This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer File: _MSmV91TDZU6LW8_FZMv_gHykdY.cer (raw, json) Hash identifier: icJQK9v+UXYBlBB78jARvIUG5ydQuC44lQrc9G5e58s= Subject key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71ED Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft caRepository: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 10 Jan 2026 13:12:43 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.192.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29165 (0x71ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 10 13:12:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ae:52:f6:36:ee:16:08:b6:a0:04:b2:a4:7a: e0:e7:a0:0c:7c:9a:c7:06:a0:ab:5c:48:d9:1e:3b: 59:b8:7e:75:b0:85:f8:f0:38:31:5e:07:c9:ac:ac: b7:4d:d3:c6:7f:de:40:bc:f7:1d:97:73:e7:e0:cd: ac:45:de:17:89:90:28:f9:cb:2d:09:f8:23:2d:03: ec:db:a7:aa:4d:e8:00:de:3e:71:6b:e0:04:0f:89: 51:b0:27:67:2d:2f:9b:a7:66:80:c6:1e:2f:f7:23: 7e:86:56:dc:42:8c:13:54:26:1a:ac:59:e8:68:6f: fd:3d:2c:c2:00:a2:b1:15:c6:14:36:90:ae:da:84: 49:38:f7:77:c6:c5:be:7b:11:7f:80:3d:ad:d5:f7: b1:2b:02:5b:96:6c:70:cc:84:3a:45:5e:87:d0:1c: cf:05:24:0a:a1:f3:67:2f:13:4a:01:3c:0c:dd:eb: 3b:f9:3f:3a:82:63:3a:c7:56:a0:d3:5a:56:db:c9: 77:55:33:1c:b2:f2:c7:15:f3:19:78:9b:cf:d9:ba: 02:54:7f:31:96:7c:33:c9:dc:4d:fc:73:0b:2d:4e: 43:0f:fa:db:07:41:29:1f:f2:3e:bf:87:29:2a:78: 43:cf:16:f1:63:77:5c:76:80:03:8c:31:14:76:13: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.192.0/23 Signature Algorithm: sha256WithRSAEncryption 31:f3:a8:a2:3b:5f:e3:41:b1:7e:f6:cf:fb:05:dc:2a:ea:72: 48:34:a1:4a:27:dc:4a:91:35:e0:c8:01:d0:4e:47:d1:92:a3: 3d:ff:ef:ad:ff:75:27:c6:77:1d:19:5e:47:2b:06:81:39:b0: 6d:b8:7e:ed:8e:ef:05:c1:1d:e1:93:d3:7e:f5:14:47:4e:63: 23:7d:a8:ad:03:82:71:59:cd:67:a2:1f:13:1f:76:fc:6b:3d: f7:bb:49:8f:5e:25:fb:fa:86:ca:73:2e:70:81:6f:fa:f8:73: 65:18:d2:86:ba:a6:72:7d:d8:6e:e5:79:27:bf:10:94:33:15: b2:95:fd:e0:08:f2:78:d6:48:7a:64:7c:ff:53:e0:76:fb:ba: 4a:cd:86:a8:69:06:c8:62:57:f5:39:51:d1:b8:5e:27:1a:24: 41:14:50:c4:9a:e7:31:7c:0b:bb:96:57:6a:16:41:ec:59:11: 00:2d:3d:6a:7a:95:34:3d:89:4a:f9:3d:b2:1f:20:91:74:4a: 0e:7f:50:aa:d5:41:cf:4a:24:97:54:4b:a6:23:ba:2b:55:a8: 95:f0:d9:8d:2b:14:92:08:2e:12:35:e0:7c:b5:d9:2b:ec:84: eb:0f:ca:c9:4b:12:a6:d9:1e:c5:9b:d0:44:9b:48:5b:f7:95: dc:fc:da:5f -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICce0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEwMTMxMjQzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2QkYyQjExMC8GA1UEBRMoRkNDNEE2NTdERDUzMEQ5NTNBMkQ2RjNG MTU5MzJGRkUwMUYyOTFENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APeuUvY27hYItqAEsqR64OegDHyaxwagq1xI2R47Wbh+dbCF+PA4MV4Hyayst03T xn/eQLz3HZdz5+DNrEXeF4mQKPnLLQn4Iy0D7Nunqk3oAN4+cWvgBA+JUbAnZy0v m6dmgMYeL/cjfoZW3EKME1QmGqxZ6Ghv/T0swgCisRXGFDaQrtqESTj3d8bFvnsR f4A9rdX3sSsCW5ZscMyEOkVeh9AczwUkCqHzZy8TSgE8DN3rO/k/OoJjOsdWoNNa VtvJd1UzHLLyxxXzGXibz9m6AlR/MZZ8M8ncTfxzCy1OQw/62wdBKR/yPr+HKSp4 Q88W8WN3XHaAA4wxFHYT7GsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT8xKZX3VMN lTotbz8Vky/+AfKR1jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJGMkIvNDU5RTY2NkVCNzhBMTFFRkI4NzQyNzZFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZCRjJCLzQ1OUU2NjZFQjc4QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFU RFpVNkxXOF9GWk12X2dIeWtkWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6wDANBgkqhkiG9w0BAQsFAAOCAQEAMfOoojtf40GxfvbP+wXc KupySDShSifcSpE14MgB0E5H0ZKjPf/vrf91J8Z3HRleRysGgTmwbbh+7Y7vBcEd 4ZPTfvUUR05jI32orQOCcVnNZ6IfEx92/Gs997tJj14l+/qGynMucIFv+vhzZRjS hrqmcn3YbuV5J78QlDMVspX94AjyeNZIemR8/1Pgdvu6Ss2GqGkGyGJX9TlR0bhe JxokQRRQxJrnMXwLu5ZXahZB7FkRAC09anqVND2JSvk9sh8gkXRKDn9QqtVBz0ok l1RLpiO6K1WolfDZjSsUkgguEjXgfLXZK+yE6w/KyUsSptkexZvQRJtIW/eV3Pza Xw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:20 2026 by rpki-client