This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer File: BoQptByg8Segp10v_LJsA6lfYHE.cer (raw, json) Hash identifier: t/hLlxbItwo8aAPOj9HyS8ofxkAEHGfnAiS/iK5MDV8= Subject key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 709A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 20 Dec 2025 07:48:23 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.156.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28826 (0x709a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 20 07:48:23 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:b5:de:49:1f:e9:c1:e7:dc:6c:10:74:8c: 40:ef:f0:df:c6:63:b6:00:2a:05:d4:b0:8f:d2:ae: b4:a9:0e:47:9a:99:98:08:1f:d4:99:3f:88:43:a8: cc:34:54:4e:ff:33:7f:6c:ef:54:8a:0c:7e:e4:8c: c2:cd:fe:87:f3:0f:ae:17:c4:41:ac:02:e5:38:7c: 4f:32:59:30:90:fa:d7:60:6d:0f:55:cf:05:44:fe: f2:eb:a4:4e:ea:f5:93:a4:49:33:51:9d:24:fc:40: 0d:cd:c6:bb:9c:be:d3:f0:88:14:f0:28:6a:17:ab: aa:0e:6e:64:48:96:7c:17:40:ce:6a:09:32:f1:de: cb:a2:87:0e:cd:01:57:9a:ce:7a:fb:4c:34:3d:75: 63:ed:98:88:9c:18:2c:5e:79:9f:d2:a8:9d:ca:4e: 72:3f:c2:91:7e:5a:c6:46:e9:e4:5d:f6:21:de:3e: 93:59:0c:90:f2:df:51:b3:b2:cf:d8:21:06:53:a0: 38:61:d3:47:4b:3e:76:07:32:00:25:66:df:e7:31: 52:40:c8:d6:a3:b0:87:1b:3b:17:6f:62:ca:a0:21: 33:70:78:4e:0b:12:a1:b1:0b:51:06:c1:13:42:ed: 63:5d:8e:0a:ee:47:d4:d4:42:2a:db:48:d2:62:17: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.156.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:c2:cb:81:3d:df:b3:d4:83:36:89:6d:d4:95:e8:8b:81:11: bd:6f:81:ac:d3:e7:4a:07:7f:27:99:61:1f:d7:08:7e:9c:4b: 95:28:c3:7b:49:dc:1e:41:8f:96:dc:ba:a9:7f:a3:d8:97:3a: c1:3c:bd:ec:4f:70:74:cd:a1:97:3f:b1:1f:56:25:49:b6:a0: 53:a4:b1:d1:81:2b:0b:c8:bf:00:02:3b:02:d5:22:bf:f9:13: f7:c9:df:af:17:fa:bb:e8:77:02:6c:c6:31:f9:85:f2:e9:a2: 69:ef:78:6b:2f:c4:b7:db:33:26:35:3c:3c:e8:17:0b:90:a8: 2f:55:96:59:fc:e7:e1:99:75:36:53:4b:3c:f6:c2:47:0d:be: 7b:24:08:10:da:96:50:3b:81:6b:74:b8:88:ad:39:2d:56:28: 68:28:c1:b6:b9:7d:74:03:e1:ba:e5:76:dc:9a:3f:2c:8c:14: d9:db:a0:63:fe:85:c1:b7:b0:2d:b3:58:28:be:6e:1d:5d:a6: 49:a3:62:1a:5b:5d:85:6f:ea:d3:15:96:38:cc:34:63:98:d0: 75:9d:cf:fd:9f:3c:21:12:8d:b6:d3:55:dd:18:83:34:1b:19: 2b:59:13:a3:e2:51:04:32:dd:a5:5a:02:a6:0a:d7:88:02:30: 55:ac:6f:90 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIwMDc0ODIzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFDQ0FCQjExMC8GA1UEBRMoMDY4NDI5QjQxQ0EwRjEyN0EwQTc1RDJG RkNCMjZDMDNBOTVGNjA3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKNYtd5JH+nB59xsEHSMQO/w38ZjtgAqBdSwj9KutKkOR5qZmAgf1Jk/iEOozDRU Tv8zf2zvVIoMfuSMws3+h/MPrhfEQawC5Th8TzJZMJD612BtD1XPBUT+8uukTur1 k6RJM1GdJPxADc3Gu5y+0/CIFPAoaherqg5uZEiWfBdAzmoJMvHey6KHDs0BV5rO evtMND11Y+2YiJwYLF55n9KoncpOcj/CkX5axkbp5F32Id4+k1kMkPLfUbOyz9gh BlOgOGHTR0s+dgcyACVm3+cxUkDI1qOwhxs7F29iyqAhM3B4TgsSobELUQbBE0Lt Y12OCu5H1NRCKttI0mIXFwUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQGhCm0HKDx J6CnXS/8smwDqV9gcTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NBQkIvNDAzQjBEOEVERDc4MTFGMEE1ODZCMTI4Mzg2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNDQUJCLzQwM0IwRDhFREQ3ODExRjBBNTg2QjEyODM4NkY1NkJDL0JvUXB0Qnln OFNlZ3AxMHZfTEpzQTZsZllIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPnDANBgkqhkiG9w0BAQsFAAOCAQEAasLLgT3fs9SDNolt1JXo i4ERvW+BrNPnSgd/J5lhH9cIfpxLlSjDe0ncHkGPlty6qX+j2Jc6wTy97E9wdM2h lz+xH1YlSbagU6Sx0YErC8i/AAI7AtUiv/kT98nfrxf6u+h3AmzGMfmF8umiae94 ay/Et9szJjU8POgXC5CoL1WWWfzn4Zl1NlNLPPbCRw2+eyQIENqWUDuBa3S4iK05 LVYoaCjBtrl9dAPhuuV23Jo/LIwU2dugY/6FwbewLbNYKL5uHV2mSaNiGltdhW/q 0xWWOMw0Y5jQdZ3P/Z88IRKNttNV3RiDNBsZK1kTo+JRBDLdpVoCpgrXiAIwVaxv kA== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:44 2026 by rpki-client