This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer File: b9CIejkD49bhe7nP2O8mknC6ywc.cer (raw, json) Hash identifier: S2RGsP5rBp29Cgq5Zh6dtiwcrDr6qETjYpinaNAxGFU= Subject key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7277 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 18 Jan 2026 14:11:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.0.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29303 (0x7277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 18 14:11:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:d8:1e:46:b0:d0:c5:93:e9:15:42:33:59: 64:e6:86:af:12:ad:9f:9d:cb:ea:f0:14:81:a7:84: 4d:bc:01:56:c3:ba:23:c7:91:f2:88:5b:ad:7f:71: 1e:38:ca:91:77:47:fa:4c:ed:b6:7d:6f:04:90:a2: 98:09:7b:26:53:1c:75:d1:8e:0c:b8:ff:39:43:99: 1f:fb:47:f3:56:a0:76:f0:67:94:4f:d0:85:fb:df: 62:dc:a5:ef:ac:34:b9:d5:3a:af:22:65:4d:9f:ea: cd:9d:a8:e5:9c:7e:59:87:6b:46:2f:57:a9:bb:c8: d7:9a:e3:49:6f:f6:ea:25:62:52:00:f0:d9:b3:c0: c7:38:7d:9c:ad:1f:fe:8d:02:6e:69:1a:4d:b5:05: 50:14:8f:29:ef:1f:3f:2a:1a:10:e3:02:97:e5:29: f7:54:08:b8:14:e0:9a:8e:89:e5:f0:b3:9b:bf:bb: f4:c2:f8:91:52:f4:c0:9d:a1:41:c4:8a:bd:c0:c9: b5:61:54:63:45:c4:66:97:3d:78:76:60:90:2d:9d: 03:a7:79:f5:b6:fa:bc:d0:11:4e:3b:db:da:11:93: cc:c0:10:7f:b1:8e:3e:d0:f7:ab:78:01:5c:a6:35: 93:d1:09:66:df:cb:b9:ee:f7:1d:17:8f:cd:59:d1: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.0.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:a8:74:93:fb:df:3e:d5:f4:6f:a1:b5:a4:1f:92:04:cd:13: 03:d5:80:d7:37:d8:26:41:cf:c6:e1:42:43:53:ad:f3:ea:a9: 9a:29:ea:10:70:27:ad:e9:03:5e:db:0a:51:27:4d:42:72:19: a8:54:35:f0:5f:4a:b1:c9:57:37:0e:7e:40:f8:9c:96:83:80: ef:31:ab:93:f1:3c:44:ab:78:15:1a:49:ab:df:1b:0a:d3:b7: df:d4:eb:69:55:12:9a:d8:04:26:ce:22:03:7d:4b:25:de:a7: b1:b5:b6:ba:d6:01:64:a4:74:5e:83:99:11:52:91:5a:87:57: b1:db:30:be:db:28:ec:4b:31:39:ba:85:d6:04:86:d5:56:75: b9:11:b4:3f:45:97:9e:cc:18:90:c8:08:a0:f9:5d:ec:b8:d1: 4f:a6:a4:64:81:68:f8:ce:54:47:a3:9c:bf:d7:de:c5:f2:25: b6:26:8d:a8:b3:dc:65:0f:e7:e6:59:b1:5b:17:62:a1:5b:c7: b9:69:bf:49:63:63:e6:0b:4f:e6:40:f8:ee:66:ec:4c:4a:1e: 5c:f9:66:61:ec:27:f6:df:af:43:9f:20:7d:61:ec:38:67:aa: e2:04:81:21:94:f7:bd:8d:37:88:34:8e:59:a9:e0:dd:80:b6: 82:c7:6b:22 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTE4MTQxMTMzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFOEJFMzExMC8GA1UEBRMoNkZEMDg4N0EzOTAzRTNENkUxN0JCOUNG RDhFRjI2OTI3MEJBQ0IwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANLY2B5GsNDFk+kVQjNZZOaGrxKtn53L6vAUgaeETbwBVsO6I8eR8ohbrX9xHjjK kXdH+kzttn1vBJCimAl7JlMcddGODLj/OUOZH/tH81agdvBnlE/QhfvfYtyl76w0 udU6ryJlTZ/qzZ2o5Zx+WYdrRi9XqbvI15rjSW/26iViUgDw2bPAxzh9nK0f/o0C bmkaTbUFUBSPKe8fPyoaEOMCl+Up91QIuBTgmo6J5fCzm7+79ML4kVL0wJ2hQcSK vcDJtWFUY0XEZpc9eHZgkC2dA6d59bb6vNARTjvb2hGTzMAQf7GOPtD3q3gBXKY1 k9EJZt/Lue73HRePzVnRHvMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRv0Ih6OQPj 1uF7uc/Y7yaScLrLBzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThCRTMvRTZFNkJFNDRCRjlDMTFFRjlEQTg4MjgyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU4QkUzL0U2RTZCRTQ0QkY5QzExRUY5REE4ODI4MkM0RjlBRTAyL2I5Q0llamtE NDliaGU3blAyTzhta25DNnl3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaH4ADANBgkqhkiG9w0BAQsFAAOCAQEAmqh0k/vfPtX0b6G1pB+S BM0TA9WA1zfYJkHPxuFCQ1Ot8+qpminqEHAnrekDXtsKUSdNQnIZqFQ18F9KsclX Nw5+QPicloOA7zGrk/E8RKt4FRpJq98bCtO339TraVUSmtgEJs4iA31LJd6nsbW2 utYBZKR0XoOZEVKRWodXsdswvtso7EsxObqF1gSG1VZ1uRG0P0WXnswYkMgIoPld 7LjRT6akZIFo+M5UR6Ocv9fexfIltiaNqLPcZQ/n5lmxWxdioVvHuWm/SWNj5gtP 5kD47mbsTEoeXPlmYewn9t+vQ58gfWHsOGeq4gSBIZT3vY03iDSOWang3YC2gsdr Ig== -----END CERTIFICATE-----Generated at Sun Jan 25 08:53:58 2026 by rpki-client