This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.cer (raw, json) Hash identifier: EH71vaXDfyuIF5eS9NP+AcCENICsQe35vGnsCKhsFjY= Subject key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7188 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 04:50:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.250.164.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 09:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29064 (0x7188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 5 04:50:03 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:57:8b:1a:26:3c:2b:d2:db:81:47:ec:e1: d6:ff:c7:47:ac:dc:f5:f4:a7:db:91:d6:b2:4a:c7: 0d:14:bf:6f:a3:e3:48:4c:35:2a:3c:10:a9:a6:a9: e7:34:cb:91:de:18:ff:51:4a:c7:03:75:5a:ef:b0: 76:ee:9f:a0:f8:3e:03:5d:31:3f:e1:17:ab:03:3a: f5:3e:31:33:60:97:f3:5f:24:85:77:3a:49:b4:28: ee:b7:e8:64:88:7c:ea:74:50:37:4e:08:1f:b5:ad: e5:fd:35:ad:46:68:9e:8c:3b:f5:78:df:01:6e:c3: 3c:63:0f:e5:76:49:55:27:99:04:de:21:cc:08:81: c6:a2:ee:a4:36:65:3d:32:e1:e4:f4:ed:74:a7:91: 7f:21:90:a2:6e:a9:46:22:5a:43:44:be:d4:c4:21: 15:7d:97:7e:f1:e5:52:66:80:20:54:9e:af:4d:34: b0:a6:a7:e6:38:8a:95:34:47:b6:0c:90:97:ed:76: 5a:41:cc:9e:13:5e:1d:e7:71:41:07:8c:47:53:1e: a6:47:7c:61:81:95:81:b7:a7:61:3a:b2:69:91:eb: 94:04:71:8d:17:49:32:07:fa:49:d6:c5:f8:a4:93: b4:00:85:35:10:eb:c5:93:0e:1b:25:31:1a:f9:3e: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.164.0/23 Signature Algorithm: sha256WithRSAEncryption c2:4b:90:26:e9:50:32:d9:37:a5:6b:f3:ca:03:47:e6:9e:87: ff:a1:c9:0a:82:17:c9:ab:3e:1a:ad:fe:16:6a:e9:5d:ec:61: 82:68:13:1e:ea:5a:f2:43:65:01:73:02:31:c0:f9:51:99:12: 33:5f:84:4c:d5:9b:6b:e5:c4:98:9b:6e:30:ec:1f:ac:9d:4d: 45:fa:f1:e5:90:9d:fa:10:cd:68:95:f5:cb:d4:b4:89:2b:21: 52:03:1c:df:0f:5e:55:18:fe:3e:af:78:38:27:e1:50:42:6e: b3:c6:3a:16:ba:96:29:0b:2b:75:c2:f6:10:21:b8:e7:39:1a: 21:d8:37:0d:b5:71:6a:72:54:96:d4:cc:60:83:04:e2:95:8a: d3:8e:89:d6:f1:04:90:9c:d0:12:c4:0a:a2:fc:09:6f:b2:58: c1:4b:3b:52:aa:db:b5:9f:9c:87:48:fd:ec:ac:1b:3a:a6:6a: 88:05:5d:c6:b7:a5:0d:46:35:c0:7b:a5:d5:61:3f:7d:75:9a: 6f:30:5b:c1:ab:06:cc:36:81:7a:00:03:a6:69:62:05:6f:2a: 9e:18:b9:c8:3d:06:c2:fd:40:c4:be:cf:b0:27:2a:02:7a:02: 7f:c5:f9:7c:1e:7d:63:17:8e:c1:67:67:c3:c0:2b:03:2a:52: 00:6b:83:23 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA1MDQ1MDAzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFEODM3QjExMC8GA1UEBRMoRkEyMjgwMUM1MkFFMkE1RkM0OTFCN0NC RUJFNjhFRkNBMkM4RDFEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKwxV4saJjwr0tuBR+zh1v/HR6zc9fSn25HWskrHDRS/b6PjSEw1KjwQqaap5zTL kd4Y/1FKxwN1Wu+wdu6foPg+A10xP+EXqwM69T4xM2CX818khXc6SbQo7rfoZIh8 6nRQN04IH7Wt5f01rUZonow79XjfAW7DPGMP5XZJVSeZBN4hzAiBxqLupDZlPTLh 5PTtdKeRfyGQom6pRiJaQ0S+1MQhFX2XfvHlUmaAIFSer000sKan5jiKlTRHtgyQ l+12WkHMnhNeHedxQQeMR1Mepkd8YYGVgbenYTqyaZHrlARxjRdJMgf6SdbF+KST tACFNRDrxZMOGyUxGvk+QMMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT6IoAcUq4q X8SRt8vr5o78osjR2TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgzN0IvMTU4RDdGM0NCOTlDMTFFRjk2MzhGNzY5QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4MzdCLzE1OEQ3RjNDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1 S2xfRWtiZkw2LWFPX0tMSTBkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaD6pDANBgkqhkiG9w0BAQsFAAOCAQEAwkuQJulQMtk3pWvzygNH 5p6H/6HJCoIXyas+Gq3+FmrpXexhgmgTHupa8kNlAXMCMcD5UZkSM1+ETNWba+XE mJtuMOwfrJ1NRfrx5ZCd+hDNaJX1y9S0iSshUgMc3w9eVRj+Pq94OCfhUEJus8Y6 FrqWKQsrdcL2ECG45zkaIdg3DbVxanJUltTMYIME4pWK046J1vEEkJzQEsQKovwJ b7JYwUs7UqrbtZ+ch0j97KwbOqZqiAVdxrelDUY1wHul1WE/fXWabzBbwasGzDaB egADpmliBW8qnhi5yD0Gwv1AxL7PsCcqAnoCf8X5fB59YxeOwWdnw8ArAypSAGuD Iw== -----END CERTIFICATE-----Generated at Thu Feb 5 12:23:48 2026 by rpki-client