This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer File: g5Veubsl3DOnjslssIEXQZxkulw.cer (raw, json) Hash identifier: EcfWO8AHyFeOkQkf2WDE2styBpf1QwUANcAOi3df4XY= Subject key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 722A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 04:58:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.70.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29226 (0x722a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 13 04:58:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:f7:b8:5a:a6:ca:40:f3:f7:99:a3:27:d0: f3:21:35:2e:7a:84:f1:46:25:46:96:88:18:89:bb: 54:88:67:e9:42:d3:ed:d3:77:7b:7d:36:d8:48:c5: 2b:29:b8:58:99:43:77:a6:3a:68:7b:41:03:d3:7f: dd:39:12:29:a4:37:2d:98:f1:b3:c4:46:fd:8c:c7: 8e:7b:e2:eb:71:ee:fb:fd:e8:03:65:32:0f:7e:ea: 0b:d9:75:7f:d7:4c:8f:fb:f0:19:75:fc:c2:37:41: d3:80:b0:37:ca:40:dc:a3:f6:59:01:6e:29:da:ca: 72:10:2a:f7:f8:c6:97:73:d5:2f:b4:c0:13:63:a3: 2e:a8:5b:73:26:24:a2:e3:44:1e:ed:55:98:89:57: 6b:7b:64:f6:fb:77:b1:47:db:d9:f1:8a:87:af:31: c7:e5:6b:a3:5d:25:11:bd:a6:97:74:fe:2d:49:46: 98:26:26:72:5e:06:03:fc:8a:c1:50:9f:8c:41:cc: 35:29:54:76:d9:64:97:7b:4d:a7:35:d0:c1:0b:d3: 5a:0d:cb:f9:9b:ed:dd:00:51:45:e7:0f:d6:57:28: d5:ba:9d:08:b1:6b:61:19:cd:f4:d0:ef:17:7a:e2: c7:dc:77:33:9a:1e:5e:1b:c0:94:5a:35:32:91:5e: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.70.0/23 Signature Algorithm: sha256WithRSAEncryption 67:4c:22:a9:6e:5f:85:ce:89:c3:0e:fc:d7:e0:79:1f:49:25: d1:80:09:d6:5b:1c:86:6e:df:f3:e4:20:6a:b0:22:af:c7:df: fc:94:63:66:fd:d6:f4:b5:98:92:aa:33:f6:8c:62:89:c4:6d: 78:9c:a7:0e:62:e6:3f:5b:34:0c:dd:32:7b:d0:a3:52:46:a8: a8:dc:0f:a2:89:5f:8a:7c:e9:58:4c:8a:91:98:e4:1c:4f:d5: 7f:89:ef:b5:c7:1a:2e:e8:78:16:7a:9f:fb:8f:1c:de:7e:fb: 0a:40:48:57:09:f4:f3:8d:c3:ab:bb:0e:f6:0e:14:c7:12:7b: 1e:7e:8e:b2:c5:e7:ab:79:fa:1f:9a:f0:4c:47:e3:68:04:55: 9a:02:55:33:b6:64:36:b5:d7:6f:1d:95:99:73:52:e1:f9:79: 81:84:85:86:90:dc:18:f8:c4:6e:9f:8a:5f:83:5b:2c:10:f9: af:fd:1a:bd:30:e0:29:46:8e:9b:08:52:36:14:5b:9b:fe:db: fb:78:ca:39:59:8b:f3:9c:98:96:1f:68:df:98:3b:11:2e:6f: 9c:1d:b4:c3:11:db:87:b9:27:d1:bd:39:74:70:47:dd:f3:51: 53:50:83:74:d5:b3:5b:d7:53:8e:bb:ef:c4:43:4b:ee:3c:98: e6:4b:b6:bb -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICciowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEzMDQ1ODI3WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1NTgxMDExMC8GA1UEBRMoODM5NTVFQjlCQjI1REMzM0E3OEVDOTZD QjA4MTE3NDE5QzY0QkE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMdy97hapspA8/eZoyfQ8yE1LnqE8UYlRpaIGIm7VIhn6ULT7dN3e3022EjFKym4 WJlDd6Y6aHtBA9N/3TkSKaQ3LZjxs8RG/YzHjnvi63Hu+/3oA2UyD37qC9l1f9dM j/vwGXX8wjdB04CwN8pA3KP2WQFuKdrKchAq9/jGl3PVL7TAE2OjLqhbcyYkouNE Hu1VmIlXa3tk9vt3sUfb2fGKh68xx+Vro10lEb2ml3T+LUlGmCYmcl4GA/yKwVCf jEHMNSlUdtlkl3tNpzXQwQvTWg3L+Zvt3QBRRecP1lco1bqdCLFrYRnN9NDvF3ri x9x3M5oeXhvAlFo1MpFehSMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSDlV65uyXc M6eOyWywgRdBnGS6XDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU4MTAvNzM5Nzg4RTJDNzA4MTFFRkE4OUIwQzVGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU1ODEwLzczOTc4OEUyQzcwODExRUZBODlCMEM1RkM0RjlBRTAyL2c1VmV1YnNs M0RPbmpzbHNzSUVYUVp4a3Vsdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaH4RjANBgkqhkiG9w0BAQsFAAOCAQEAZ0wiqW5fhc6Jww781+B5 H0kl0YAJ1lschm7f8+QgarAir8ff/JRjZv3W9LWYkqoz9oxiicRteJynDmLmP1s0 DN0ye9CjUkaoqNwPoolfinzpWEyKkZjkHE/Vf4nvtccaLuh4Fnqf+48c3n77CkBI Vwn0843Dq7sO9g4UxxJ7Hn6OssXnq3n6H5rwTEfjaARVmgJVM7ZkNrXXbx2VmXNS 4fl5gYSFhpDcGPjEbp+KX4NbLBD5r/0avTDgKUaOmwhSNhRbm/7b+3jKOVmL85yY lh9o35g7ES5vnB20wxHbh7kn0b05dHBH3fNRU1CDdNWzW9dTjrvvxENL7jyY5ku2 uw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:45 2026 by rpki-client