This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer File: VuOUrxtay4_0gsjGAmn-oOTEJ74.cer (raw, json) Hash identifier: WBmHBZN5qzedTQFzjgu+GSI8tPe+N/rEyVi0WxCEwXM= Subject key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71CD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 13:56:36 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.25.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29133 (0x71cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 8 13:56:36 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:3f:0c:39:35:6a:4f:f2:20:20:49:49:6f: 0d:fd:e4:d2:3d:a6:56:0e:76:93:5b:be:80:a9:0b: 63:86:3c:1a:1b:83:bb:69:10:76:1c:44:26:b4:d2: 4c:f9:17:af:9a:2c:1d:74:0c:fd:bd:87:30:52:9b: 3f:cf:9d:e6:75:18:12:7b:53:97:4c:3d:85:1a:b9: 7f:90:22:d7:d2:da:fe:4e:ec:d3:4f:57:8a:c7:5c: 34:8c:e2:a1:fd:35:11:7b:28:d0:d5:8d:6d:e1:b6: 15:f5:90:e1:af:26:9e:0e:60:ff:70:8a:a5:c0:40: 41:60:7f:c5:1b:61:31:d4:d7:e3:82:69:f7:f3:34: cc:43:9a:8a:08:ba:55:0b:ee:99:10:9a:47:fc:61: c2:85:2e:f6:48:f1:62:05:76:8c:53:20:38:62:0a: 51:f9:4a:a2:66:26:dc:db:ef:bd:fc:65:ea:e9:c5: 3a:a3:7c:4f:3f:7f:42:c5:64:29:c7:27:fa:40:17: eb:c7:ec:f8:29:90:db:63:85:d0:f3:40:6e:7b:8b: 59:dd:af:58:25:7e:7a:34:aa:95:37:5c:fe:a3:66: a6:5c:7e:a1:38:b3:21:69:f4:89:a2:33:42:70:a4: de:53:64:e2:3a:2f:79:9e:9e:f2:25:8e:21:3d:a7: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.25.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:06:cb:66:2f:0a:7e:05:03:e2:04:0e:8a:84:26:65:d6:9b: 0f:8a:33:8a:bf:49:88:32:55:66:06:88:d9:28:07:56:8c:cd: 1e:cf:84:3e:c6:50:f9:35:af:a7:b6:9d:7b:6d:d0:f1:7d:5a: d5:92:ea:68:8e:d1:ac:b3:92:d3:19:f2:e4:6c:c1:7c:9e:09: 2c:a4:c4:07:cb:fa:56:51:d5:6c:b0:2b:f3:78:e1:f4:ac:9b: 0d:7d:43:e3:13:a5:b7:d4:ba:95:5c:a3:31:17:5a:cd:52:4f: f0:5e:2f:5c:e6:0a:9c:1d:3e:e2:3b:da:e8:ea:f5:8d:77:20: 0d:fe:25:b4:ee:aa:77:e0:24:b7:7e:34:bd:49:bd:0c:70:de: 3f:59:9f:3b:17:9a:28:58:56:4d:04:37:2d:01:a6:75:76:a1: 5a:d2:0a:4e:41:f6:69:0d:35:08:57:1f:8f:07:65:96:7e:4a: 00:d2:6d:06:d7:10:e8:9e:7b:f0:2f:a2:dc:53:d7:f2:3f:b5: 91:fa:1d:1a:d1:69:b2:03:df:a0:b7:91:d1:4c:b9:d9:bf:07: 38:08:17:81:f3:ff:97:c3:e9:99:82:e1:7d:da:c6:95:91:85: d6:8d:fc:a0:ed:b2:c4:53:48:53:42:c7:f6:a7:c3:f9:f5:d3: 30:23:ac:b4 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA4MTM1NjM2WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFBOTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2 MDI2OUZFQTBFNEM0MjdCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMNtPww5NWpP8iAgSUlvDf3k0j2mVg52k1u+gKkLY4Y8GhuDu2kQdhxEJrTSTPkX r5osHXQM/b2HMFKbP8+d5nUYEntTl0w9hRq5f5Ai19La/k7s009XisdcNIziof01 EXso0NWNbeG2FfWQ4a8mng5g/3CKpcBAQWB/xRthMdTX44Jp9/M0zEOaigi6VQvu mRCaR/xhwoUu9kjxYgV2jFMgOGIKUflKomYm3Nvvvfxl6unFOqN8Tz9/QsVkKccn +kAX68fs+CmQ22OF0PNAbnuLWd2vWCV+ejSqlTdc/qNmplx+oTizIWn0iaIzQnCk 3lNk4joveZ6e8iWOIT2n5oUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRW45SvG1rL j/SCyMYCaf6g5MQnvjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk5NUUvMkU3QUYyOThGQTYyMTFFRjk1NTU1QzBFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE5OTVFLzJFN0FGMjk4RkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRh eTRfMGdzakdBbW4tb09URUo3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4GTANBgkqhkiG9w0BAQsFAAOCAQEAnAbLZi8KfgUD4gQOioQm ZdabD4ozir9JiDJVZgaI2SgHVozNHs+EPsZQ+TWvp7ade23Q8X1a1ZLqaI7RrLOS 0xny5GzBfJ4JLKTEB8v6VlHVbLAr83jh9KybDX1D4xOlt9S6lVyjMRdazVJP8F4v XOYKnB0+4jva6Or1jXcgDf4ltO6qd+Akt340vUm9DHDeP1mfOxeaKFhWTQQ3LQGm dXahWtIKTkH2aQ01CFcfjwdlln5KANJtBtcQ6J578C+i3FPX8j+1kfodGtFpsgPf oLeR0Uy52b8HOAgXgfP/l8PpmYLhfdrGlZGF1o38oO2yxFNIU0LH9qfD+fXTMCOs tA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:36:09 2026 by rpki-client