This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer File: bCx8FCiea7W3J1sapr_foCJ7kIY.cer (raw, json) Hash identifier: 6gjDQPvgrgpbNVx1qB4S5+R+WpyRdZaAh/+vlwsKiNI= Subject key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 714B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft caRepository: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:59:11 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 160.187.238.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29003 (0x714b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 1 04:59:11 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:e5:7b:ab:2c:2a:49:fa:ca:33:68:ca:27: 2f:8a:2c:f5:4d:f8:26:20:57:53:4a:5e:ae:80:b6: bd:b9:9e:6c:7a:a6:b0:d4:e0:6e:33:57:56:6f:36: 92:c9:f1:0e:e2:87:ec:2b:4c:f9:1a:0b:08:d6:2e: 51:0e:bf:e2:53:0c:f6:c1:0c:ed:f2:79:ff:88:54: 7d:85:08:52:8f:de:4e:87:87:c6:f7:46:b4:c7:1e: 4f:8c:16:58:84:ab:d6:8c:77:0c:30:59:2b:c6:a4: b4:9c:87:c3:18:63:76:fb:d6:4b:7a:85:4e:f2:2f: 1f:59:ec:a7:46:13:6e:7d:9b:a5:aa:58:c5:0d:9d: c8:86:33:35:3a:e6:20:2b:b9:32:7a:41:77:1d:bd: ea:18:5d:a5:9e:2a:27:71:ee:02:cd:71:ce:87:4a: 0d:e0:f9:cd:70:c5:76:ac:b8:c8:9e:80:e0:c8:48: 05:7b:1a:e6:e6:bc:ec:1d:a7:18:57:c6:21:03:56: 5f:85:47:73:f1:30:f5:67:2d:58:b0:27:cb:77:07: 05:b9:f8:26:b0:06:09:a0:d8:c5:d1:c3:c2:da:d6: 72:9a:f5:79:01:74:3e:d0:73:75:a3:3d:31:1b:82: 85:38:36:d9:9f:e8:42:41:98:82:a3:cb:2a:f6:8c: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.238.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:79:ec:4d:fd:ed:42:d4:70:85:54:c9:7a:e1:71:37:16:54: 8c:93:e3:6c:27:5a:de:a3:50:16:fc:e6:8c:73:f1:a7:3e:34: 22:0c:7e:24:cf:32:53:7c:61:e0:05:f4:21:94:5d:ac:c8:19: 11:3c:bb:c8:66:37:3a:b5:53:d1:01:30:53:a4:6e:10:b0:bb: fc:10:68:cd:a3:b3:21:fa:5f:54:41:df:b5:3a:74:8f:eb:96: ce:b7:65:37:75:23:20:a8:03:be:bc:29:1f:68:42:89:bc:25: 27:1a:f3:8a:b3:56:db:a3:91:55:c3:fe:01:e0:1a:4b:5d:1d: db:01:75:c4:bf:0d:33:16:20:d7:ff:96:20:4e:cb:0b:1f:89: f3:3e:47:09:35:f9:f4:02:34:e6:7a:1e:2b:03:c6:42:65:9b: 18:ed:4b:cf:3f:85:d7:d9:fe:31:31:3b:da:91:a0:9b:03:1a: 76:e0:c6:39:04:f5:39:cd:68:17:7c:d3:e9:2b:1c:0a:9f:8e: 4a:06:b5:b7:3c:32:13:96:13:df:6d:af:df:65:10:2b:2f:0e: c7:94:c6:7b:99:bb:0d:c7:ae:42:3b:32:05:fb:50:86:b0:67: bb:6f:1f:65:51:b0:c0:d0:b0:5b:8c:b5:93:33:e0:9a:9f:b2: 6f:b6:87:f5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTAxMDQ1OTExWhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEzMTIwQTExMC8GA1UEBRMoNkMyQzdDMTQyODlFNkJCNUI3Mjc1QjFB QTZCRkRGQTAyMjdCOTA4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALJJ5XurLCpJ+sozaMonL4os9U34JiBXU0peroC2vbmebHqmsNTgbjNXVm82ksnx DuKH7CtM+RoLCNYuUQ6/4lMM9sEM7fJ5/4hUfYUIUo/eToeHxvdGtMceT4wWWISr 1ox3DDBZK8aktJyHwxhjdvvWS3qFTvIvH1nsp0YTbn2bpapYxQ2dyIYzNTrmICu5 MnpBdx296hhdpZ4qJ3HuAs1xzodKDeD5zXDFdqy4yJ6A4MhIBXsa5ua87B2nGFfG IQNWX4VHc/Ew9WctWLAny3cHBbn4JrAGCaDYxdHDwtrWcpr1eQF0PtBzdaM9MRuC hTg22Z/oQkGYgqPLKvaMdEUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRsLHwUKJ5r tbcnWxqmv9+gInuQhjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzEyMEEvREFGODFDNDQ4NkY5MTFFRkIwOTY1MTBDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMxMjBBL0RBRjgxQzQ0ODZGOTExRUZCMDk2NTEwQ0M0RjlBRTAyL2JDeDhGQ2ll YTdXM0oxc2Fwcl9mb0NKN2tJWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC77jANBgkqhkiG9w0BAQsFAAOCAQEAG3nsTf3tQtRwhVTJeuFx NxZUjJPjbCda3qNQFvzmjHPxpz40Igx+JM8yU3xh4AX0IZRdrMgZETy7yGY3OrVT 0QEwU6RuELC7/BBozaOzIfpfVEHftTp0j+uWzrdlN3UjIKgDvrwpH2hCibwlJxrz irNW26ORVcP+AeAaS10d2wF1xL8NMxYg1/+WIE7LCx+J8z5HCTX59AI05noeKwPG QmWbGO1Lzz+F19n+MTE72pGgmwMaduDGOQT1Oc1oF3zT6SscCp+OSga1tzwyE5YT 322v32UQKy8Ox5TGe5m7DceuQjsyBftQhrBnu28fZVGwwNCwW4y1kzPgmp+yb7aH 9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:50 2026 by rpki-client