This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer File: hXUH8dizkVyVENUEcA7OiQsGaF8.cer (raw, json) Hash identifier: /m9HE1zNhcXbmPzURhsp9YrqW+A8xfh/Ojni5MKUw3s= Subject key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71C5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft caRepository: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 13:19:27 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.178.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 10:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29125 (0x71c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 8 13:19:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:67:0f:ce:13:88:16:62:f7:d8:ff:22:10: 05:da:f3:3a:c9:de:e4:47:e6:dd:3b:cc:ef:16:55: d7:c5:53:23:43:26:f4:88:c9:83:81:38:64:aa:5d: 6f:5f:de:1b:09:cc:33:76:82:fb:b8:31:ab:5e:c4: fd:04:6d:9d:53:29:89:cf:6e:e7:11:b0:63:e9:db: bf:43:2f:dc:a6:f6:19:b2:d0:81:fa:2a:42:dc:59: ba:5a:4e:c9:95:91:c6:4f:23:e9:0b:88:71:8c:b6: dc:bd:45:3d:e8:14:b0:37:ac:06:5e:31:91:dc:34: fe:45:ac:4c:23:68:3c:d2:6f:57:1a:ea:3c:76:c6: 32:f2:8f:7a:b7:52:b7:e7:55:dc:59:5c:6e:27:d3: 8e:a2:12:25:67:1f:37:4c:a2:de:01:9d:25:6f:e1: 8d:b3:88:be:c3:32:2a:76:82:d6:66:65:72:29:f9: 7a:70:14:90:b8:4d:9a:0b:b5:e8:16:ce:eb:c0:27: ee:94:94:f6:0a:35:92:ee:12:37:a4:6f:b8:3d:51: 3b:12:95:0d:4b:fa:fb:6c:ed:a5:2c:e8:53:60:49: 32:f6:51:56:7f:32:40:61:f2:c7:64:5b:14:12:f0: da:b9:8a:ea:3a:88:81:99:e8:fa:5b:17:ac:8b:9e: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.178.0/23 Signature Algorithm: sha256WithRSAEncryption ad:55:4a:d9:f7:60:04:a0:cb:93:9c:fa:67:e4:25:a3:22:34: 22:60:b1:4e:4f:b7:f5:72:6e:5b:98:47:d9:c0:31:4d:1e:16: 66:da:2c:aa:65:fa:c2:93:23:9b:13:55:61:f4:b6:19:f3:40: fe:03:f5:3d:1b:3f:71:25:19:c5:04:77:cf:ea:3b:3b:de:43: 5e:d0:aa:b4:5d:a6:4e:49:40:84:b3:5f:26:ec:26:dd:66:e1: f6:f5:06:fb:81:6b:6a:b2:9a:40:3d:b2:d9:45:b7:ec:eb:15: 65:da:67:23:5d:59:90:e6:bf:13:a5:50:ed:2d:95:83:e0:2f: 89:16:a8:f8:02:aa:c8:23:f4:33:a9:e2:3f:65:f1:76:46:c2: 6f:f4:45:c3:5f:e6:67:d3:60:a7:23:c6:ad:56:24:69:de:c9: e9:40:2d:3c:34:40:c4:bd:16:44:68:26:01:8c:a5:80:0f:2d: 09:63:78:d4:1b:03:ba:37:00:2f:ec:a4:48:f7:fb:1d:85:b8: 62:37:61:04:f0:3e:2c:1a:7f:a8:4f:e3:ff:00:5a:7a:1f:61: d6:1d:56:93:4a:a2:29:3a:4e:3e:41:bd:ae:b2:88:c7:c5:66: 9a:7f:8d:f7:c1:30:5e:3d:f6:c2:55:da:9f:0d:3f:24:a4:5a: 49:a3:fd:18 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICccUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA4MTMxOTI3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2QjdGQzExMC8GA1UEBRMoODU3NTA3RjFEOEIzOTE1Qzk1MTBENTA0 NzAwRUNFODkwQjA2Njg1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL1jZw/OE4gWYvfY/yIQBdrzOsne5Efm3TvM7xZV18VTI0Mm9IjJg4E4ZKpdb1/e GwnMM3aC+7gxq17E/QRtnVMpic9u5xGwY+nbv0Mv3Kb2GbLQgfoqQtxZulpOyZWR xk8j6QuIcYy23L1FPegUsDesBl4xkdw0/kWsTCNoPNJvVxrqPHbGMvKPerdSt+dV 3FlcbifTjqISJWcfN0yi3gGdJW/hjbOIvsMyKnaC1mZlcin5enAUkLhNmgu16BbO 68An7pSU9go1ku4SN6RvuD1ROxKVDUv6+2ztpSzoU2BJMvZRVn8yQGHyx2RbFBLw 2rmK6jqIgZno+lsXrIuexH8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSFdQfx2LOR XJUQ1QRwDs6JCwZoXzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI3RkMvQzczQkExNjQwM0E3MTFGMEE3RkY5Qzg3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZCN0ZDL0M3M0JBMTY0MDNBNzExRjBBN0ZGOUM4N0M0RjlBRTAyL2hYVUg4ZGl6 a1Z5VkVOVUVjQTdPaVFzR2FGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/sjANBgkqhkiG9w0BAQsFAAOCAQEArVVK2fdgBKDLk5z6Z+Ql oyI0ImCxTk+39XJuW5hH2cAxTR4WZtosqmX6wpMjmxNVYfS2GfNA/gP1PRs/cSUZ xQR3z+o7O95DXtCqtF2mTklAhLNfJuwm3Wbh9vUG+4FrarKaQD2y2UW37OsVZdpn I11ZkOa/E6VQ7S2Vg+AviRao+AKqyCP0M6niP2XxdkbCb/RFw1/mZ9NgpyPGrVYk ad7J6UAtPDRAxL0WRGgmAYylgA8tCWN41BsDujcAL+ykSPf7HYW4YjdhBPA+LBp/ qE/j/wBaeh9h1h1Wk0qiKTpOPkG9rrKIx8Vmmn+N98EwXj32wlXanw0/JKRaSaP9 GA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:26 2026 by rpki-client