9:88:af:e6:6b:ab:23:c8:e2:c5:17:cf:24: fa:e2:2e:bb:bd:30:d7:de:04:0f:44:a0:88:4b:5c: 96:8d:ad:2d:3a:69:4d:3c:43:09:02:ee:04:14:2c: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 23.106.48.0/21 23.106.64.0/20 23.106.120.0/21 23.106.248.0/21 23.108.96.0/21 23.111.12.0/22 64.120.92.0/22 64.120.110.0/23 142.91.96.0/21 172.255.208.0/22 173.234.0.0/20 209.58.160.0-209.58.183.255 Signature Algorithm: sha256WithRSAEncryption 16:8b:48:a9:f4:62:c3:09:58:8c:f4:55:f1:96:aa:24:b4:a6: f9:c4:13:ef:b2:c2:fd:c5:e1:2e:72:80:ae:80:64:61:7d:a3: 8d:4e:0d:cc:7e:06:7f:55:09:96:5a:f0:2e:f2:7e:93:83:37: 3c:c5:3c:90:6e:71:b7:e3:f4:7e:4f:f7:1f:30:18:59:0e:87: 02:6c:dd:cf:30:c7:3e:1f:70:32:0e:18:ca:85:41:74:8b:85: c1:09:c6:79:1b:bc:58:35:80:08:41:1f:d6:8d:ce:cc:e6:99: e5:61:6c:ee:54:39:7d:89:89:a6:03:b7:5a:31:e2:a8:2c:a7: 0d:47:22:1f:a7:f7:74:1b:56:5d:84:4e:07:f4:93:68:de:d8: 17:d9:f7:72:ff:7a:e1:b0:81:b2:33:99:2d:2c:ae:d0:5c:0d: c7:32:56:95:be:90:48:e3:ca:10:21:ec:dc:e0:64:76:31:ac: e0:ad:b2:5b:e1:26:41:0d:77:6c:2e:0e:e6:59:0a:71:1a:ed: c9:17:b0:b3:3a:0c:0d:e5:fc:2a:3e:ad:6a:3a:85:19:cb:55: 28:ae:78:59:19:1a:f7:2b:74:14:75:5e:0f:72:fe:e6:fa:df: 67:24:68:fd:23:1f:2a:79:53:4e:6c:20:2c:6f:a9:20:d1:9d: 79:47:65:aa -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgICccMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA4MTMxODU2WhcNMjYwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2QUMzMDExMC8GA1UEBRMoNTc2NzkwMjQ0Q0MyOTI3NUMxMTIzNTZG RjYyMEYyNjIwRDdENjE1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOs55RLNe0lzD6g1CGIxUBDI33kocXg0iJnHEVpRsa2ptEyGJzn828E//2uhR+Lo nR39wW7SUEyw6fr289fSjyv2U4u7MYstHfWGc3t66hqU18kQvZ6ujf5WFgEiWl1y gbICwYuIqLL+1tZRlPVYWHYGQOEw8wJfM2FA4m09i78sExhRtCa70ym424VulC5f UBZFRfRYIuXvmb/xgfhrjzU3TDC3mgPWY1dkk7HQehLucuk2PF9N9kjDTJCxbbFC 0+fAytGCej5F35MiJAZtun03BE+piK/ma6sjyOLFF88k+uIuu70w194ED0SgiEtc lo2tLTppTTxDCQLuBBQswHcCAwEAAaOCAz0wggM5MB0GA1UdDgQWBBRXZ5AkTMKS dcESNW/2IPJiDX1hXjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFDMzAvNkJDNENERkU4QzYyMTFFRjk5NDY0MDg1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZBQzMwLzZCQzRDREZFOEM2MjExRUY5OTQ2NDA4NUM0RjlBRTAyL1YyZVFKRXpD a25YQkVqVnY5aUR5WWcxOVlWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBpBggrBgEFBQcBBwEB/wRaMFgw VgQCAAEwUAMEAxdqMAMEBBdqQAMEAxdqeAMEAxdq+AMEAxdsYAMEAhdvDAMEAkB4 XAMEAUB4bgMEA45bYAMEAqz/0AMEBK3qADAMAwQF0TqgAwQD0TqwMA0GCSqGSIb3 DQEBCwUAA4IBAQAWi0ip9GLDCViM9FXxlqoktKb5xBPvssL9xeEucoCugGRhfaON Tg3MfgZ/VQmWWvAu8n6Tgzc8xTyQbnG34/R+T/cfMBhZDocCbN3PMMc+H3AyDhjK hUF0i4XBCcZ5G7xYNYAIQR/Wjc7M5pnlYWzuVDl9iYmmA7daMeKoLKcNRyIfp/d0 G1ZdhE4H9JNo3tgX2fdy/3rhsIGyM5ktLK7QXA3HMlaVvpBI48oQIezc4GR2Mazg rbJb4SZBDXdsLg7mWQpxGu3JF7CzOgwN5fwqPq1qOoUZy1UornhZGRr3K3QUdV4P cv7m+t9nJGj9Ix8qeVNObCAsb6kg0Z15R2Wq -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:01 2026 by rpki-client