This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer File: VlIPoddulfCBm23dSWe0VQRphp0.cer (raw, json) Hash identifier: JABwLhWWvEPWo+yYTCWnLg4FQZlS5ThpVeU4pH/FfDg= Subject key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 728F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:51:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.232.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29327 (0x728f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 20 13:51:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:69:01:99:d2:3f:92:00:6b:4a:b2:3a:cf: 8f:86:28:13:76:aa:9b:e9:fe:a6:90:d2:1f:91:9e: ff:42:3e:23:ff:14:7a:db:ad:77:f4:7b:c4:49:18: da:d7:ab:86:0c:b6:d1:f9:ae:01:8f:8b:9b:29:09: ed:2e:49:25:94:7c:53:68:fc:8a:fd:1a:fb:7c:70: cb:d7:9c:46:81:0f:95:17:08:51:8f:b7:27:de:e1: b0:02:91:49:00:5f:0a:8d:00:82:bc:39:f7:ba:12: 27:2c:96:91:cf:49:10:1d:95:60:3e:10:3b:e2:b6: a8:2a:1b:0d:62:f9:c0:4d:c3:bf:3a:d2:49:c6:dd: c6:da:90:1f:a2:76:e8:6e:1e:b8:fa:e1:60:01:2e: e9:3a:c1:34:0a:1c:fe:02:17:be:67:c9:6b:24:bf: 05:57:1c:f1:b9:86:f1:47:fa:0b:54:ef:23:0f:b4: b3:29:cc:40:02:4e:00:dd:1b:24:81:f3:f2:aa:22: fb:a8:f9:1e:1a:26:f7:92:32:cc:30:98:43:ac:bf: e7:6a:a5:49:6b:5d:00:ae:0a:48:c8:7b:e1:37:4e: 04:d5:a1:ec:bd:17:b5:63:9f:fe:a8:ab:8c:22:1d: a2:5d:83:ff:4c:04:45:4e:25:62:d6:9e:4b:2e:08: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.232.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:5a:4f:1f:6e:ba:55:32:a7:47:31:5c:b1:7b:ed:9f:f6:7f: 26:ca:a8:1f:fb:ea:7f:95:f7:bf:f6:27:f4:49:c0:06:ec:21: ba:21:4d:ce:d0:d5:6e:6b:cd:56:05:21:f6:0c:00:0f:99:ec: 88:73:56:24:92:1b:f9:99:39:b0:57:fc:aa:2a:04:5c:e7:27: 3c:3a:16:9b:46:f2:4c:6d:13:89:58:24:5e:f3:3e:d7:67:2b: 3d:7e:07:c9:35:bf:6e:18:1c:22:6f:98:c0:82:5e:c5:f6:f8: 38:ef:be:db:ae:40:4f:29:57:fb:e8:b6:d1:a1:fc:e9:2b:ac: 9a:54:07:7f:d8:3c:af:a8:98:c6:dd:39:51:d5:d7:e1:71:bb: b5:fc:8c:a6:36:34:23:5c:53:23:dc:38:27:6b:2e:81:1b:9c: af:83:d7:68:d7:f6:fd:c7:b8:8b:71:4f:92:11:6a:74:66:ba: 41:6c:d0:8d:6b:28:2b:bc:1c:84:d0:41:e6:d7:26:85:17:bd: d5:a7:34:be:0b:dc:2e:b6:1b:d7:9c:f7:85:fc:9e:cc:98:87: e3:77:03:01:52:59:4b:26:e3:17:d6:2b:79:d0:8f:87:23:07: db:06:9f:47:4a:5a:a4:a8:9e:9e:31:3a:ab:c9:ea:61:05:a8: f7:a5:dc:f0 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICco8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTIwMTM1MTQ5WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFBOTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERE NDk2N0I0NTUwNDY5ODY5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOAKaQGZ0j+SAGtKsjrPj4YoE3aqm+n+ppDSH5Ge/0I+I/8Uetutd/R7xEkY2ter hgy20fmuAY+LmykJ7S5JJZR8U2j8iv0a+3xwy9ecRoEPlRcIUY+3J97hsAKRSQBf Co0Agrw597oSJyyWkc9JEB2VYD4QO+K2qCobDWL5wE3DvzrSScbdxtqQH6J26G4e uPrhYAEu6TrBNAoc/gIXvmfJayS/BVcc8bmG8Uf6C1TvIw+0synMQAJOAN0bJIHz 8qoi+6j5Hhom95IyzDCYQ6y/52qlSWtdAK4KSMh74TdOBNWh7L0XtWOf/qirjCId ol2D/0wERU4lYtaeSy4I7ckCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRWUg+h126V 8IGbbd1JZ7RVBGmGnTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTkxQ0IvNUI2RkEzNjBFQTVBMTFFRkI4NEFFNDY4QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE5MUNCLzVCNkZBMzYwRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1 bGZDQm0yM2RTV2UwVlFScGhwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD66DANBgkqhkiG9w0BAQsFAAOCAQEATVpPH266VTKnRzFcsXvt n/Z/JsqoH/vqf5X3v/Yn9EnABuwhuiFNztDVbmvNVgUh9gwAD5nsiHNWJJIb+Zk5 sFf8qioEXOcnPDoWm0byTG0TiVgkXvM+12crPX4HyTW/bhgcIm+YwIJexfb4OO++ 265ATylX++i20aH86SusmlQHf9g8r6iYxt05UdXX4XG7tfyMpjY0I1xTI9w4J2su gRucr4PXaNf2/ce4i3FPkhFqdGa6QWzQjWsoK7wchNBB5tcmhRe91ac0vgvcLrYb 15z3hfyezJiH43cDAVJZSybjF9YredCPhyMH2wafR0papKienjE6q8nqYQWo96Xc 8A== -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:34 2026 by rpki-client