This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer File: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer (raw, json) Hash identifier: l5qNx6pMZBKP+XnOCeSFy/geEmaA/C6RKfj4dVBq3ds= Subject key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7201 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 03:26:00 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 192.232.62.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29185 (0x7201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 03:26:00 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:67:5f:62:5b:08:6d:10:fb:71:7b:ac:f3: ff:ef:8a:9f:59:bf:8f:6f:ca:dc:c3:c3:b7:c5:bb: ba:35:89:3a:56:f1:3d:d6:51:b0:c9:46:3a:20:ce: 11:83:b4:b9:b5:63:32:ee:a3:c2:e8:87:59:98:97: 46:19:b1:fe:ec:d5:61:e1:d5:24:dd:d5:82:c1:1a: df:48:6d:6a:a3:6a:62:2f:30:e7:f6:1f:d7:89:23: 7f:12:da:44:d2:c3:f9:55:62:27:b5:aa:4c:80:19: ac:64:97:87:0a:95:a7:d5:74:da:cc:73:1d:30:9f: 6e:4e:ab:42:13:cc:35:9d:8e:74:f3:b6:c6:19:0e: e1:29:7d:8d:47:96:6c:aa:ef:af:f5:21:04:ae:30: 30:2d:2d:04:b7:ea:af:d4:71:7c:e3:2c:db:ff:9e: 86:29:4c:e2:44:89:aa:42:86:a8:8e:c1:98:44:c2: 70:31:33:c4:02:0e:86:ee:e0:8c:b4:2e:89:45:78: a9:cc:b4:7d:00:be:e9:60:ae:0d:50:f9:f8:c1:79: af:06:eb:5d:66:a9:7a:9c:df:47:43:5b:31:7d:e9: 76:c9:00:84:7e:4b:91:f0:26:74:93:fa:5c:5d:85: 9a:6c:4d:0f:34:dc:cf:e3:d5:fa:7b:ee:aa:de:c8: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.232.62.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:84:23:9b:82:2e:35:6b:76:46:ac:98:12:b9:2e:3a:8e:4e: 04:d9:71:4e:e8:52:a0:7c:09:72:29:35:ae:9a:d2:dc:52:31: f4:fa:cb:95:17:4c:91:29:fa:42:5e:ea:81:98:33:99:d0:a4: 58:91:ba:27:ec:b9:d3:27:3a:e7:f5:2b:ff:51:38:77:74:6f: ec:bd:d4:e5:17:d3:c7:66:7e:c2:d7:fa:52:75:f0:94:45:e0: 35:c1:4e:2b:3c:0c:c0:33:0a:f3:a9:56:2d:ee:7e:f0:43:d5: af:fe:36:b1:0f:46:33:a3:b1:bd:d5:fc:10:10:9f:45:72:f9: 72:6c:eb:d3:75:64:9e:83:0d:75:ce:73:43:cb:59:53:04:e6: dc:a5:92:30:25:a4:07:ee:61:3f:74:85:09:16:6d:27:bb:19: d6:55:b9:bd:72:b1:67:e3:56:b0:35:31:6d:24:d9:43:2a:57: b8:13:c4:c2:8b:47:ef:96:79:dc:6b:a1:89:f9:c2:5a:d1:c0: c8:4e:23:8d:02:36:da:5c:a5:62:94:92:ba:ec:6d:41:0e:21: bf:d3:76:d3:fb:a0:11:3c:16:21:30:0d:ff:2d:ee:e3:82:97: 2c:ab:20:58:44:1a:c1:b1:93:fd:65:e5:d4:ec:19:19:89:d4: f5:d8:fa:38 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMDMyNjAwWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFODU1QjExMC8GA1UEBRMoRjIzMjQwODQ4NUNDMUE0MDM4QkRCMzFC RkFGMzI2MTU0MDMxMDk1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOyEZ19iWwhtEPtxe6zz/++Kn1m/j2/K3MPDt8W7ujWJOlbxPdZRsMlGOiDOEYO0 ubVjMu6jwuiHWZiXRhmx/uzVYeHVJN3VgsEa30htaqNqYi8w5/Yf14kjfxLaRNLD +VViJ7WqTIAZrGSXhwqVp9V02sxzHTCfbk6rQhPMNZ2OdPO2xhkO4Sl9jUeWbKrv r/UhBK4wMC0tBLfqr9RxfOMs2/+ehilM4kSJqkKGqI7BmETCcDEzxAIOhu7gjLQu iUV4qcy0fQC+6WCuDVD5+MF5rwbrXWapepzfR0NbMX3pdskAhH5LkfAmdJP6XF2F mmxNDzTcz+PV+nvuqt7I45cCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTyMkCEhcwa QDi9sxv68yYVQDEJUDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg1NUIvNjgwNUMxMjRFRjY2MTFGMDgzM0Q3QjI2NTg2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU4NTVCLzY4MDVDMTI0RUY2NjExRjA4MzNEN0IyNjU4NkY1NkJDLzhqSkFoSVhN R2tBNHZiTWItdk1tRlVBeENWQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcDoPjANBgkqhkiG9w0BAQsFAAOCAQEAjYQjm4IuNWt2RqyYErku Oo5OBNlxTuhSoHwJcik1rprS3FIx9PrLlRdMkSn6Ql7qgZgzmdCkWJG6J+y50yc6 5/Ur/1E4d3Rv7L3U5RfTx2Z+wtf6UnXwlEXgNcFOKzwMwDMK86lWLe5+8EPVr/42 sQ9GM6OxvdX8EBCfRXL5cmzr03VknoMNdc5zQ8tZUwTm3KWSMCWkB+5hP3SFCRZt J7sZ1lW5vXKxZ+NWsDUxbSTZQypXuBPEwotH75Z53GuhifnCWtHAyE4jjQI22lyl YpSSuuxtQQ4hv9N20/ugETwWITAN/y3u44KXLKsgWEQawbGT/WXl1OwZGYnU9dj6 OA== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:44 2026 by rpki-client