This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer File: wj38Jpc5QY-leSH40pBboWdC_E0.cer (raw, json) Hash identifier: +OG2yM8w6wQ5G3owJqa4CR3Sw7P46/95rAzH6fr+nL4= Subject key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70B8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft caRepository: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 12:52:41 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.122.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28856 (0x70b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 23 12:52:41 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:49:27:47:74:a8:4d:b4:b9:ca:a8:8d:0b: e9:54:34:84:0d:52:05:83:06:d8:24:f2:f4:87:80: 04:bf:1c:ca:19:63:9a:78:3b:3c:c9:34:d5:a5:3b: 45:1b:61:8a:dc:c7:bf:17:60:82:b0:ca:c7:6e:f3: fe:01:e2:81:ac:b1:08:95:f4:14:e3:2a:34:a8:72: 16:ba:41:2c:58:84:17:f1:13:0b:cc:06:af:14:dd: d7:ef:ad:17:ad:73:dc:56:57:a0:ad:a4:4b:56:17: 03:c4:ff:11:24:18:db:82:3e:13:00:43:84:8f:21: c3:48:de:26:00:ef:43:a2:23:f4:7d:76:bc:1e:c6: 74:0b:80:38:16:2f:72:42:52:08:b5:ea:a9:11:ed: a6:db:f0:85:87:a9:2a:dc:37:a1:cc:e1:37:a3:a0: 60:a6:71:31:af:d4:a6:20:c3:c7:47:eb:9e:cc:d0: cb:cb:04:4c:58:30:d2:a3:03:e1:ef:f7:bb:1f:ad: d3:9b:57:84:a2:6f:67:6c:04:ce:db:44:98:f8:27: 27:a4:d8:62:ce:53:45:c8:b8:ce:33:51:be:48:dc: 77:a3:43:54:5c:f0:34:2a:38:22:de:49:6b:5a:16: ff:ca:07:37:fa:b2:71:c8:69:a2:44:dd:cc:38:7d: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.122.0/23 Signature Algorithm: sha256WithRSAEncryption 17:e6:ce:9b:09:59:45:25:c4:2b:4d:d7:01:a0:4d:d5:c8:ad: 88:ee:b1:51:6b:52:65:b6:f9:a7:48:0d:6d:75:b5:2a:67:33: a9:26:be:4e:2f:b4:94:cd:7b:19:90:12:c1:76:fe:05:bf:e5: f8:f3:c9:de:11:fa:3f:c6:82:d3:6d:6e:12:a3:0b:ed:1d:d3: 4b:72:7b:d1:58:3f:58:e4:ed:58:43:d7:5b:83:01:ca:65:fa: 27:5c:79:88:6d:a7:d4:95:d3:a5:cb:e0:a0:b5:e7:25:e7:62: c7:b8:63:c8:14:ef:7a:53:7c:f6:59:84:6a:b2:c2:22:57:03: da:91:bb:5e:ff:b6:06:32:e3:9f:4d:16:8c:cb:21:7e:23:d2: 22:96:e2:9d:52:e9:ff:50:97:d3:d8:b4:94:83:87:82:97:bb: 97:58:1d:7d:37:2f:ee:1d:41:1c:13:a9:e3:96:52:89:2f:8c: db:77:7e:54:67:17:b8:76:de:3e:ce:6f:85:0a:a2:fa:ec:14: 5a:e6:a5:85:80:3e:c9:a8:6a:87:86:1e:42:a2:8f:19:6e:a4: 8e:5d:bc:f6:82:8d:4c:c6:55:7e:5d:00:ae:43:ff:ff:02:2d: 9c:bc:f6:a3:36:c2:01:46:44:65:18:f0:2d:4d:ea:b9:ed:aa: 81:f9:02:e5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIzMTI1MjQxWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEzRjNBMjExMC8GA1UEBRMoQzIzREZDMjY5NzM5NDE4RkE1NzkyMUY4 RDI5MDVCQTE2NzQyRkM0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMNhSSdHdKhNtLnKqI0L6VQ0hA1SBYMG2CTy9IeABL8cyhljmng7PMk01aU7RRth itzHvxdggrDKx27z/gHigayxCJX0FOMqNKhyFrpBLFiEF/ETC8wGrxTd1++tF61z 3FZXoK2kS1YXA8T/ESQY24I+EwBDhI8hw0jeJgDvQ6Ij9H12vB7GdAuAOBYvckJS CLXqqRHtptvwhYepKtw3oczhN6OgYKZxMa/UpiDDx0frnszQy8sETFgw0qMD4e/3 ux+t05tXhKJvZ2wEzttEmPgnJ6TYYs5TRci4zjNRvkjcd6NDVFzwNCo4It5Ja1oW /8oHN/qycchpokTdzDh9XAcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTCPfwmlzlB j6V5IfjSkFuhZ0L8TTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0YzQTIvNUY4NDVDRUFBRTQ5MTFFRjlCMjk1MjM5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNGM0EyLzVGODQ1Q0VBQUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1 UVktbGVTSDQwcEJib1dkQ19FMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6ejANBgkqhkiG9w0BAQsFAAOCAQEAF+bOmwlZRSXEK03XAaBN 1citiO6xUWtSZbb5p0gNbXW1KmczqSa+Ti+0lM17GZASwXb+Bb/l+PPJ3hH6P8aC 021uEqML7R3TS3J70Vg/WOTtWEPXW4MBymX6J1x5iG2n1JXTpcvgoLXnJedix7hj yBTvelN89lmEarLCIlcD2pG7Xv+2BjLjn00WjMshfiPSIpbinVLp/1CX09i0lIOH gpe7l1gdfTcv7h1BHBOp45ZSiS+M23d+VGcXuHbePs5vhQqi+uwUWualhYA+yahq h4YeQqKPGW6kjl289oKNTMZVfl0ArkP//wItnLz2ozbCAUZEZRjwLU3que2qgfkC 5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:47 2026 by rpki-client