This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer File: xVZN7BAWY79D0_LjQDlMAHZqY-M.cer (raw, json) Hash identifier: R71/derU9CFZEqE2F2A6/KjmwH1T/Idp6mdJI0sTpBs= Subject key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7124 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft caRepository: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 12:32:14 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.212.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28964 (0x7124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 30 12:32:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:d5:1f:2d:08:d5:9f:fa:5a:97:89:04:0d: f8:cf:78:c4:ab:33:22:62:f6:3f:67:5d:97:5c:c5: 21:cd:c4:1d:55:b3:93:44:1c:27:0a:b4:b7:f6:ce: ef:62:2f:66:ca:33:7b:77:10:60:fc:1e:84:20:8a: 6d:36:12:e1:69:2b:b7:1f:26:b1:2b:7c:39:39:77: 9d:d1:09:db:7b:78:ad:09:a2:09:f6:bb:55:ce:80: 31:5b:57:25:16:2c:71:5d:9a:f7:38:6a:15:ee:31: d5:3a:0c:19:91:8d:c4:8b:9e:9a:8c:45:7c:9c:d4: 5f:7b:2c:15:81:1a:9c:a6:a3:df:b9:ef:71:2f:ea: f7:d3:c5:b5:f6:2b:be:61:21:4a:b0:44:ef:7f:57: 78:81:08:63:5c:c7:25:d9:23:73:6b:34:0b:71:92: 52:43:18:30:95:25:36:ea:d6:7f:13:27:18:6a:40: 2b:11:df:be:09:21:e7:16:18:8f:ed:9f:60:f5:9c: 09:1e:49:6d:6f:31:c8:7f:0c:41:95:bb:f4:90:ba: ea:6c:8f:56:f1:9b:e3:c8:49:4c:90:c4:0b:da:dd: 16:8f:73:cd:8a:de:5d:91:dc:8f:e9:ad:1e:c0:dd: 5d:63:a2:40:0c:ba:83:8e:2e:59:44:1c:e8:ae:c2: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.212.0/24 Signature Algorithm: sha256WithRSAEncryption 43:07:3d:0d:b9:db:c1:fd:a9:ee:63:8e:f8:74:6b:6d:b7:2b: 07:4d:65:78:07:b2:a1:07:2d:8d:62:9d:02:e3:14:a2:f8:c2: 2d:99:bc:1b:c0:d0:bc:ed:29:90:a8:70:6d:dc:5f:35:77:a4: ec:74:26:6b:fd:10:36:aa:85:24:f3:f0:cc:fa:62:6d:8b:47: f9:a2:f6:14:5f:5d:57:42:3c:49:97:30:dd:70:44:39:58:ad: 16:0e:ff:19:75:93:4f:c2:c4:bd:82:59:d0:82:b6:4b:bd:ab: c2:aa:ef:88:32:52:f7:24:9d:86:0a:f9:2c:db:b4:5a:a9:e5: 7d:16:17:23:12:e6:8f:83:00:d0:7b:33:e7:3a:78:52:4f:19: 92:8e:4b:9f:7c:ef:4d:b2:3e:66:5a:a6:84:34:17:10:ec:17: 98:98:48:89:3b:b6:ec:06:60:8d:51:98:61:8e:3f:b3:ed:0e: 77:ee:2e:9d:ee:98:b1:68:cc:9c:ba:82:ea:cb:10:73:81:ea: 02:4a:ac:d4:c6:7c:a2:ff:b5:84:d5:63:20:f6:a6:d0:2e:02: ab:25:85:0a:2c:8e:69:4d:6e:c2:13:e4:90:29:c8:47:15:54: b3:6a:60:5d:0e:0e:90:85:f5:8a:9c:40:45:7a:2c:c6:fd:54: b7:47:21:91 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjMwMTIzMjE0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEyMkI4NTExMC8GA1UEBRMoQzU1NjRERUMxMDE2NjNCRjQzRDNGMkUz NDAzOTRDMDA3NjZBNjNFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMkG1R8tCNWf+lqXiQQN+M94xKszImL2P2ddl1zFIc3EHVWzk0QcJwq0t/bO72Iv Zsoze3cQYPwehCCKbTYS4Wkrtx8msSt8OTl3ndEJ23t4rQmiCfa7Vc6AMVtXJRYs cV2a9zhqFe4x1ToMGZGNxIuemoxFfJzUX3ssFYEanKaj37nvcS/q99PFtfYrvmEh SrBE739XeIEIY1zHJdkjc2s0C3GSUkMYMJUlNurWfxMnGGpAKxHfvgkh5xYYj+2f YPWcCR5JbW8xyH8MQZW79JC66myPVvGb48hJTJDEC9rdFo9zzYreXZHcj+mtHsDd XWOiQAy6g44uWUQc6K7CSO8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTFVk3sEBZj v0PT8uNAOUwAdmpj4zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJCODUvQ0NCQkFCRUE5RjY0MTFFRkE5MzE0NzNDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIyQjg1L0NDQkJBQkVBOUY2NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFX WTc5RDBfTGpRRGxNQUhacVktTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC/1DANBgkqhkiG9w0BAQsFAAOCAQEAQwc9Dbnbwf2p7mOO+HRr bbcrB01leAeyoQctjWKdAuMUovjCLZm8G8DQvO0pkKhwbdxfNXek7HQma/0QNqqF JPPwzPpibYtH+aL2FF9dV0I8SZcw3XBEOVitFg7/GXWTT8LEvYJZ0IK2S72rwqrv iDJS9ySdhgr5LNu0WqnlfRYXIxLmj4MA0Hsz5zp4Uk8Zko5Ln3zvTbI+ZlqmhDQX EOwXmJhIiTu27AZgjVGYYY4/s+0Od+4une6YsWjMnLqC6ssQc4HqAkqs1MZ8ov+1 hNVjIPam0C4CqyWFCiyOaU1uwhPkkCnIRxVUs2pgXQ4OkIX1ipxARXosxv1Ut0ch kQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:42 2026 by rpki-client