This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer File: y4244fF7x3I0bdn_uyByz6j9plI.cer (raw, json) Hash identifier: wjX7TsFFLeEcYpUtVEcWV3ltLpfpx7dKGm9Hlzsm1JQ= Subject key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7298 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 02:31:31 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.211.0.0/16 IP: 165.84.32.0/20 IP: 165.84.64.0/18 IP: 192.203.99.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 14:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29336 (0x7298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 21 02:31:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91DB7E9, serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:36:e0:7b:48:d5:b9:81:27:4c:be:69:6d: dd:a5:bd:99:cb:d5:cc:27:d7:28:a1:37:9f:30:68: d3:52:b5:62:17:e2:8e:a5:14:49:1d:86:ef:68:ab: f4:12:f6:95:6d:c1:02:c3:ab:a5:2a:18:d1:73:31: 56:17:38:40:40:ea:d0:e9:ad:71:15:f1:87:cb:ca: 0c:34:6a:e8:ad:65:4d:5b:9c:e3:a3:f6:87:6c:09: d5:e1:a2:7f:4c:28:db:c4:01:61:89:33:ca:4d:5b: fd:36:d1:52:6e:f9:4e:b4:8e:82:c0:73:a7:55:4f: d1:be:e6:40:fb:a5:a9:33:e8:71:fa:2f:18:5b:0d: ad:a3:24:66:3d:97:2d:e5:b4:0d:7d:73:5d:0b:32: d8:d1:46:59:8d:49:e1:14:d0:5f:69:60:71:ed:aa: 7b:95:b3:d0:0f:4f:54:40:1d:7f:3e:b0:95:25:b5: c8:9b:d3:38:bc:02:dd:71:5c:e1:8c:28:23:3c:9f: 2b:9e:3e:58:8e:a5:b9:6b:00:dd:43:23:77:4d:3e: 21:0c:7a:cb:ea:29:d5:53:94:76:54:d0:80:20:cd: de:d3:75:4e:ac:c3:67:5b:3a:27:30:6f:ff:9c:b0: 83:b0:42:ca:22:b8:fb:0e:14:ec:00:a7:0e:eb:ba: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.211.0.0/16 165.84.32.0/20 165.84.64.0/18 192.203.99.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:68:aa:c8:16:68:a6:2a:32:05:78:5d:80:2c:37:2e:ad:ef: 60:8c:33:36:06:fb:e5:90:fb:38:d6:7d:f2:e1:e6:01:cd:00: 55:2a:85:1d:51:5d:72:a5:37:f9:93:a4:72:38:78:c4:41:86: e3:68:0d:d9:20:2e:76:ad:e8:80:af:63:a0:78:8b:de:55:85: e6:77:27:40:64:f7:a3:6d:d1:a3:a3:90:aa:4a:c1:4e:a8:78: 4d:75:eb:cf:2a:32:00:e8:68:e1:d1:51:cc:e4:04:17:e8:fd: e0:ae:6a:c8:04:a5:ba:00:34:68:48:f8:2c:e2:b2:8c:df:84: f5:6b:f1:f6:e6:ed:be:3f:bb:61:6a:eb:eb:b1:d7:d2:9d:e2: 83:17:d1:c2:67:8e:ac:01:b9:ca:cd:d9:21:b8:40:41:71:27: 6c:70:08:43:2f:2b:38:2d:3b:4c:06:70:b4:97:a2:98:e9:ae: 16:bb:85:12:0a:62:b5:3f:bc:2f:b7:04:1c:bc:26:54:3b:9b: ab:f1:01:1e:4f:e1:df:9a:77:02:6c:bd:c0:88:d4:a1:44:f1: e1:33:6b:df:9e:6d:85:dd:49:8c:99:56:8a:03:80:bd:ae:aa: 9f:bd:99:d6:d6:11:e9:81:37:44:41:1a:28:e9:6d:65:4c:c7: 00:53:1e:1a -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgICcpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTIxMDIzMTMxWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFEQjdFOTExMC8GA1UEBRMoQ0I4REI4RTFGMTdCQzc3MjM0NkREOUZG QkIyMDcyQ0ZBOEZEQTY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN8QNuB7SNW5gSdMvmlt3aW9mcvVzCfXKKE3nzBo01K1YhfijqUUSR2G72ir9BL2 lW3BAsOrpSoY0XMxVhc4QEDq0OmtcRXxh8vKDDRq6K1lTVuc46P2h2wJ1eGif0wo 28QBYYkzyk1b/TbRUm75TrSOgsBzp1VP0b7mQPulqTPocfovGFsNraMkZj2XLeW0 DX1zXQsy2NFGWY1J4RTQX2lgce2qe5Wz0A9PVEAdfz6wlSW1yJvTOLwC3XFc4Ywo IzyfK54+WI6luWsA3UMjd00+IQx6y+op1VOUdlTQgCDN3tN1TqzDZ1s6JzBv/5yw g7BCyiK4+w4U7ACnDuu6UkkCAwEAAaOCAwQwggMAMB0GA1UdDgQWBBTLjbjh8XvH cjRt2f+7IHLPqP2mUjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI3RTkvRTBDNDYxMzA2RTJFMTFFRTg1RDkyRDMyQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURCN0U5L0UwQzQ2MTMwNkUyRTExRUU4NUQ5MkQzMkM0RjlBRTAyL3k0MjQ0ZkY3 eDNJMGJkbl91eUJ5ejZqOXBsSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQhMB8w HQQCAAEwFwMDAIrTAwQEpVQgAwQGpVRAAwQAwMtjMA0GCSqGSIb3DQEBCwUAA4IB AQA9aKrIFmimKjIFeF2ALDcure9gjDM2BvvlkPs41n3y4eYBzQBVKoUdUV1ypTf5 k6RyOHjEQYbjaA3ZIC52reiAr2OgeIveVYXmdydAZPejbdGjo5CqSsFOqHhNdevP KjIA6Gjh0VHM5AQX6P3grmrIBKW6ADRoSPgs4rKM34T1a/H25u2+P7thauvrsdfS neKDF9HCZ46sAbnKzdkhuEBBcSdscAhDLys4LTtMBnC0l6KY6a4Wu4USCmK1P7wv twQcvCZUO5ur8QEeT+HfmncCbL3AiNShRPHhM2vfnm2F3UmMmVaKA4C9rqqfvZnW 1hHpgTdEQRoo6W1lTMcAUx4a -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:30 2026 by rpki-client