This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer File: YhmdhUkwna_yWfpPdr5svUb3VDA.cer (raw, json) Hash identifier: OHC2Wn8+SU3Rj678mImuns+2V9pjZ5nKUHLpRlSIkHY= Subject key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71D2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 22:32:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 192.43.174.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29138 (0x71d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 8 22:32:23 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:0f:e3:72:46:cf:10:a2:f3:54:46:6d:68: f6:2c:48:94:ac:00:de:ca:3c:f0:ac:a6:a8:36:31: f7:b0:5a:4c:87:2f:6c:5c:ed:d5:72:fa:11:d6:54: 0b:dd:f0:9a:37:28:df:9b:8f:6f:73:64:44:13:94: 46:e0:65:85:5b:99:e1:94:1b:34:59:cc:49:c4:48: 86:c7:57:6a:25:83:53:29:f9:40:6a:1e:90:82:f8: a7:24:3c:be:da:ac:51:12:32:12:7e:a6:09:e2:dd: 62:dc:28:17:71:61:b7:6e:29:09:d7:48:ad:d1:c3: c6:65:1e:03:de:70:ea:3e:2f:82:00:0b:16:16:f4: 28:4a:d8:b0:6b:f3:5f:00:1a:69:45:bc:1b:f6:7a: f5:43:b3:08:88:4d:3f:5f:ee:bb:65:7e:6a:aa:eb: 8f:5e:c6:18:e1:4b:9f:fd:cd:77:60:71:ce:95:b0: 1a:6f:d4:41:60:34:09:b8:85:df:c1:ec:90:f1:14: 7b:88:66:5e:d9:9a:67:ac:60:46:28:5a:51:56:b1: b7:7c:b1:fe:85:69:2f:78:e2:91:c0:a3:0a:17:e8: 6f:c6:1a:4e:31:90:59:4f:e2:7a:c4:38:87:f3:a0: b3:4d:aa:fd:9b:45:a7:1f:91:23:8e:43:51:8f:69: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.43.174.0/24 Signature Algorithm: sha256WithRSAEncryption 00:7b:f9:08:4a:9d:e2:0e:2d:56:a1:b7:26:d0:c4:1d:07:fe: 55:e7:2b:ee:00:2b:d1:22:33:d8:69:92:ae:81:fa:72:79:df: 1e:0e:d0:33:d3:ed:3d:fc:ff:95:be:e1:0f:e9:85:26:3d:37: f5:ac:8b:aa:d9:3a:bd:0b:e3:6a:4e:d4:85:89:a3:4e:ab:51: 5d:2a:08:ea:76:04:3a:7c:3d:7c:e6:97:94:9b:a3:60:1e:f9: 5b:1d:bf:6d:7c:36:95:8f:9e:aa:10:4e:e5:17:b4:45:96:ab: 58:8b:ad:bc:b8:45:02:29:5e:c4:e6:0c:82:0e:9c:58:e9:93: 7a:fb:c2:d6:69:ab:cf:07:81:1f:56:da:5c:b6:4e:55:91:3a: 11:96:18:dc:ea:e1:88:f5:61:5c:e4:84:5a:32:94:b2:fa:c2: ce:e7:65:1c:3d:3c:20:45:20:54:ec:f7:9c:61:44:dc:94:39: d5:20:10:9a:c3:30:23:ba:ab:e6:3e:83:37:bc:00:5b:3f:bc: 39:e7:bf:86:2b:ea:c4:88:7a:8c:0c:a5:f6:36:d4:c6:97:ac: 78:4c:7d:cc:d2:f9:3d:60:3a:19:e4:fc:8a:29:c9:d1:06:87: 87:4f:26:34:25:ef:2b:e4:8a:5f:73:3d:f8:de:f5:c4:7b:9a: 24:7e:42:c0 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA4MjIzMjIzWhcNMjYwNzAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE0N0ExMjExMC8GA1UEBRMoNjIxOTlEODU0OTMwOURBRkYyNTlGQTRG NzZCRTZDQkQ0NkY3NTQzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOHPD+NyRs8QovNURm1o9ixIlKwA3so88KymqDYx97BaTIcvbFzt1XL6EdZUC93w mjco35uPb3NkRBOURuBlhVuZ4ZQbNFnMScRIhsdXaiWDUyn5QGoekIL4pyQ8vtqs URIyEn6mCeLdYtwoF3Fht24pCddIrdHDxmUeA95w6j4vggALFhb0KErYsGvzXwAa aUW8G/Z69UOzCIhNP1/uu2V+aqrrj17GGOFLn/3Nd2BxzpWwGm/UQWA0CbiF38Hs kPEUe4hmXtmaZ6xgRihaUVaxt3yx/oVpL3jikcCjChfob8YaTjGQWU/iesQ4h/Og s02q/ZtFpx+RI45DUY9ptr8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRiGZ2FSTCd r/JZ+k92vmy9RvdUMDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdBMTIvRTNCMTNCNkVFQ0UxMTFGMEI1MzhCQTlDNzE2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ3QTEyL0UzQjEzQjZFRUNFMTExRjBCNTM4QkE5QzcxNkY1NkJDL1lobWRoVWt3 bmFfeVdmcFBkcjVzdlViM1ZEQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMArrjANBgkqhkiG9w0BAQsFAAOCAQEAAHv5CEqd4g4tVqG3JtDE HQf+Vecr7gAr0SIz2GmSroH6cnnfHg7QM9PtPfz/lb7hD+mFJj039ayLqtk6vQvj ak7UhYmjTqtRXSoI6nYEOnw9fOaXlJujYB75Wx2/bXw2lY+eqhBO5Re0RZarWIut vLhFAilexOYMgg6cWOmTevvC1mmrzweBH1baXLZOVZE6EZYY3OrhiPVhXOSEWjKU svrCzudlHD08IEUgVOz3nGFE3JQ51SAQmsMwI7qr5j6DN7wAWz+8Oee/hivqxIh6 jAyl9jbUxpeseEx9zNL5PWA6GeT8iinJ0QaHh08mNCXvK+SKX3M9+N71xHuaJH5C wA== -----END CERTIFICATE-----Generated at Sat Jan 17 08:37:24 2026 by rpki-client