This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer (raw, json) Hash identifier: XGrA74LaDuUXESwC7ltj8UEY7bthZeCFkNXKEEQCGpM= Subject key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F5E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 07:26:12 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 151.158.22.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20318 (0x4f5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 15 07:26:12 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:35:80:05:5a:5a:45:4b:cb:42:56:85:07:34: a8:c4:42:f1:31:b5:85:b0:f0:f4:2a:17:bd:f7:13: f4:4a:5a:aa:2f:ec:6c:3a:35:36:ca:28:24:f5:a9: 9b:48:a1:48:36:38:79:f0:2e:dd:c2:63:2c:ff:b9: 04:86:c7:6c:9b:4c:bb:3b:35:d1:34:fa:b4:57:6c: af:f7:d4:62:82:05:4a:ad:f6:84:be:91:81:a5:15: e9:54:98:95:60:76:cb:2b:51:11:a9:96:17:36:c2: 13:0d:e1:60:05:e7:4a:5d:ba:ec:85:7b:da:d0:a3: c6:e9:cc:34:0d:9a:af:bb:5b:cb:e4:81:5a:65:5f: 93:66:7c:7d:4f:0c:b3:25:b5:c0:9d:20:bf:67:cc: 07:2b:97:f2:7d:62:be:24:9c:76:70:03:0c:55:94: 38:7a:84:e4:b4:f3:02:45:02:9c:00:c0:0e:65:fd: e1:c5:ba:8c:cc:33:64:30:b3:38:d3:74:da:c5:02: d7:9c:a5:92:57:46:3f:8b:4f:7c:d5:05:c0:8a:36: ca:27:4d:6e:7b:f0:4a:39:82:22:b9:46:35:25:ce: f6:84:e0:0e:d2:62:0f:ba:e9:72:82:04:8c:8b:02: 8b:ad:de:7d:51:72:72:1f:a9:1a:99:86:04:22:bc: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.158.22.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:28:03:72:5a:8c:7a:24:36:c1:40:a9:05:fe:8f:c1:a8:6f: b3:d3:8f:c2:29:7d:3a:28:8e:2a:b8:68:f5:b4:4f:e5:db:6b: 15:d5:75:de:0e:fc:4b:81:d7:d7:38:eb:b3:81:3e:03:89:37: e4:5a:39:e0:ca:bc:f8:00:26:ff:23:fd:ce:4c:0a:60:00:2c: 12:7d:2c:3b:35:37:8b:62:3f:ac:08:06:c7:6c:32:83:ea:bd: 6b:11:2e:7d:3f:ed:e1:b9:76:0a:68:de:0e:61:e1:67:d2:e7: 6d:7f:60:8c:df:8e:18:5e:a0:cd:57:60:f4:67:6c:50:07:c8: a5:4c:51:20:9a:2f:0a:89:94:e7:be:ad:19:39:62:86:a1:3f: 4b:8f:c6:cf:93:32:bb:09:16:01:6e:0c:58:29:eb:96:12:0a: ca:29:20:18:ec:0d:58:ad:fa:f2:7f:0b:07:26:7e:a6:d6:44: cf:e7:0f:26:d7:f1:db:d4:4f:e9:d2:05:3d:ac:88:8e:47:a0: 02:c7:65:74:ac:43:c2:16:02:57:64:15:0a:73:20:da:23:e8: 5d:01:c1:88:98:08:d7:7a:78:1d:d5:47:4a:37:f5:eb:9b:f9: 44:f4:99:b7:60:36:c4:b0:f2:83:da:2b:20:7b:1b:0d:8a:04: fe:5d:86:06 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICT14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTE1MDcyNjEyWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDRENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4 NUQyNTkyOTM2QUQ3QjI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOg1gAVaWkVLy0JWhQc0qMRC8TG1hbDw9CoXvfcT9Epaqi/sbDo1NsooJPWpm0ih SDY4efAu3cJjLP+5BIbHbJtMuzs10TT6tFdsr/fUYoIFSq32hL6RgaUV6VSYlWB2 yytREamWFzbCEw3hYAXnSl267IV72tCjxunMNA2ar7tby+SBWmVfk2Z8fU8MsyW1 wJ0gv2fMByuX8n1iviScdnADDFWUOHqE5LTzAkUCnADADmX94cW6jMwzZDCzONN0 2sUC15ylkldGP4tPfNUFwIo2yidNbnvwSjmCIrlGNSXO9oTgDtJiD7rpcoIEjIsC i63efVFych+pGpmGBCK85DMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTfDVDH7isR dtWNGNhdJZKTateyRjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0RDRjUvNzVGRTZGNEFGMUUzMTFGMEJERUM3MkI1NDE2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNEQ0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRy RVhiVmpSallYU1dTazJyWHNrWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZeeFjANBgkqhkiG9w0BAQsFAAOCAQEAnSgDclqMeiQ2wUCpBf6P wahvs9OPwil9OiiOKrho9bRP5dtrFdV13g78S4HX1zjrs4E+A4k35Fo54Mq8+AAm /yP9zkwKYAAsEn0sOzU3i2I/rAgGx2wyg+q9axEufT/t4bl2CmjeDmHhZ9LnbX9g jN+OGF6gzVdg9GdsUAfIpUxRIJovComU576tGTlihqE/S4/Gz5MyuwkWAW4MWCnr lhIKyikgGOwNWK368n8LByZ+ptZEz+cPJtfx29RP6dIFPayIjkegAsdldKxDwhYC V2QVCnMg2iPoXQHBiJgI13p4HdVHSjf165v5RPSZt2A2xLDyg9orIHsbDYoE/l2G Bg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:27 2026 by rpki-client