This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer File: w5O8331Fpxlv881tMNYjDfT9xX0.cer (raw, json) Hash identifier: hVZI42k6zenOgS6re09Gn78sQq0aiO2fYWRjmFpcltM= Subject key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 720D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft caRepository: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:18:35 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.122.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29197 (0x720d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 13:18:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:45:af:d7:07:17:b9:8c:b1:23:3e:c8:c3: 47:36:b0:52:8d:08:1c:07:ed:cc:49:df:7c:bc:74: bd:02:0f:64:56:9e:7b:58:b0:b2:eb:95:b6:b3:60: 8a:69:a2:d8:a9:51:89:0f:cc:ee:63:2e:b4:ea:88: bd:da:00:32:56:07:9b:78:be:12:66:e4:7e:a3:99: 8b:e2:dd:db:f3:3f:13:97:fb:d5:b7:08:14:3e:40: 62:bc:87:07:83:4f:a0:f5:75:e5:e0:4c:1c:30:24: 6a:93:0d:e4:12:26:4a:e6:61:5b:51:2a:37:65:08: 1d:0f:96:25:c7:ec:fe:4d:bf:12:e9:f5:1a:a4:dc: fd:ca:64:a3:df:ec:84:e4:bb:93:d1:9c:2f:68:ff: a9:9b:df:e0:93:a5:04:8d:ad:e7:54:d2:03:c3:59: 03:84:e1:65:12:b8:17:38:bf:bf:57:84:51:8d:a5: 95:04:b2:9d:b9:cb:d5:82:92:6b:db:33:16:fd:07: bc:70:96:c1:d6:f4:5f:87:85:0d:77:8b:90:f2:55: ba:de:36:82:3e:7c:d2:84:aa:4b:46:8e:0b:33:cf: ec:95:6f:28:ae:79:d4:2e:cc:a0:02:ad:e2:3a:63: c0:1d:7d:97:a3:f1:1a:25:90:2d:34:6c:76:59:8b: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.122.0/23 Signature Algorithm: sha256WithRSAEncryption 36:a8:10:fb:cc:01:85:c7:01:0a:2b:fe:dd:e7:fa:40:70:87: 36:00:a1:3c:b6:c4:7c:91:e1:7f:10:5a:2d:56:11:7d:5c:85: 25:35:f2:1f:6d:7a:9d:72:ed:c4:78:8f:c9:d6:bb:ef:e3:7e: 48:2c:b9:e8:22:a2:c9:3b:3c:c1:ff:12:71:91:60:54:67:e9: 66:13:85:9a:37:03:b8:37:28:8d:72:42:1a:5a:76:e8:57:a1: 70:69:01:3d:62:77:f5:57:2c:75:27:2c:89:7b:80:4f:7e:c9: 75:6f:ba:dd:1e:f2:c2:e4:5c:52:06:e8:14:d5:b9:96:d3:6b: 46:8d:a6:a2:15:f9:8d:f0:67:4c:cb:a1:ca:1c:7b:49:db:d0: 8a:77:96:af:81:c1:a3:6a:7a:64:8d:1c:be:16:8c:8e:bd:98: a5:9b:3c:1c:ed:06:d8:03:35:a9:b9:b9:f7:da:2f:43:45:06: ea:ba:f4:87:34:1b:75:70:e6:26:c1:bc:7c:33:34:c6:7a:0b: a3:8f:49:c1:49:ab:7a:6e:27:80:d2:61:60:6e:4f:f9:fa:e1: 48:4a:3d:2e:23:2c:b4:98:70:79:b9:a1:84:14:69:7f:80:03: f6:c6:8e:8c:e8:8d:7d:32:dc:bd:ba:b8:e0:49:03:9f:a8:a2: 6f:da:8f:48 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTMxODM1WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2RUQyQjExMC8GA1UEBRMoQzM5M0JDREY3RDQ1QTcxOTZGRjNDRDZE MzBENjIzMERGNEZEQzU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMHURa/XBxe5jLEjPsjDRzawUo0IHAftzEnffLx0vQIPZFaee1iwsuuVtrNgimmi 2KlRiQ/M7mMutOqIvdoAMlYHm3i+EmbkfqOZi+Ld2/M/E5f71bcIFD5AYryHB4NP oPV15eBMHDAkapMN5BImSuZhW1EqN2UIHQ+WJcfs/k2/Eun1GqTc/cpko9/shOS7 k9GcL2j/qZvf4JOlBI2t51TSA8NZA4ThZRK4Fzi/v1eEUY2llQSynbnL1YKSa9sz Fv0HvHCWwdb0X4eFDXeLkPJVut42gj580oSqS0aOCzPP7JVvKK551C7MoAKt4jpj wB19l6PxGiWQLTRsdlmLBakCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTDk7zffUWn GW/zzW0w1iMN9P3FfTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEMkIvRkMxMUJGRDI0NUIwMTFFRkJENTk4Qjc3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZFRDJCL0ZDMTFCRkQyNDVCMDExRUZCRDU5OEI3N0M0RjlBRTAyL3c1TzgzMzFG cHhsdjg4MXRNTllqRGZUOXhYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KejANBgkqhkiG9w0BAQsFAAOCAQEANqgQ+8wBhccBCiv+3ef6 QHCHNgChPLbEfJHhfxBaLVYRfVyFJTXyH216nXLtxHiPyda77+N+SCy56CKiyTs8 wf8ScZFgVGfpZhOFmjcDuDcojXJCGlp26FehcGkBPWJ39VcsdScsiXuAT37JdW+6 3R7ywuRcUgboFNW5ltNrRo2mohX5jfBnTMuhyhx7SdvQineWr4HBo2p6ZI0cvhaM jr2YpZs8HO0G2AM1qbm599ovQ0UG6rr0hzQbdXDmJsG8fDM0xnoLo49JwUmrem4n gNJhYG5P+frhSEo9LiMstJhwebmhhBRpf4AD9saOjOiNfTLcvbq44EkDn6iib9qP SA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:38:28 2026 by rpki-client