This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer File: 7DwKarkc4TMW0oQzDDgovv4qNBM.cer (raw, json) Hash identifier: QdVIsps5Qc1B5uRZm/YUWRFXAUi8MgzuxSYm5eN0PYo= Subject key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7102 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 07:50:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.152.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28930 (0x7102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 07:50:01 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:4d:e5:5a:43:27:71:f0:57:ab:6d:df:93: 84:eb:38:d9:fa:05:a4:6f:2e:42:f3:35:22:e8:83: 7b:cb:43:d4:a5:a1:71:eb:3e:83:48:3f:b1:0c:35: aa:56:51:96:1d:01:38:0b:a9:e7:75:78:e1:87:0a: b9:5e:bc:20:06:16:34:c6:80:c1:f6:5f:74:0e:07: f5:8d:69:ed:9e:9b:ab:2e:7d:30:e5:65:bf:62:52: 13:ca:75:15:d0:4f:83:cc:8d:49:ee:f0:c7:0f:07: 64:da:f0:a1:df:87:8b:9f:a0:a6:94:97:de:42:81: fb:41:42:15:d2:ab:44:a5:50:10:dc:5f:25:a8:4e: bd:33:e1:3a:43:9c:8b:2d:46:80:b4:a9:e1:78:27: db:47:23:58:23:e6:31:bf:7b:8e:0c:94:e3:1a:8b: bf:6a:a5:9f:7c:77:65:d6:38:3b:4f:e9:dd:4a:d9: 45:9d:53:00:07:c1:5c:13:0e:6c:b6:fb:0c:ad:c9: 72:cf:35:46:df:5d:71:e9:23:41:c0:64:f4:eb:29: 0e:00:12:bc:5c:8f:c7:59:e3:b6:b0:40:80:32:2a: f6:55:9d:04:2f:ea:20:11:7c:b5:e8:04:5b:8e:40: 8e:db:0d:e1:7c:ca:57:11:00:c0:f5:57:79:d6:70: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.152.0/23 Signature Algorithm: sha256WithRSAEncryption 63:eb:d3:d4:7d:d2:ac:86:83:76:e3:97:e6:ff:dd:a1:88:cb: c4:91:09:b5:62:39:64:18:01:dd:54:50:c6:b2:d7:b1:24:25: 00:f3:68:ba:46:68:70:7d:0a:3c:99:67:e5:5b:9c:07:71:07: 32:c4:42:3c:a5:95:95:f0:9f:c5:7f:b8:c3:0f:14:dc:d9:26: 0c:98:93:ca:9f:77:06:47:45:3b:3d:72:2d:8e:8c:f9:1c:4b: 32:0a:fb:de:3f:dd:05:e0:c9:2b:41:eb:32:53:17:2a:f8:2f: b8:a6:7e:6d:70:f7:46:ca:c2:05:1d:cb:72:60:06:8d:22:f2: f3:8a:3d:9e:50:b5:c9:f9:9e:8d:b6:17:9c:1f:63:55:20:fb: b9:d5:36:04:91:3f:f0:ac:6e:a8:c1:f9:35:ed:a3:a7:5e:94: a6:32:c1:87:22:fa:64:fa:ac:7f:39:dc:9e:23:cc:e8:e3:97: 8d:1f:ad:46:30:0e:84:e3:3a:a7:27:60:79:ef:36:6b:a0:2a: 04:36:df:ba:b2:49:fc:6d:5e:3a:b2:e8:b8:f3:d8:e1:50:ba: 5b:aa:31:ac:99:37:35:99:02:a6:97:f0:bf:b5:f1:dd:60:a3: c2:30:ba:8f:99:50:75:40:d7:5d:b2:30:7f:53:5e:d9:45:fb: 72:ca:7a:2f -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MDc1MDAxWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5ODhFQjExMC8GA1UEBRMoRUMzQzBBNkFCOTFDRTEzMzE2RDI4NDMz MEMzODI4QkVGRTJBMzQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ1ZTeVaQydx8Ferbd+ThOs42foFpG8uQvM1IuiDe8tD1KWhces+g0g/sQw1qlZR lh0BOAup53V44YcKuV68IAYWNMaAwfZfdA4H9Y1p7Z6bqy59MOVlv2JSE8p1FdBP g8yNSe7wxw8HZNrwod+Hi5+gppSX3kKB+0FCFdKrRKVQENxfJahOvTPhOkOciy1G gLSp4Xgn20cjWCPmMb97jgyU4xqLv2qln3x3ZdY4O0/p3UrZRZ1TAAfBXBMObLb7 DK3Jcs81Rt9dcekjQcBk9OspDgASvFyPx1njtrBAgDIq9lWdBC/qIBF8tegEW45A jtsN4XzKVxEAwPVXedZwFWECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTsPApquRzh MxbShDMMOCi+/io0EzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4RUIvRjg0RUI5RkNFNDhBMTFGMDgzRDExRTZCNDQ2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk4OEVCL0Y4NEVCOUZDRTQ4QTExRjA4M0QxMUU2QjQ0NkY1NkJDLzdEd0thcmtj NFRNVzBvUXpERGdvdnY0cU5CTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPmDANBgkqhkiG9w0BAQsFAAOCAQEAY+vT1H3SrIaDduOX5v/d oYjLxJEJtWI5ZBgB3VRQxrLXsSQlAPNoukZocH0KPJln5VucB3EHMsRCPKWVlfCf xX+4ww8U3NkmDJiTyp93BkdFOz1yLY6M+RxLMgr73j/dBeDJK0HrMlMXKvgvuKZ+ bXD3RsrCBR3LcmAGjSLy84o9nlC1yfmejbYXnB9jVSD7udU2BJE/8KxuqMH5Ne2j p16UpjLBhyL6ZPqsfzncniPM6OOXjR+tRjAOhOM6pydgee82a6AqBDbfurJJ/G1e OrLouPPY4VC6W6oxrJk3NZkCppfwv7Xx3WCjwjC6j5lQdUDXXbIwf1Ne2UX7csp6 Lw== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:42 2026 by rpki-client