This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer (raw, json) Hash identifier: GInKhifhxp50OqpxMdtQqMDcwvNCJDRbVY7LKo5dDF8= Subject key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F7A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft caRepository: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 18 Jan 2026 13:27:38 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: AS: 56868 IP: 82.158.128.0/19 IP: 151.158.4.0/23 IP: 151.158.10.0/23 IP: 151.158.36.0/23 IP: 151.158.42.0/23 IP: 212.117.48.0/20 IP: 2001:7fa:2::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20346 (0x4f7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 18 13:27:38 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:48:c4:77:1f:a2:b3:25:74:08:6d:08:9e: 91:f2:a9:f9:af:a5:f6:43:50:14:de:8c:96:4c:42: bf:e3:09:9d:08:0c:9b:9d:b6:3b:aa:24:73:76:78: 48:c6:7e:e5:6a:79:9a:66:3d:5d:90:4e:0c:3b:cb: 31:67:79:fb:d6:66:46:53:4e:97:5e:86:f5:23:e5: 94:5d:0a:dc:92:ee:8e:a4:f4:44:83:a7:ac:8d:86: d2:92:5c:cd:f7:8d:f2:83:d9:65:fa:c9:4c:f4:2e: 71:2a:1b:1c:d0:b2:1e:82:fd:5c:52:7b:77:89:84: 3b:6a:55:67:17:4a:0c:e9:96:2d:1f:26:1d:9f:60: 06:96:fe:ae:03:0a:d6:d3:57:47:02:e3:24:65:53: f1:14:52:76:75:3a:21:f3:2f:59:89:f1:7c:d7:3e: 03:09:b9:b7:6b:b8:35:bd:bf:12:c9:a8:7b:8c:5e: 3c:45:b1:da:6b:ee:23:14:03:66:f2:7d:0f:6e:0c: 9d:75:ba:08:b3:ec:18:98:93:31:1a:7f:ab:f8:e3: ec:a7:ff:f8:87:14:0e:0b:05:01:c1:e9:a5:83:f4: 8a:ee:b4:82:e6:b1:cb:fa:dc:af:a7:df:3f:c0:e7: 04:c2:49:0b:e5:c0:00:a7:9e:13:af:66:76:fe:87: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 56868 sbgp-ipAddrBlock: critical IPv4: 82.158.128.0/19 151.158.4.0/23 151.158.10.0/23 151.158.36.0/23 151.158.42.0/23 212.117.48.0/20 IPv6: 2001:7fa:2::/48 Signature Algorithm: sha256WithRSAEncryption 6f:77:45:fc:a4:89:e3:6d:7e:b5:d2:ee:0c:3d:b4:fc:c3:78: b6:22:62:73:db:48:be:1d:3a:f2:8c:37:20:5f:95:75:08:94: a9:41:cb:ff:2d:cc:96:43:0f:3e:3c:99:36:cf:2b:6f:fe:63: 7a:a8:88:8e:38:10:73:67:f3:76:96:0d:93:71:1a:3d:d8:8c: 0f:3b:78:78:30:f5:6b:59:c3:e1:c7:65:58:f0:54:c1:73:d2: f3:f5:d4:42:db:d6:fd:60:96:a8:bf:47:f2:a9:92:b3:2b:7c: de:0a:3e:b6:f8:cc:14:86:81:e1:0f:d3:d3:eb:7e:ab:84:aa: 8f:2a:c2:d1:85:d9:05:32:9d:d2:1d:33:75:1a:71:d9:ef:63: 3d:7d:3c:fc:09:c4:55:89:79:3f:75:35:59:18:06:d7:6c:b0: be:27:8f:3e:13:48:0a:d0:52:c2:5c:1a:23:71:c6:cc:39:44: d5:60:77:38:73:f4:49:72:c3:de:3d:29:3a:b3:c5:3b:3e:9b: b8:43:cb:a3:8d:2f:93:7d:be:3c:fe:b0:18:aa:3f:b9:02:c5: 6d:0a:25:a8:f3:1c:15:87:14:59:37:38:fd:ed:c6:c6:1f:26: 19:95:30:22:7f:a8:9b:8b:88:38:16:ef:7d:7a:6a:0e:9d:fb: 42:04:0d:13 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgICT3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTE4MTMyNzM4WhcNMjYwODMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE4NjIxNDExMC8GA1UEBRMoREQ0OTMwRTNFNDJERkUzQkZGRjQ4MUIx Nzk3NzBEMUFCMTU3NUJDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOkQSMR3H6KzJXQIbQiekfKp+a+l9kNQFN6MlkxCv+MJnQgMm522O6okc3Z4SMZ+ 5Wp5mmY9XZBODDvLMWd5+9ZmRlNOl16G9SPllF0K3JLujqT0RIOnrI2G0pJczfeN 8oPZZfrJTPQucSobHNCyHoL9XFJ7d4mEO2pVZxdKDOmWLR8mHZ9gBpb+rgMK1tNX RwLjJGVT8RRSdnU6IfMvWYnxfNc+Awm5t2u4Nb2/Esmoe4xePEWx2mvuIxQDZvJ9 D24MnXW6CLPsGJiTMRp/q/jj7Kf/+IcUDgsFAcHppYP0iu60guaxy/rcr6ffP8Dn BMJJC+XAAKeeE69mdv6Ha+0CAwEAAaOCAz4wggM6MB0GA1UdDgQWBBTdSTDj5C3+ O//0gbF5dw0asVdbwzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvRDc4NTk5QkMzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg2MjE0L0Q3ODU5OUJDMzMxQTExRTRBRjJBQjM3Q0M0RjlBRTAyLzNVa3c0LVF0 X2p2XzlJR3hlWGNOR3JGWFc4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA3iQwTgYIKwYBBQUHAQcBAf8EPzA9MCoEAgABMCQDBAVSnoADBAGXngQD BAGXngoDBAGXniQDBAGXnioDBATUdTAwDwQCAAIwCQMHACABB/oAAjANBgkqhkiG 9w0BAQsFAAOCAQEAb3dF/KSJ421+tdLuDD20/MN4tiJic9tIvh068ow3IF+VdQiU qUHL/y3MlkMPPjyZNs8rb/5jeqiIjjgQc2fzdpYNk3EaPdiMDzt4eDD1a1nD4cdl WPBUwXPS8/XUQtvW/WCWqL9H8qmSsyt83go+tvjMFIaB4Q/T0+t+q4SqjyrC0YXZ BTKd0h0zdRpx2e9jPX08/AnEVYl5P3U1WRgG12ywviePPhNICtBSwlwaI3HGzDlE 1WB3OHP0SXLD3j0pOrPFOz6buEPLo40vk32+PP6wGKo/uQLFbQolqPMcFYcUWTc4 /e3Gxh8mGZUwIn+om4uIOBbvfXpqDp37QgQNEw== -----END CERTIFICATE-----Generated at Wed Jan 21 06:11:06 2026 by rpki-client