This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer File: vBeIK_xKhjChu_avBlGLkLpNFoo.cer (raw, json) Hash identifier: OuDOO2VOkuTGO9m0aQz/mbBP77xJ4934aKfF8XtGLZI= Subject key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7173 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft caRepository: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 03 Jan 2026 12:39:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.156.225.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 10:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29043 (0x7173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 3 12:39:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:0e:10:1c:d3:93:ed:29:4f:3f:c8:a5:95: c0:80:87:e8:3a:71:bd:b4:ca:ad:76:9d:07:2d:48: ba:70:d8:d4:80:b1:9e:98:90:32:e4:b2:c4:35:b5: 0e:9e:4f:50:23:f0:4c:ff:7e:38:ae:7e:a5:01:1d: c4:5d:86:c3:88:cf:ed:67:48:e6:68:6f:b2:7c:60: 63:8c:a7:81:61:4b:38:36:c2:82:f8:0a:6f:3b:dc: da:d5:20:af:91:5c:47:79:2e:12:b8:72:ac:11:e9: 0f:5d:34:a2:97:36:7b:0c:d7:f9:27:05:d3:e2:95: 92:ad:38:e8:75:c0:b9:53:d2:b0:82:fc:21:27:10: 4e:a5:81:61:2d:d3:f7:f6:2d:42:82:e3:3e:bb:cd: be:46:08:22:e0:68:ee:6e:da:c7:dc:f2:06:73:01: 54:2d:df:bd:76:b9:64:b7:18:88:b4:10:31:d6:60: 73:c7:da:18:3a:b6:8e:8c:a4:52:bc:3f:ec:1b:f4: f9:b0:92:64:6b:38:cc:f8:79:20:68:c6:32:f4:31: 96:48:dc:d5:04:6a:37:57:bd:9d:be:2f:b7:6f:df: c2:0d:4d:51:8e:e8:ca:07:0a:4e:dc:ef:5b:28:c0: a8:80:9f:67:70:9f:0c:30:f6:0d:36:dd:25:33:2b: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.156.225.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ea:e1:ac:a6:31:68:23:d9:9c:ba:cb:25:95:cf:c0:0b:4a: 58:6b:0d:d7:1e:25:3f:8e:67:77:6b:a1:b8:28:22:3b:de:ec: 26:20:01:d8:a7:f3:6a:71:55:94:ca:2f:b7:1a:8a:ff:b2:88: d2:e6:b7:83:91:6a:15:ff:65:5a:ea:8d:43:e1:d1:82:2d:e3: c3:11:68:de:6d:44:f0:49:15:39:73:fb:9b:42:c5:ba:00:18: c2:6e:0a:4d:ae:9c:20:76:21:ed:9f:41:df:7f:80:3e:a0:12: ae:b1:3d:ec:3d:1d:e5:64:92:05:ef:1c:81:81:6e:26:df:e6: ef:f8:e4:45:8c:37:c8:d3:cd:a0:8e:23:e3:d3:78:3e:1a:07: f9:4e:1d:78:62:a7:cc:d7:8d:fa:1c:b4:cd:53:54:d1:49:04: 48:b8:3f:b9:84:69:f3:f8:67:91:42:42:b0:d6:ac:f5:b4:d5: 1f:35:14:29:f2:d3:b3:11:72:77:93:79:c9:15:47:9d:fc:3e: ef:07:39:d4:11:ad:f0:d4:2f:9c:d6:39:ec:4d:8f:58:fa:32: 95:99:87:80:7a:27:ed:11:15:83:9b:da:d9:e7:d0:74:f4:b5: 74:92:83:bf:45:f9:92:64:09:cc:0b:db:fa:54:70:f2:59:a0: 62:6c:5b:b8 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTAzMTIzOTI1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEyRkRERDExMC8GA1UEBRMoQkMxNzg4MkJGQzRBODYzMEExQkJGNkFG MDY1MThCOTBCQTREMTY4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK/rDhAc05PtKU8/yKWVwICH6DpxvbTKrXadBy1IunDY1ICxnpiQMuSyxDW1Dp5P UCPwTP9+OK5+pQEdxF2Gw4jP7WdI5mhvsnxgY4yngWFLODbCgvgKbzvc2tUgr5Fc R3kuErhyrBHpD100opc2ewzX+ScF0+KVkq046HXAuVPSsIL8IScQTqWBYS3T9/Yt QoLjPrvNvkYIIuBo7m7ax9zyBnMBVC3fvXa5ZLcYiLQQMdZgc8faGDq2joykUrw/ 7Bv0+bCSZGs4zPh5IGjGMvQxlkjc1QRqN1e9nb4vt2/fwg1NUY7oygcKTtzvWyjA qICfZ3CfDDD2DTbdJTMr7EcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS8F4gr/EqG MKG79q8GUYuQuk0WijAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZEREQvRUNERUExRjZCNUI0MTFFRUI3RTcwQzRDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJGREREL0VDREVBMUY2QjVCNDExRUVCN0U3MEM0Q0M0RjlBRTAyL3ZCZUlLX3hL aGpDaHVfYXZCbEdMa0xwTkZvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMCc4TANBgkqhkiG9w0BAQsFAAOCAQEAQ+rhrKYxaCPZnLrLJZXP wAtKWGsN1x4lP45nd2uhuCgiO97sJiAB2KfzanFVlMovtxqK/7KI0ua3g5FqFf9l WuqNQ+HRgi3jwxFo3m1E8EkVOXP7m0LFugAYwm4KTa6cIHYh7Z9B33+APqASrrE9 7D0d5WSSBe8cgYFuJt/m7/jkRYw3yNPNoI4j49N4PhoH+U4deGKnzNeN+hy0zVNU 0UkESLg/uYRp8/hnkUJCsNas9bTVHzUUKfLTsxFyd5N5yRVHnfw+7wc51BGt8NQv nNY57E2PWPoylZmHgHon7REVg5va2efQdPS1dJKDv0X5kmQJzAvb+lRw8lmgYmxb uA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:12 2026 by rpki-client