This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer File: 5CANRK2dbstocvZTqVhD-yfYR6Q.cer (raw, json) Hash identifier: UaRT9CEaqtVl2JkirkZxhTa5g1WTqIvfB4AQkZo2sDs= Subject key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71D4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 02:28:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.107.113.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29140 (0x71d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 9 02:28:52 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:47:e6:9f:54:28:69:9c:af:80:42:e5:07:d5: 79:d8:31:73:82:d6:89:36:5a:cd:1a:0b:21:a5:a3: 84:9b:3a:79:b9:66:2e:14:ca:01:24:cb:6a:69:39: 53:35:6e:5e:97:64:a1:cd:14:13:91:19:bb:33:84: 04:ba:85:46:82:e3:b1:ae:f4:84:fc:42:ec:59:28: 7e:06:dd:bf:1d:a1:84:10:cf:6d:ad:00:2e:4e:38: 28:32:27:f4:35:cd:f2:50:6b:e6:66:c3:ba:b6:25: a3:5c:b7:b9:03:81:0f:7e:8d:d6:e0:aa:e6:0a:93: c3:ce:44:58:dd:14:02:02:ce:4c:43:48:46:dc:36: b1:cb:64:eb:68:ba:75:f3:8e:fe:89:c1:ed:5b:08: 02:97:c3:6c:87:73:1b:44:fa:d7:59:49:6e:b5:54: e8:c2:05:5d:38:b9:44:64:12:f6:e9:f8:24:18:93: 9c:9a:bd:86:06:1b:ac:2f:30:5c:04:5c:db:16:83: cb:84:88:69:7f:1d:2c:fa:f2:d2:3d:bb:17:3b:df: d0:13:ae:32:33:75:46:de:63:14:1f:12:63:82:e0: c3:3a:00:0e:c1:f7:08:70:20:98:fb:4b:f2:1e:2d: 1d:df:78:38:ba:5f:60:23:94:e0:ac:1e:1d:18:c9: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.107.113.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:70:7b:b7:88:da:c3:26:c6:df:14:7a:94:4f:c0:8b:ba:6e: d0:a7:a4:fb:97:68:b3:ff:d9:48:cb:23:71:0c:64:fe:47:92: 2c:7f:3d:11:ff:fd:e7:e3:af:02:a5:8a:e7:c7:72:a8:f9:c2: d5:16:1d:9f:87:4e:96:c9:03:c0:ba:5f:23:ab:84:cc:45:2c: 32:35:81:11:9b:34:81:c7:96:dd:1c:ba:e6:3c:3c:fb:24:64: 78:9d:7a:53:df:ba:04:26:5f:15:36:8a:d4:c6:81:19:90:29: 07:51:09:0c:9d:b1:d4:f3:11:70:cb:69:0d:d6:c7:1b:64:04: 26:2a:03:74:47:c6:70:38:10:33:eb:2f:47:e4:7c:0c:a3:2a: 68:31:cc:5e:0c:8c:af:3c:13:8c:02:32:a0:93:72:20:39:fe: c3:dd:21:f3:de:4e:9e:5f:4f:5c:bf:c6:20:57:67:d5:35:c6: e6:91:d1:24:7b:f4:6e:dc:90:a2:84:7c:70:8d:08:03:a6:7f: 31:a6:bb:ea:c3:e7:53:25:17:cc:67:e5:10:66:39:3b:83:fa: 7f:dc:3e:04:78:ff:93:f6:b3:ce:ab:21:4c:7b:32:88:96:fb: c9:65:1a:84:10:b4:1e:b1:5a:21:db:2f:35:77:4b:9a:1d:b3: 91:e5:1f:7b -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA5MDIyODUyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDMEQzNzExMC8GA1UEBRMoRTQyMDBENDRBRDlENkVDQjY4NzJGNjUz QTk1ODQzRkIyN0Q4NDdBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APFH5p9UKGmcr4BC5QfVedgxc4LWiTZazRoLIaWjhJs6eblmLhTKASTLamk5UzVu Xpdkoc0UE5EZuzOEBLqFRoLjsa70hPxC7Fkofgbdvx2hhBDPba0ALk44KDIn9DXN 8lBr5mbDurYlo1y3uQOBD36N1uCq5gqTw85EWN0UAgLOTENIRtw2sctk62i6dfOO /onB7VsIApfDbIdzG0T611lJbrVU6MIFXTi5RGQS9un4JBiTnJq9hgYbrC8wXARc 2xaDy4SIaX8dLPry0j27Fzvf0BOuMjN1Rt5jFB8SY4LgwzoADsH3CHAgmPtL8h4t Hd94OLpfYCOU4KweHRjJ1Q8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTkIA1ErZ1u y2hy9lOpWEP7J9hHpDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBEMzcvMDVFRUNEODY1MzVCMTFFRTlCRjIwQTZCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMwRDM3LzA1RUVDRDg2NTM1QjExRUU5QkYyMEE2QkM0RjlBRTAyLzVDQU5SSzJk YnN0b2N2WlRxVmhELXlmWVI2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMBrcTANBgkqhkiG9w0BAQsFAAOCAQEAf3B7t4jawybG3xR6lE/A i7pu0Kek+5dos//ZSMsjcQxk/keSLH89Ef/95+OvAqWK58dyqPnC1RYdn4dOlskD wLpfI6uEzEUsMjWBEZs0gceW3Ry65jw8+yRkeJ16U9+6BCZfFTaK1MaBGZApB1EJ DJ2x1PMRcMtpDdbHG2QEJioDdEfGcDgQM+svR+R8DKMqaDHMXgyMrzwTjAIyoJNy IDn+w90h895Onl9PXL/GIFdn1TXG5pHRJHv0btyQooR8cI0IA6Z/Maa76sPnUyUX zGflEGY5O4P6f9w+BHj/k/azzqshTHsyiJb7yWUahBC0HrFaIdsvNXdLmh2zkeUf ew== -----END CERTIFICATE-----Generated at Sun Jan 18 01:52:47 2026 by rpki-client