This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer File: afotkTN0HoMAQ-tA5A0ivzU4684.cer (raw, json) Hash identifier: dgkGUyJSQtVN/2mhy4YPhT929iB5lGiQCw/juORJ05A= Subject key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028835 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 23 Jan 2026 14:45:31 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 142234 IP: 2001:df6:a040::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165941 (0x28835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 23 14:45:31 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:6b:06:4f:ce:68:63:d1:ba:1c:88:33:27: 31:1f:93:14:f9:dc:30:c3:92:86:b1:2f:6d:88:8d: 51:67:9f:08:cd:70:53:ed:9f:87:b5:64:88:61:13: 01:08:f0:5b:4e:55:c8:a7:21:7f:78:6f:46:8a:fa: aa:6b:2e:b5:5e:58:12:c2:4c:a3:0a:d9:46:7d:fc: 66:c2:4a:b9:85:52:dc:f8:42:e8:4f:38:34:e0:6b: 51:52:25:68:1c:c5:be:df:40:72:0c:b6:dc:a7:fa: 65:72:5c:9b:e4:a4:47:b3:b5:90:90:af:3f:6f:8d: 5b:cd:7b:5d:b4:9f:43:04:35:23:b0:b8:b5:d3:37: 89:72:7e:19:74:8b:4f:55:a1:34:ca:b4:34:d9:66: b9:a7:5c:d0:91:76:b7:17:bf:0f:c5:8b:46:d1:04: a2:a6:7f:da:5b:a9:66:f3:01:0d:3b:86:3f:95:61: 5d:e1:bd:5a:8c:a9:48:f8:0d:1b:10:2e:cc:ab:66: 77:64:65:43:10:da:70:80:3f:d0:f4:af:2f:52:1b: 2f:ce:35:87:ca:89:16:e5:6c:e3:a8:69:5c:63:2b: 45:71:b6:87:67:1a:86:2a:e2:2c:bf:98:06:82:d5: 1a:03:5e:f6:52:78:c6:69:27:e8:b3:0f:94:80:be: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142234 sbgp-ipAddrBlock: critical IPv6: 2001:df6:a040::/48 Signature Algorithm: sha256WithRSAEncryption bc:92:2c:40:04:42:25:a8:46:4b:bc:ef:c1:ce:87:8d:f8:df: c2:51:12:f6:d7:d6:ac:4d:48:fd:cb:0f:8f:b1:0b:f8:30:b5: f3:36:29:aa:75:b6:84:98:17:88:cc:2d:7f:cb:4d:21:5d:1d: 46:27:55:99:0c:da:78:92:e6:ec:db:30:b3:97:54:25:fa:41: 56:03:e0:5d:59:7c:55:b3:f7:7f:2e:d9:3a:12:d1:ae:5d:41: 49:cb:74:c4:92:e5:3c:f3:16:fb:be:83:61:c2:3c:1e:00:5f: a9:3a:9d:ae:40:2e:14:1f:14:1d:45:43:f6:81:3f:52:55:61: 86:45:20:d1:a7:59:b1:ba:e6:bd:64:06:f0:57:13:8c:4d:60: 24:38:06:79:01:b9:f0:e7:ae:5b:b5:5a:69:fe:01:30:51:98: 84:7a:59:98:ff:17:8f:42:8e:32:14:81:2b:6c:0d:bf:d1:a9: b8:c4:6e:34:67:6c:5a:e7:f6:1b:88:dd:45:86:a3:bf:85:12: b1:21:5d:e2:ae:5a:75:fb:ec:88:39:d8:dc:08:60:e2:b9:56: f2:34:9e:2c:90:58:3b:40:2e:4e:7f:6e:47:e0:92:c6:98:f5: f2:2a:44:be:fc:9b:07:6c:e0:6c:fe:2e:67:d2:c9:71:3d:6e: 18:9d:bf:2c -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAog1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMzE0NDUzMVoXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0NCODExMTAvBgNVBAUTKDY5RkEyRDkxMzM3NDFFODMwMDQzRUI0 MEU0MEQyMkJGMzUzOEVCQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2kWsGT85oY9G6HIgzJzEfkxT53DDDkoaxL22IjVFnnwjNcFPtn4e1ZIhhEwEI 8FtOVcinIX94b0aK+qprLrVeWBLCTKMK2UZ9/GbCSrmFUtz4QuhPODTga1FSJWgc xb7fQHIMttyn+mVyXJvkpEeztZCQrz9vjVvNe120n0MENSOwuLXTN4lyfhl0i09V oTTKtDTZZrmnXNCRdrcXvw/Fi0bRBKKmf9pbqWbzAQ07hj+VYV3hvVqMqUj4DRsQ LsyrZndkZUMQ2nCAP9D0ry9SGy/ONYfKiRblbOOoaVxjK0VxtodnGoYq4iy/mAaC 1RoDXvZSeMZpJ+izD5SAvi2PAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUafotkTN0 HoMAQ+tA5A0ivzU4684wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNDQjgxLzI4NjFFNDk2Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQ0I4MS8yODYxRTQ5NkY4NkExMUYwQjRCQkFGM0M0QTZGNTZCQy9hZm90a1RO MEhvTUFRLXRBNUEwaXZ6VTQ2ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiuaMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9qBAMA0G CSqGSIb3DQEBCwUAA4IBAQC8kixABEIlqEZLvO/BzoeN+N/CURL219asTUj9yw+P sQv4MLXzNimqdbaEmBeIzC1/y00hXR1GJ1WZDNp4kubs2zCzl1Ql+kFWA+BdWXxV s/d/Ltk6EtGuXUFJy3TEkuU88xb7voNhwjweAF+pOp2uQC4UHxQdRUP2gT9SVWGG RSDRp1mxuua9ZAbwVxOMTWAkOAZ5Abnw565btVpp/gEwUZiEelmY/xePQo4yFIEr bA2/0am4xG40Z2xa5/YbiN1FhqO/hRKxIV3irlp1++yIOdjcCGDiuVbyNJ4skFg7 QC5Of25H4JLGmPXyKkS+/JsHbOBs/i5n0slxPW4Ynb8s -----END CERTIFICATE-----Generated at Sun Jan 25 01:11:51 2026 by rpki-client