This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.cer (raw, json) Hash identifier: PMHG8np1jZuB2/FFibhuMve+t9wTWc2vzql2ubGVY+8= Subject key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7268 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 13:51:39 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 167.219.48.0/20 IP: 167.219.128.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 10:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29288 (0x7268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 16 13:51:39 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:0b:ae:4c:ba:43:98:ee:5a:97:d5:51:29: 16:9a:e5:55:30:20:e3:9f:a1:be:42:82:7c:91:0e: 5b:fb:14:50:87:95:53:b4:e6:cc:2f:d9:aa:30:5c: 2d:aa:d2:11:bd:e2:52:86:6b:59:72:dd:0b:f0:5b: 43:48:26:86:3c:9c:20:e1:c4:28:19:76:2a:a5:b8: bd:d4:31:8c:e3:32:5a:b7:41:c7:5d:54:1f:52:df: d1:f6:f7:2a:4f:ec:d4:99:8d:68:3f:18:4e:37:48: 11:e9:e6:d5:29:e3:46:b9:10:ae:09:d6:52:4f:2b: d9:2d:14:16:ef:52:a1:59:1f:27:94:a2:68:ef:c5: f0:ec:19:3a:fc:ef:05:ec:9f:99:d8:6b:2c:df:02: 6a:31:b2:53:42:82:4c:79:ae:63:a2:0d:28:60:69: f1:49:88:8d:d8:47:cd:54:85:c3:05:41:3e:01:68: 49:78:8b:25:43:0c:9c:25:c3:8f:8d:a0:bc:17:3c: 14:02:3b:12:c0:2c:4b:09:b8:16:ba:3a:7f:5b:d4: 3e:10:f6:92:96:5e:1a:11:08:af:ab:df:39:3a:3d: 3e:e8:1e:86:3c:e0:f0:dc:c4:64:7f:bf:1b:c9:91: f7:a7:42:9d:93:53:3a:9b:8e:cd:6e:82:34:a6:2c: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.219.48.0/20 167.219.128.0/21 Signature Algorithm: sha256WithRSAEncryption 89:1e:28:15:a9:0f:80:4a:d6:fe:e4:44:a2:56:ba:eb:58:83: c6:c1:3d:47:d7:5a:33:22:45:8a:f1:c9:9d:ea:ff:82:be:d7: ce:8e:5a:01:50:d3:ca:d8:a7:c0:e9:79:84:a2:94:c4:b2:3d: e4:d7:8a:44:6c:1e:33:3a:4f:2f:e9:3e:52:2b:59:2d:2b:ea: b8:69:83:3c:c3:5e:be:57:56:fa:f4:eb:02:a7:19:2a:e7:9f: 04:77:28:12:96:3e:e4:85:e2:29:1e:c9:26:6d:98:d1:5f:06: 26:05:01:5e:c0:cf:9d:f7:a4:dc:5c:3d:97:0b:7c:ac:df:ec: f4:af:10:25:c5:b3:d0:db:72:dd:48:41:a9:58:aa:fe:cb:1f: 97:8d:1c:ec:db:ce:2a:5f:6c:8a:92:f9:4c:a5:c5:5b:94:59: 31:d2:4a:c2:18:c8:f5:99:fa:4d:34:39:65:c7:73:af:93:22: d6:d5:4f:73:dc:3a:f7:27:07:62:a6:1b:fd:02:3d:a1:50:70: 9b:71:10:b3:2f:97:5f:84:f7:65:b9:71:a3:17:d9:fc:20:b2: c4:c1:8d:84:df:6b:bd:48:dc:c6:70:23:81:f6:61:e4:27:87: 55:b0:a6:e2:e6:63:73:78:16:b8:f2:9a:f6:05:ce:51:66:f2: bc:eb:cc:fc -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICcmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTE2MTM1MTM5WhcNMjcxMjMwMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFBREQ2NDExMC8GA1UEBRMoRkNBOTM1NUMxQUJFNDA0RjNGM0NGNTE5 MkZEMzRCMTI1QTAwQkYxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN1OC65MukOY7lqX1VEpFprlVTAg45+hvkKCfJEOW/sUUIeVU7TmzC/ZqjBcLarS Eb3iUoZrWXLdC/BbQ0gmhjycIOHEKBl2KqW4vdQxjOMyWrdBx11UH1Lf0fb3Kk/s 1JmNaD8YTjdIEenm1SnjRrkQrgnWUk8r2S0UFu9SoVkfJ5SiaO/F8OwZOvzvBeyf mdhrLN8CajGyU0KCTHmuY6INKGBp8UmIjdhHzVSFwwVBPgFoSXiLJUMMnCXDj42g vBc8FAI7EsAsSwm4Fro6f1vUPhD2kpZeGhEIr6vfOTo9Pugehjzg8NzEZH+/G8mR 96dCnZNTOpuOzW6CNKYsHiUCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBT8qTVcGr5A Tz889Rkv00sSWgC/GzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURENjQvNEVCMkI0MjgxMzRCMTFFRjk0NDI0RDNEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFERDY0LzRFQjJCNDI4MTM0QjExRUY5NDQyNEQzREM0RjlBRTAyL19LazFYQnEt UUU4X1BQVVpMOU5MRWxvQXZ4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEBKfbMAMEA6fbgDANBgkqhkiG9w0BAQsFAAOCAQEAiR4oFakPgErW /uREola661iDxsE9R9daMyJFivHJner/gr7Xzo5aAVDTytinwOl5hKKUxLI95NeK RGweMzpPL+k+UitZLSvquGmDPMNevldW+vTrAqcZKuefBHcoEpY+5IXiKR7JJm2Y 0V8GJgUBXsDPnfek3Fw9lwt8rN/s9K8QJcWz0Nty3UhBqViq/ssfl40c7NvOKl9s ipL5TKXFW5RZMdJKwhjI9Zn6TTQ5Zcdzr5Mi1tVPc9w69ycHYqYb/QI9oVBwm3EQ sy+XX4T3ZblxoxfZ/CCyxMGNhN9rvUjcxnAjgfZh5CeHVbCm4uZjc3gWuPKa9gXO UWbyvOvM/A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:57 2026 by rpki-client