This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer File: votHM7Guikc2t-kTJzPWVAkePSs.cer (raw, json) Hash identifier: 9//zbEYGeCIC9W+4FSKg1incsQS8qAn94L5tK7tv0lo= Subject key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 726A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 13:53:36 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.204.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29290 (0x726a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 16 13:53:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:35:03:00:dd:8a:28:b0:60:eb:7b:d2:f0: ab:6a:5f:05:91:53:41:7e:2c:55:bd:20:67:66:38: d7:3e:f3:c0:fb:0f:51:2a:d9:34:da:0f:52:79:66: 69:61:12:ed:1c:98:30:4c:3b:6b:98:fd:01:ea:9c: 88:75:5b:54:f5:c3:6e:e5:62:87:fe:37:02:0d:e7: 44:b1:f9:55:1c:76:1a:3d:b9:07:af:d8:d7:c1:2b: 09:c2:be:39:cb:1b:3b:1a:42:cb:28:a6:b5:04:5c: 56:3c:19:00:d8:65:36:2e:74:ec:4b:5f:17:2a:d7: 9a:fa:2f:f1:b4:c1:0b:da:70:95:92:f5:0a:dc:d6: f6:72:6d:53:aa:aa:78:b8:f0:92:f1:bc:10:22:8c: b3:fc:01:a5:e2:e0:57:59:e1:b7:77:83:65:a6:04: 21:30:0b:ab:e4:2b:96:a0:d8:b0:61:09:af:6a:66: 28:bb:a9:e8:9e:ad:cb:f9:d8:db:bb:50:2d:f4:32: e3:fd:97:34:58:6a:1a:c0:8b:81:f1:5c:68:4a:ea: 6c:dd:5f:1f:b7:a2:b0:62:b7:ad:bc:d8:58:b0:3b: 1d:d4:7d:44:e7:ad:2e:1b:4a:0a:91:4b:de:52:e9: 70:a4:df:67:45:4c:e9:fb:36:10:eb:00:b6:01:6f: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.204.0/23 Signature Algorithm: sha256WithRSAEncryption 96:38:40:2c:75:60:37:31:7b:dc:3d:f1:f7:11:8e:ec:3a:fc: e6:55:21:74:4e:f2:76:ea:ec:13:ee:60:1d:31:fb:97:27:0f: 17:47:eb:4f:24:9e:77:9c:dc:a2:8f:89:52:10:85:2b:39:41: b3:99:56:0a:f3:d3:29:a8:27:e5:5e:8b:ce:d6:aa:ff:ba:07: 6b:73:4a:5d:64:87:08:4c:50:18:80:74:b1:82:28:03:21:1c: 1d:09:3c:a7:7c:b2:11:12:0f:cd:d6:0f:5f:a5:d2:0c:f8:d3: 72:d0:58:38:c5:58:83:df:0d:c9:77:10:ca:86:e1:12:06:27: 92:9f:b3:e1:81:3e:18:ee:a1:37:fa:61:b9:72:c7:c5:10:30: 65:76:9b:60:7f:d2:90:48:b4:e3:6b:e1:a7:07:87:b5:d2:5f: dc:1e:eb:8c:c9:41:6f:36:16:72:e6:4c:28:b3:1b:91:89:61: 23:72:f8:99:a9:a2:79:43:24:2c:06:9f:43:5d:0c:b8:05:1b: e4:35:f0:9b:1f:06:ba:0c:2e:39:d3:fa:a0:8a:08:a1:9c:db: 68:53:89:7f:95:15:0c:7f:c5:88:b9:2e:f5:68:90:23:33:ce: 18:cd:f2:09:41:22:5d:1b:de:84:8a:1b:04:40:c3:64:dc:d5: 8d:8f:58:cd -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTE2MTM1MzM2WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFCMjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEz MjczM0Q2NTQwOTFFM0QyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKhPNQMA3YoosGDre9Lwq2pfBZFTQX4sVb0gZ2Y41z7zwPsPUSrZNNoPUnlmaWES 7RyYMEw7a5j9AeqciHVbVPXDbuVih/43Ag3nRLH5VRx2Gj25B6/Y18ErCcK+Ocsb OxpCyyimtQRcVjwZANhlNi507EtfFyrXmvov8bTBC9pwlZL1CtzW9nJtU6qqeLjw kvG8ECKMs/wBpeLgV1nht3eDZaYEITALq+QrlqDYsGEJr2pmKLup6J6ty/nY27tQ LfQy4/2XNFhqGsCLgfFcaErqbN1fH7eisGK3rbzYWLA7HdR9ROetLhtKCpFL3lLp cKTfZ0VM6fs2EOsAtgFvBsMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS+i0czsa6K Rza36RMnM9ZUCR49KzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjIzRDkvN0I4QkQ2Q0NDOUQxMTFFRjk3NUJEQzRCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIyM0Q5LzdCOEJENkNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1 aWtjMnQta1RKelBXVkFrZVBTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6zDANBgkqhkiG9w0BAQsFAAOCAQEAljhALHVgNzF73D3x9xGO 7Dr85lUhdE7ydursE+5gHTH7lycPF0frTySed5zcoo+JUhCFKzlBs5lWCvPTKagn 5V6Lztaq/7oHa3NKXWSHCExQGIB0sYIoAyEcHQk8p3yyERIPzdYPX6XSDPjTctBY OMVYg98NyXcQyobhEgYnkp+z4YE+GO6hN/phuXLHxRAwZXabYH/SkEi042vhpweH tdJf3B7rjMlBbzYWcuZMKLMbkYlhI3L4mamieUMkLAafQ10MuAUb5DXwmx8Gugwu OdP6oIoIoZzbaFOJf5UVDH/FiLku9WiQIzPOGM3yCUEiXRvehIobBEDDZNzVjY9Y zQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:53:53 2026 by rpki-client