This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer File: 1pe7bz-Z6USA7gu609JoAKtBYmA.cer (raw, json) Hash identifier: 95I7aqa7qDZ5VVrFMm6oDMzHKGqDwp5iWJnPMigG2Tg= Subject key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7106 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft caRepository: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 08:09:20 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: IP: 128.106.0.0/16 IP: 160.213.32.0/21 IP: 160.213.52.0 -- 160.213.63.255 IP: 160.213.84.0/22 IP: 160.213.92.0 -- 160.213.101.255 IP: 160.213.106.0/23 IP: 160.213.120.0 -- 160.213.147.255 IP: 160.213.156.0 -- 160.213.171.255 IP: 160.213.184.0/21 IP: 160.213.216.0 -- 160.213.255.255 IP: 165.21.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28934 (0x7106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 08:09:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:3c:56:75:87:b9:9e:3b:7d:8b:29:ef:36: 52:13:6d:5a:0b:c5:29:ef:b2:bb:28:38:03:0b:fc: e1:50:36:77:3c:61:2d:86:2b:5d:f8:74:78:11:b9: 2d:44:7c:0b:d0:32:b9:75:54:9b:5a:59:79:df:6c: 18:cb:4c:16:e5:59:17:62:23:7c:bb:a4:47:1e:44: b4:bc:b6:36:45:b6:6c:e3:8d:ca:39:d0:78:51:da: e1:56:fe:8c:60:64:07:cb:1a:e5:5a:2e:eb:eb:62: ba:27:e6:1c:5d:fd:f4:cb:6c:58:16:23:43:7d:c5: d3:86:a4:06:f9:e8:f3:f8:67:a2:9a:30:ef:93:a9: cd:17:8a:29:7e:f6:4a:02:86:dc:bd:6a:02:bf:ac: 7e:51:15:e5:b3:d8:33:1e:14:0a:50:6f:58:ad:86: 31:f1:91:e1:0a:0e:8f:2e:e9:4d:c9:25:ec:af:cf: a6:8c:a0:16:ca:fb:61:b7:35:41:9b:28:74:55:cd: 71:5d:e8:f3:de:38:38:63:58:42:a2:a7:8e:f9:eb: 7d:da:8a:fb:04:b5:56:aa:1d:34:3a:07:a3:aa:4e: dc:55:61:5f:4b:85:b5:ac:fd:52:1e:57:c0:19:73: 57:03:f2:a0:56:a5:81:30:d2:7f:c0:a4:b4:77:af: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.106.0.0/16 160.213.32.0/21 160.213.52.0-160.213.63.255 160.213.84.0/22 160.213.92.0-160.213.101.255 160.213.106.0/23 160.213.120.0-160.213.147.255 160.213.156.0-160.213.171.255 160.213.184.0/21 160.213.216.0-160.213.255.255 165.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:3e:ff:d8:31:1c:19:7e:c7:12:c7:8e:a9:09:99:c4:00:03: e9:c6:90:fd:7f:af:26:01:39:44:e8:ec:be:f2:bf:45:67:38: 4e:e9:a7:61:f1:9d:4f:0a:8f:6a:81:a6:c8:ef:35:14:78:5d: 5e:aa:6d:49:9e:c1:e0:64:1d:b4:38:99:a7:e9:c4:00:84:91: 83:c7:4d:30:c9:d0:3b:94:e3:0d:3e:c8:8e:cd:a1:04:b6:a9: 86:02:f1:91:3e:41:a6:5e:c3:2f:c3:b3:13:a2:89:aa:5c:4f: f3:7f:11:61:81:9b:ab:30:13:f8:ea:17:de:3e:ff:f4:12:03: 6d:8a:61:25:0b:a5:62:38:d0:c1:3c:1e:42:f5:6e:24:53:53: c6:0e:09:0d:9f:6b:d0:1a:68:3b:a6:3e:c8:56:25:5c:b3:0a: ec:31:31:80:de:14:de:cb:0f:c6:20:a2:14:d8:33:2c:a4:d5: 0e:59:41:cd:29:63:31:81:c1:6f:7d:5e:ad:fa:62:aa:e0:d8: 2c:15:1e:4e:a3:d2:19:a1:26:c0:f5:a9:23:cb:b3:ab:23:ac: 70:af:2c:51:6c:97:4c:dc:ad:d4:1f:67:cf:1c:ce:40:23:8c: c7:d9:ac:f0:79:47:96:da:34:01:f5:97:11:5b:1a:fe:bc:83: 88:85:51:49 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgICcQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MDgwOTIwWhcNMjYxMDMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1Rjg5QzExMC8GA1UEBRMoRDY5N0JCNkYzRjk5RTk0NDgwRUUwQkJB RDNEMjY4MDBBQjQxNjI2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMaQPFZ1h7meO32LKe82UhNtWgvFKe+yuyg4Awv84VA2dzxhLYYrXfh0eBG5LUR8 C9AyuXVUm1pZed9sGMtMFuVZF2IjfLukRx5EtLy2NkW2bOONyjnQeFHa4Vb+jGBk B8sa5Vou6+tiuifmHF399MtsWBYjQ33F04akBvno8/hnopow75OpzReKKX72SgKG 3L1qAr+sflEV5bPYMx4UClBvWK2GMfGR4QoOjy7pTckl7K/PpoygFsr7Ybc1QZso dFXNcV3o8944OGNYQqKnjvnrfdqK+wS1VqodNDoHo6pO3FVhX0uFtaz9Uh5XwBlz VwPyoFalgTDSf8CktHevZUkCAwEAAaOCA1UwggNRMB0GA1UdDgQWBBTWl7tvP5np RIDuC7rT0mgAq0FiYDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVGODlDLzVCMDdGM0FDMUQ4MzExRTI5QjM1QTVEODA4QjAyQ0QyLzFwZTdiei1a NlVTQTdndTYwOUpvQUt0QlltQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCBgAYIKwYBBQUHAQcBAf8EcTBv MG0EAgABMGcDAwCAagMEA6DVIDAMAwQCoNU0AwQGoNUAAwQCoNVUMAwDBAKg1VwD BAGg1WQDBAGg1WowDAMEA6DVeAMEAqDVkDAMAwQCoNWcAwQCoNWoAwQDoNW4MAsD BAOg1dgDAwGg1AMDAKUVMA0GCSqGSIb3DQEBCwUAA4IBAQCnPv/YMRwZfscSx46p CZnEAAPpxpD9f68mATlE6Oy+8r9FZzhO6adh8Z1PCo9qgabI7zUUeF1eqm1JnsHg ZB20OJmn6cQAhJGDx00wydA7lOMNPsiOzaEEtqmGAvGRPkGmXsMvw7MToomqXE/z fxFhgZurMBP46hfePv/0EgNtimElC6ViONDBPB5C9W4kU1PGDgkNn2vQGmg7pj7I ViVcswrsMTGA3hTeyw/GIKIU2DMspNUOWUHNKWMxgcFvfV6t+mKq4NgsFR5Oo9IZ oSbA9akjy7OrI6xwryxRbJdM3K3UH2fPHM5AI4zH2azweUeW2jQB9ZcRWxr+vIOI hVFJ -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:34 2026 by rpki-client