This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer File: gOknW25uvGrXWF12r7akALUULD8.cer (raw, json) Hash identifier: Z9z1tryQZnND+VxxuQbrFx7xmOkkoMwDg2TWKLSDx3o= Subject key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 721F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 14:20:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.136.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29215 (0x721f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 14:20:18 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:5e:0a:55:9c:f9:f6:10:12:66:aa:b0:36: 5e:72:7c:07:b6:5b:c5:45:c4:f0:18:7f:d6:9f:0f: 96:e4:1e:e7:0a:94:d7:d3:d0:e6:66:44:a7:c1:a4: d5:b0:a9:b6:be:8f:9f:aa:f4:86:5e:e9:74:4a:5d: 8a:58:06:b3:83:96:c5:56:28:c8:69:3e:d8:a2:32: 6b:e2:32:84:8e:ee:55:ea:c7:60:2b:ce:bb:e3:04: d6:e4:9e:8f:7b:c2:c0:51:80:d9:0f:b9:65:a9:02: fa:de:64:d2:7c:24:07:60:05:5c:7d:54:9b:49:92: e4:ae:f8:42:b0:3a:8f:ae:01:d8:2d:b8:12:42:d7: 54:7e:e9:14:fd:4c:0a:fe:06:75:62:fe:a8:8a:ea: 45:80:b2:2d:70:55:06:a0:e0:f7:cb:e4:6c:3a:c4: a9:23:f9:a0:46:46:5f:8b:5f:e5:5f:2f:56:1e:39: 06:ab:a8:96:24:eb:6e:5f:82:1f:84:19:be:de:55: c8:d8:ab:ba:89:4d:ae:ad:9a:c2:4a:a9:de:1f:3d: 3c:ba:30:9d:4d:87:48:af:c9:ef:fc:08:a6:b6:38: 48:14:ad:be:c6:65:be:b4:ff:76:08:39:88:2d:1c: 31:76:81:af:02:9a:26:7b:b8:5b:96:af:5e:a9:a9: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.136.0/23 Signature Algorithm: sha256WithRSAEncryption 67:00:e7:02:7f:b3:78:3c:ce:79:a1:83:22:a5:7d:3e:ba:f9: ec:4f:5e:f7:40:fa:af:0e:c0:85:57:5f:b0:33:8c:17:c2:ab: 53:af:fe:80:1a:8a:b5:76:38:27:bd:4f:be:b2:67:4f:53:de: 69:65:5f:85:44:63:27:3c:0d:b0:63:a3:db:44:17:fa:c9:99: 1d:f8:6c:d5:6d:a1:eb:19:9c:b0:4c:d4:30:ee:3b:15:8d:19: c6:35:7e:4b:b3:03:6f:34:a1:5e:4f:ff:7c:a8:7b:6d:a2:61: 4d:59:82:6c:13:94:06:9f:1f:70:d2:67:07:fd:70:3e:26:17: d0:1e:59:ba:fe:46:1c:4d:9c:87:57:9c:7f:8e:9f:2f:82:52: b2:6b:31:e0:96:ac:42:73:d2:04:b0:ac:86:1e:03:71:22:f7: 95:54:ce:34:fd:cf:af:ac:ee:2b:8e:55:1b:c1:27:87:21:20: be:67:53:cd:c1:22:d2:58:2a:ca:14:e3:89:7d:1e:ce:26:57: 63:94:75:21:68:73:bb:1a:cd:c7:2f:92:e7:f5:08:3c:02:d3: b6:a3:b5:dc:ea:fc:0f:92:e4:2f:28:b8:1a:42:f3:94:4a:72: 30:00:02:57:22:81:ee:95:0f:9e:aa:af:97:6c:83:7f:94:b3: 69:90:cd:fc -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICch8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTQyMDE4WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFEMzEzQjExMC8GA1UEBRMoODBFOTI3NUI2RTZFQkM2QUQ3NTg1RDc2 QUZCNkE0MDBCNTE0MkMzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMPsXgpVnPn2EBJmqrA2XnJ8B7ZbxUXE8Bh/1p8PluQe5wqU19PQ5mZEp8Gk1bCp tr6Pn6r0hl7pdEpdilgGs4OWxVYoyGk+2KIya+IyhI7uVerHYCvOu+ME1uSej3vC wFGA2Q+5ZakC+t5k0nwkB2AFXH1Um0mS5K74QrA6j64B2C24EkLXVH7pFP1MCv4G dWL+qIrqRYCyLXBVBqDg98vkbDrEqSP5oEZGX4tf5V8vVh45BquoliTrbl+CH4QZ vt5VyNiruolNrq2awkqp3h89PLownU2HSK/J7/wIprY4SBStvsZlvrT/dgg5iC0c MXaBrwKaJnu4W5avXqmpIzECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSA6Sdbbm68 atdYXXavtqQAtRQsPzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMxM0IvQ0NFOTlEN0U0N0RCMTFFRkFFQTRCMDJEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQzMTNCL0NDRTk5RDdFNDdEQjExRUZBRUE0QjAyREM0RjlBRTAyL2dPa25XMjV1 dkdyWFdGMTJyN2FrQUxVVUxEOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KiDANBgkqhkiG9w0BAQsFAAOCAQEAZwDnAn+zeDzOeaGDIqV9 Prr57E9e90D6rw7AhVdfsDOMF8KrU6/+gBqKtXY4J71PvrJnT1PeaWVfhURjJzwN sGOj20QX+smZHfhs1W2h6xmcsEzUMO47FY0ZxjV+S7MDbzShXk//fKh7baJhTVmC bBOUBp8fcNJnB/1wPiYX0B5Zuv5GHE2ch1ecf46fL4JSsmsx4JasQnPSBLCshh4D cSL3lVTONP3Pr6zuK45VG8EnhyEgvmdTzcEi0lgqyhTjiX0eziZXY5R1IWhzuxrN xy+S5/UIPALTtqO13Or8D5LkLyi4GkLzlEpyMAACVyKB7pUPnqqvl2yDf5SzaZDN /A== -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:01 2026 by rpki-client