This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer File: Lb_HsoYVsf94189GiGr5ITn_loo.cer (raw, json) Hash identifier: BQq93albIc2KQbbXLAyb+V4GxdfAAmZ3tNjzm52LsTU= Subject key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F0D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 14:15:19 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 82.158.224.0/21 IP: 85.137.240.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20237 (0x4f0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Dec 30 14:15:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:11:f4:fc:32:39:58:c1:a4:2b:7a:4f:97: 12:04:4d:41:c0:c9:4c:f8:3d:0a:6e:3f:b8:c9:32: af:bc:40:e9:94:91:18:2c:25:2f:c9:b0:39:0a:b6: 89:5e:da:4f:52:81:14:6e:25:05:55:78:3c:8e:a5: cf:bd:3b:3a:63:a9:b5:e8:57:90:f7:60:eb:25:04: 70:52:23:51:d6:8d:74:3b:a2:87:e3:83:bb:81:ac: 09:bc:45:8b:9c:76:d7:0b:73:e9:f8:73:09:6c:d2: e1:21:8a:a4:39:e6:b6:00:53:74:a1:6c:59:fd:70: 51:d1:db:73:37:0f:da:50:0c:89:0c:ec:de:b9:ce: 7d:49:26:f4:de:f2:f6:a3:37:42:71:17:f3:ee:f9: b5:8f:f9:67:64:da:fe:a9:8d:74:8c:83:63:01:db: 3b:99:bb:b0:87:0a:cd:65:5b:44:ca:2d:2c:8c:e6: 7b:fb:43:e8:61:84:16:86:f6:d7:c5:24:56:b9:1f: 63:01:ab:93:37:eb:18:2f:b5:65:67:6c:04:a2:76: 99:dd:94:95:05:eb:3a:ae:73:d7:36:c5:5f:f9:e2: 1f:82:ce:d1:38:68:c2:e3:38:63:51:7f:72:b3:22: fc:99:a7:6b:4f:ad:50:a8:65:3d:c0:0c:4e:6a:16: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 82.158.224.0/21 85.137.240.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:85:3f:39:ca:19:9c:56:22:2b:06:f9:d9:4c:cb:26:8d:f4: 33:9b:a1:e2:8b:78:f6:d4:40:0b:f3:23:69:ad:44:ad:71:15: 6e:92:87:36:66:da:13:45:c9:5e:6b:e0:66:18:c9:34:04:b0: 89:1d:f9:86:28:a0:90:0e:eb:0e:7b:84:96:dd:bf:3f:a5:dd: ba:77:f1:06:72:78:45:3a:07:e4:15:ed:05:17:5a:9b:05:8f: b8:4c:ec:bd:ee:ad:4e:48:7c:b6:33:80:72:90:1e:84:e2:bf: b3:c9:67:80:6c:b0:c2:b6:8e:3d:6b:10:6b:5e:07:df:a8:2a: 0a:3f:df:11:08:db:3a:b9:af:23:7b:89:1b:49:e7:e6:a7:4b: 64:0d:0d:a3:5f:4e:0d:1d:0b:bc:4b:4c:ab:5c:e4:d2:65:f1: 90:f1:de:05:d7:cc:e9:38:7d:cf:3f:1c:8e:41:32:ad:06:c1: 1a:0f:74:c3:b9:0c:26:ce:cf:90:8d:00:de:f8:1d:85:47:8b: 3c:19:38:80:cd:c1:12:1e:24:c9:11:b0:f2:c5:5b:19:81:27: cd:6c:7f:cf:70:38:d3:ed:40:28:3b:e0:a0:c4:1d:0f:32:9c: 0a:74:5c:ee:e9:96:79:6d:85:0d:f6:e5:29:a1:5f:a5:01:53: 77:22:53:5a -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICTw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMjMwMTQxNTE5WhcNMjYwNTI4MDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDQ0RBRTExMC8GA1UEBRMoMkRCRkM3QjI4NjE1QjFGRjc4RDdDRjQ2 ODg2QUY5MjEzOUZGOTY4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKTBEfT8MjlYwaQrek+XEgRNQcDJTPg9Cm4/uMkyr7xA6ZSRGCwlL8mwOQq2iV7a T1KBFG4lBVV4PI6lz707OmOptehXkPdg6yUEcFIjUdaNdDuih+ODu4GsCbxFi5x2 1wtz6fhzCWzS4SGKpDnmtgBTdKFsWf1wUdHbczcP2lAMiQzs3rnOfUkm9N7y9qM3 QnEX8+75tY/5Z2Ta/qmNdIyDYwHbO5m7sIcKzWVbRMotLIzme/tD6GGEFob218Uk VrkfYwGrkzfrGC+1ZWdsBKJ2md2UlQXrOq5z1zbFX/niH4LO0ThowuM4Y1F/crMi /Jmna0+tUKhlPcAMTmoWvl0CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQtv8eyhhWx /3jXz0aIavkhOf+WijAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NEQUUvMkZCRUE0MDJDODQyMTFGMEEzM0U5QTdFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNDREFFLzJGQkVBNDAyQzg0MjExRjBBMzNFOUE3RUM0RjlBRTAyL0xiX0hzb1lW c2Y5NDE4OUdpR3I1SVRuX2xvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEA1Ke4AMEA1WJ8DANBgkqhkiG9w0BAQsFAAOCAQEAXoU/OcoZnFYi Kwb52UzLJo30M5uh4ot49tRAC/Mjaa1ErXEVbpKHNmbaE0XJXmvgZhjJNASwiR35 hiigkA7rDnuElt2/P6XdunfxBnJ4RToH5BXtBRdamwWPuEzsve6tTkh8tjOAcpAe hOK/s8lngGywwraOPWsQa14H36gqCj/fEQjbOrmvI3uJG0nn5qdLZA0No19ODR0L vEtMq1zk0mXxkPHeBdfM6Th9zz8cjkEyrQbBGg90w7kMJs7PkI0A3vgdhUeLPBk4 gM3BEh4kyRGw8sVbGYEnzWx/z3A40+1AKDvgoMQdDzKcCnRc7umWeW2FDfblKaFf pQFTdyJTWg== -----END CERTIFICATE-----Generated at Sun Jan 18 10:03:20 2026 by rpki-client