This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer (raw, json) Hash identifier: Jo0S82aK3103vXmf/uVU803iH1MDoZLBxD1Z5+ayFDw= Subject key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 716B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:12 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 23.226.0.0/20 IP: 162.247.0.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29035 (0x716b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 2 14:20:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:47:31:86:78:ee:e8:30:ba:36:11:e4:34: 68:d6:c9:49:74:1b:02:96:0a:2b:d3:23:ab:86:8e: 6a:64:f5:3b:de:2d:82:cc:34:aa:68:cb:79:09:14: 5d:a0:d9:96:64:0b:11:7d:4c:68:d2:9c:c2:1e:3a: aa:cc:9a:2c:82:9d:b8:16:6f:2a:8f:69:fc:c6:dd: f0:e4:7d:b1:ed:b8:e1:93:c9:f6:b3:04:59:e3:42: d4:b2:65:49:b2:b4:40:c8:e5:cd:e5:b3:0d:98:eb: eb:6f:70:42:24:88:7e:e7:f3:95:9b:9e:0f:0b:53: 0f:4b:08:fd:eb:1e:a2:6e:ba:c8:02:a0:4d:70:a4: f5:9d:c4:62:e9:06:3f:39:20:bd:ab:91:8b:90:cd: a5:5e:99:e9:58:fd:64:53:17:8a:be:17:4a:5d:f4: bd:a6:0a:ed:51:9e:2e:0c:13:27:73:e1:d9:89:fe: b7:d9:a2:1d:d6:9f:12:ec:43:de:a3:a9:0a:ae:66: 65:1a:a1:fc:47:b3:aa:66:80:44:d0:b3:e4:0a:fa: 1e:4e:7a:05:ba:21:46:d9:04:95:55:97:ea:8d:c6: 21:24:6a:7d:ae:b8:dd:e2:ee:bc:ae:cf:77:1d:61: 3a:a4:8a:b3:0e:f5:46:fe:cf:93:cc:6f:99:f9:78: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 23.226.0.0/20 162.247.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:8e:42:42:f2:6d:7f:e7:e3:aa:b7:a0:50:dd:f3:95:32:d0: c8:54:83:ef:fb:ad:4f:7e:3d:91:01:d4:05:71:cc:e0:29:11: 31:1b:51:10:e4:c2:4c:38:e2:3f:e3:ef:9b:83:d2:db:3e:8c: 67:e5:7e:f5:e8:bc:2c:9c:12:17:88:0d:4b:f7:1e:cc:b0:f0: f5:14:4b:13:71:03:88:c6:9f:d3:57:1a:c1:0b:41:b0:b7:95: d4:f2:c4:85:ce:48:24:7e:ea:88:31:5d:34:82:84:36:30:d1: 80:3a:4b:6c:de:54:d5:e8:e8:43:c5:3a:8d:23:ba:b8:23:b4: 97:e5:c4:47:47:46:ad:2a:4b:91:5f:84:a2:6e:b7:56:d5:38: 08:4d:fe:80:59:20:58:e8:62:5a:55:8d:e9:d6:03:64:25:d8: 63:33:b8:64:a6:a6:32:3b:58:ba:a2:e8:98:85:08:4c:db:52: 38:30:8e:9e:4b:c6:11:eb:5d:89:c1:b0:61:fb:21:b2:61:7f: 4e:f0:93:50:81:41:16:6e:af:43:45:d7:ca:e2:dc:d5:e3:38: 94:1b:f5:e1:d9:96:f0:af:41:28:1f:58:8d:2e:ab:65:d6:f1: 1b:4d:da:f0:37:b1:38:16:d6:0b:43:8a:47:9e:1d:07:a7:40: 34:6c:be:17 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICcWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTAyMTQyMDEyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDRUYzRTExMC8GA1UEBRMoOTMyRUMyRTZFNTJCNUFGNkM3QjAzQzQx NTAyMEVERTI3MkFBQTE0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKqhRzGGeO7oMLo2EeQ0aNbJSXQbApYKK9Mjq4aOamT1O94tgsw0qmjLeQkUXaDZ lmQLEX1MaNKcwh46qsyaLIKduBZvKo9p/Mbd8OR9se244ZPJ9rMEWeNC1LJlSbK0 QMjlzeWzDZjr629wQiSIfufzlZueDwtTD0sI/eseom66yAKgTXCk9Z3EYukGPzkg vauRi5DNpV6Z6Vj9ZFMXir4XSl30vaYK7VGeLgwTJ3Ph2Yn+t9miHdafEuxD3qOp Cq5mZRqh/EezqmaARNCz5Ar6Hk56BbohRtkElVWX6o3GISRqfa643eLuvK7Pdx1h OqSKsw71Rv7Pk8xvmfl47oECAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSTLsLm5Sta 9sewPEFQIO3icqqhRTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VGM0UvQ0I3NENGNkU5ODdCMTFFOTgzRUNDRjEzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNFRjNFL0NCNzRDRjZFOTg3QjExRTk4M0VDQ0YxM0M0RjlBRTAyL2t5N0M1dVVy V3ZiSHNEeEJVQ0R0NG5LcW9VVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEBBfiAAMEAqL3ADANBgkqhkiG9w0BAQsFAAOCAQEALo5CQvJtf+fj qregUN3zlTLQyFSD7/utT349kQHUBXHM4CkRMRtREOTCTDjiP+Pvm4PS2z6MZ+V+ 9ei8LJwSF4gNS/cezLDw9RRLE3EDiMaf01cawQtBsLeV1PLEhc5IJH7qiDFdNIKE NjDRgDpLbN5U1ejoQ8U6jSO6uCO0l+XER0dGrSpLkV+Eom63VtU4CE3+gFkgWOhi WlWN6dYDZCXYYzO4ZKamMjtYuqLomIUITNtSODCOnkvGEetdicGwYfshsmF/TvCT UIFBFm6vQ0XXyuLc1eM4lBv14dmW8K9BKB9YjS6rZdbxG03a8DexOBbWC0OKR54d B6dANGy+Fw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:26:44 2026 by rpki-client