This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer File: pN7tlZPlkTA6mwOYBh_o71GGZco.cer (raw, json) Hash identifier: 5VFTjCtumInjouijFFS8EQSZmQ026Esn5Abuq3I7WYQ= Subject key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71A3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft caRepository: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:36:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 132.234.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29091 (0x71a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 6 13:36:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:92:f2:b5:16:11:5d:1c:a8:68:42:7c:03: dc:ce:74:ba:1e:a3:9b:30:b5:63:5f:ce:14:2a:a5: 34:d6:0a:1b:f1:49:f7:0e:58:bf:7c:fc:bc:91:b0: 98:51:68:2a:05:5b:f6:f3:b0:e3:16:2e:d6:ae:92: 2a:42:42:71:5a:f6:42:3b:b0:4a:30:e6:17:d5:ab: 23:f6:32:ed:c6:1a:f6:4b:ed:43:72:30:84:7f:d2: 85:96:7d:e8:9c:43:3e:b4:52:a0:52:c9:c1:9c:eb: d3:89:e1:9c:c7:b1:24:a2:ad:a7:22:42:f9:2d:58: 13:1d:a1:d2:00:34:20:51:48:9a:f8:eb:68:0a:34: 78:43:d8:d0:f5:bf:b8:44:90:c8:b3:23:4a:da:9f: a7:2d:99:95:47:7e:4e:f3:1e:52:b7:11:11:58:fd: 32:e0:9e:2c:03:7e:76:c5:8f:4f:71:8f:c3:54:22: e6:59:8a:cd:7a:c6:c7:e2:1b:a9:5a:f4:21:9f:d1: 90:20:fa:68:50:67:1b:d5:35:4b:94:b8:69:16:e1: ab:8a:58:cb:77:c0:0f:52:a3:83:f9:c9:c2:53:4d: 48:63:89:40:bf:bd:82:57:c7:c7:01:89:db:20:77: 4b:90:de:ef:d4:cf:21:c5:42:8d:a8:a8:a3:81:08: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 132.234.0.0/16 Signature Algorithm: sha256WithRSAEncryption b0:69:da:1f:2e:4b:79:f6:44:15:ce:b8:0b:c5:fe:1c:ed:7c: 22:ac:7e:ff:75:20:63:3e:86:40:26:1f:56:c6:fe:62:1c:09: d8:2d:f3:f7:cc:72:a3:25:96:88:26:3d:38:dc:46:31:b0:74: 81:d6:2c:5d:6a:3a:09:da:cb:f9:ab:64:6a:95:3c:b2:07:32: 54:6d:84:17:33:de:53:c9:cb:c8:53:07:7e:c9:d6:e4:21:52: a1:cc:e9:d2:cc:18:2f:94:f2:b8:12:57:31:97:04:ed:3e:87: a6:14:10:e4:95:6b:6e:13:fd:0a:cd:cc:77:42:1e:65:39:ac: fc:8c:38:53:ee:52:f2:44:48:b8:0b:ed:86:97:07:5b:41:19: ba:97:b7:00:a2:a6:4e:12:40:58:16:23:da:17:39:74:2a:9e: ee:57:f6:dd:9d:2a:aa:46:2c:e0:05:ab:ff:51:59:1b:46:ab: 92:14:a4:ef:29:8d:d5:45:8f:90:f6:59:1c:e8:a1:fe:b3:52: de:0a:90:a9:cd:71:dc:e1:dc:e3:73:28:6c:14:91:47:2b:c4: fc:b2:f1:a8:da:1b:f7:fc:81:0a:39:cf:c6:4d:01:e4:47:4d: 46:d1:67:05:05:0a:96:76:ee:ae:cd:bf:f6:6e:49:8e:90:26: be:92:5f:a9 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICcaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA2MTMzNjM0WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE4Q0FCRjExMC8GA1UEBRMoQTRERUVEOTU5M0U1OTEzMDNBOUIwMzk4 MDYxRkU4RUY1MTg2NjVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALZNkvK1FhFdHKhoQnwD3M50uh6jmzC1Y1/OFCqlNNYKG/FJ9w5Yv3z8vJGwmFFo KgVb9vOw4xYu1q6SKkJCcVr2QjuwSjDmF9WrI/Yy7cYa9kvtQ3IwhH/ShZZ96JxD PrRSoFLJwZzr04nhnMexJKKtpyJC+S1YEx2h0gA0IFFImvjraAo0eEPY0PW/uESQ yLMjStqfpy2ZlUd+TvMeUrcREVj9MuCeLAN+dsWPT3GPw1Qi5lmKzXrGx+IbqVr0 IZ/RkCD6aFBnG9U1S5S4aRbhq4pYy3fAD1Kjg/nJwlNNSGOJQL+9glfHxwGJ2yB3 S5De79TPIcVCjaioo4EIVDkCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBSk3u2Vk+WR MDqbA5gGH+jvUYZlyjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENBQkYvMTg5MTk1QUM2ODJBMTFFRThBOUVCODJGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDQUJGLzE4OTE5NUFDNjgyQTExRUU4QTlFQjgyRkM0RjlBRTAyL3BON3RsWlBs a1RBNm13T1lCaF9vNzFHR1pjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAITqMA0GCSqGSIb3DQEBCwUAA4IBAQCwadofLkt59kQVzrgLxf4c 7XwirH7/dSBjPoZAJh9Wxv5iHAnYLfP3zHKjJZaIJj043EYxsHSB1ixdajoJ2sv5 q2RqlTyyBzJUbYQXM95TycvIUwd+ydbkIVKhzOnSzBgvlPK4ElcxlwTtPoemFBDk lWtuE/0Kzcx3Qh5lOaz8jDhT7lLyREi4C+2GlwdbQRm6l7cAoqZOEkBYFiPaFzl0 Kp7uV/bdnSqqRizgBav/UVkbRquSFKTvKY3VRY+Q9lkc6KH+s1LeCpCpzXHc4dzj cyhsFJFHK8T8svGo2hv3/IEKOc/GTQHkR01G0WcFBQqWdu6uzb/2bkmOkCa+kl+p -----END CERTIFICATE-----Generated at Mon Feb 16 12:52:55 2026 by rpki-client