This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer File: 1Y-DTjzFalATaTGkQZnby-WLhEw.cer (raw, json) Hash identifier: AMd3B/qr2zBFvjiMz7aOrx68DoxvJM5zcRe+6A9rpHY= Subject key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71DB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 06:18:36 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 192.232.58.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29147 (0x71db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 9 06:18:36 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:52:40:e6:b9:af:00:af:64:96:a2:0a:4a: 1d:23:7c:9d:b3:f1:ff:e1:c8:8d:1e:40:5c:72:d1: e0:6a:79:5f:c3:6d:3e:5c:d1:7a:dd:c5:ba:25:3d: 3b:d8:a7:fb:70:f4:8b:9b:84:5a:e1:dd:91:11:d0: 7f:66:4c:95:91:dc:94:87:83:18:fb:20:ac:7c:b1: 15:83:55:9a:2d:5e:06:80:3e:4d:15:a0:5a:38:16: 0d:df:e2:aa:9a:c7:ae:1e:18:45:6d:20:a6:5c:98: c6:16:95:88:ec:d6:17:e9:ad:ca:dc:b9:53:03:ea: 60:7c:4f:53:98:6d:bb:25:d6:04:26:28:95:32:21: af:87:a6:8e:f1:46:a8:d3:01:ab:69:2b:75:69:d9: f1:1d:25:8c:5a:f0:e8:08:87:ca:55:6f:d6:4c:46: 64:6a:12:ea:62:e3:d2:69:68:88:0e:9a:ab:52:f6: c9:55:ab:bf:50:9e:a2:2c:80:f3:45:91:88:ff:c5: f0:e8:0b:81:bd:ef:ed:88:30:51:46:5c:5f:66:6c: 98:64:6f:50:d5:8a:f7:a6:e8:d8:c3:de:f0:ad:43: c4:69:2b:87:9c:fb:54:37:b0:fd:bc:3f:15:73:b5: 12:9b:c8:8f:3c:3c:c6:78:98:d9:3d:29:bf:e6:3d: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.232.58.0/23 Signature Algorithm: sha256WithRSAEncryption 49:d9:77:96:a6:9a:8f:c8:b5:9d:3c:b4:a9:33:38:ad:f3:f2: aa:28:6a:9b:6d:02:d3:88:ae:64:6f:cb:77:dd:d7:1d:31:3e: a5:1c:82:46:fc:53:40:9d:30:76:6a:6d:8f:1f:9c:d5:a1:58: ff:d9:17:cd:a4:07:4e:15:18:d7:c2:83:1c:a1:91:8a:17:b9: 35:64:5f:e3:19:d9:e4:d7:db:d0:53:86:6e:f2:61:db:68:72: 14:2f:16:8c:7a:d1:d7:1e:b1:53:57:56:2e:83:52:4e:4f:7b: ed:3c:23:bc:48:f0:fb:56:9b:ed:e3:c1:dc:7a:bb:12:0e:af: 4c:c6:a6:c8:e9:c6:04:de:e5:75:02:0f:42:d1:83:06:f9:d9: ca:8b:87:c3:2b:22:e6:20:96:1f:a3:ec:ae:37:bc:f6:3c:45: 1f:03:af:b2:94:56:c2:91:e7:c6:15:ad:3d:82:71:c1:06:fc: b3:79:35:f4:e4:5e:2d:d3:d2:e7:80:90:ea:d9:3c:21:29:6c: d5:1c:c3:5c:7a:9e:f5:a1:c4:ec:09:60:d8:0b:a9:a0:18:b0: 46:f4:4e:dd:04:d2:68:6e:f8:06:40:79:9f:f9:89:63:c8:23: cd:34:d2:2b:5a:15:74:8d:7a:8f:84:a1:ab:99:ac:e0:1a:3a: 8c:81:20:ed -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA5MDYxODM2WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE3ODk5MjExMC8GA1UEBRMoRDU4RjgzNEUzQ0M1NkE1MDEzNjkzMUE0 NDE5OURCQ0JFNThCODQ0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMCdUkDmua8Ar2SWogpKHSN8nbPx/+HIjR5AXHLR4Gp5X8NtPlzRet3FuiU9O9in +3D0i5uEWuHdkRHQf2ZMlZHclIeDGPsgrHyxFYNVmi1eBoA+TRWgWjgWDd/iqprH rh4YRW0gplyYxhaViOzWF+mtyty5UwPqYHxPU5htuyXWBCYolTIhr4emjvFGqNMB q2krdWnZ8R0ljFrw6AiHylVv1kxGZGoS6mLj0mloiA6aq1L2yVWrv1CeoiyA80WR iP/F8OgLgb3v7YgwUUZcX2ZsmGRvUNWK96bo2MPe8K1DxGkrh5z7VDew/bw/FXO1 EpvIjzw8xniY2T0pv+Y9ALMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTVj4NOPMVq UBNpMaRBmdvL5YuETDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzg5OTIvMDU4NkJFMUNFRDIzMTFGMDlGNTRERjE4NDM2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc4OTkyLzA1ODZCRTFDRUQyMzExRjA5RjU0REYxODQzNkY1NkJDLzFZLURUanpG YWxBVGFUR2tRWm5ieS1XTGhFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcDoOjANBgkqhkiG9w0BAQsFAAOCAQEASdl3lqaaj8i1nTy0qTM4 rfPyqihqm20C04iuZG/Ld93XHTE+pRyCRvxTQJ0wdmptjx+c1aFY/9kXzaQHThUY 18KDHKGRihe5NWRf4xnZ5Nfb0FOGbvJh22hyFC8WjHrR1x6xU1dWLoNSTk977Twj vEjw+1ab7ePB3Hq7Eg6vTMamyOnGBN7ldQIPQtGDBvnZyouHwysi5iCWH6Psrje8 9jxFHwOvspRWwpHnxhWtPYJxwQb8s3k19OReLdPS54CQ6tk8ISls1RzDXHqe9aHE 7Alg2AupoBiwRvRO3QTSaG74BkB5n/mJY8gjzTTSK1oVdI16j4Shq5ms4Bo6jIEg 7Q== -----END CERTIFICATE-----Generated at Sun Jan 18 01:51:34 2026 by rpki-client