This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer (raw, json) Hash identifier: TUmOxu1LKa2P8zhWy1Ugtl+Nn2ygGGJ7KPyQ4QuiLbY= Subject key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 712A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 14:33:02 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 139.59.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28970 (0x712a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 30 14:33:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8c:1e:8f:e7:6d:65:1d:ef:1f:81:52:b1:6e: 13:ba:1a:1b:36:c9:f9:21:5d:86:d0:67:2c:27:75: a0:a5:9b:dc:a9:b8:d0:40:62:2d:b7:92:e7:29:ae: b7:2a:33:cd:cd:54:99:38:9f:5d:97:4d:c9:aa:60: 1b:45:63:dc:56:21:84:c2:a8:16:e4:10:49:9a:2f: 6e:b5:cc:65:26:28:c8:b8:28:67:ed:15:fa:3f:5a: 00:c0:30:e9:76:5a:24:c4:a2:73:82:1e:be:39:96: 91:4d:ba:11:fa:37:2f:90:0a:ad:96:7e:46:59:b1: ef:b5:77:63:3a:8c:7c:7b:03:5c:20:82:51:85:d8: 1f:2c:a7:15:ba:8e:8b:75:fe:97:25:c0:c5:82:92: 89:e6:d8:22:27:57:76:97:c3:44:6d:26:42:12:17: 85:3a:1a:50:bd:2b:57:2f:aa:e6:d1:0e:99:06:18: 1e:01:71:44:89:73:d8:f5:d9:f5:00:e0:00:7b:b5: 66:30:18:3b:6f:32:17:d2:29:9b:b8:7a:ff:e8:43: 69:d8:9a:9b:be:6e:80:fb:2e:5c:29:43:78:97:68: 31:77:5b:e2:b1:b4:d6:4e:dd:79:61:98:4b:0d:ee: bd:51:25:43:d9:b1:4d:ad:f0:c0:f1:08:71:64:17: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:31:8d:96:6f:7e:aa:be:57:e1:00:83:b6:58:0b:e7:0d:69: a2:0c:75:f6:e8:4e:3d:ca:41:9d:1c:53:99:42:2f:19:7c:dd: 0a:57:6a:e5:a9:a4:7f:5e:44:99:98:e6:b8:aa:72:e1:2e:4b: c3:2f:05:6d:20:1c:3f:0d:2a:4d:2c:d2:2d:b3:6f:93:8c:8d: 99:a7:48:25:11:4b:38:bf:7c:4f:e1:c6:72:e7:10:2a:4c:df: 07:a1:6e:43:36:7b:4a:10:56:49:36:0f:71:d7:ed:d9:5b:74: e8:fb:a2:ce:a4:16:22:e3:c9:8e:56:82:07:76:5f:3e:2d:8a: 3f:fd:cd:3d:d6:83:d5:c1:c9:75:78:ec:a7:4d:63:d5:e9:88: 37:14:fc:14:53:78:84:5a:39:23:c1:30:b2:9b:50:76:56:95: d4:44:50:05:d9:35:5d:dd:ef:82:93:ac:7b:24:f3:d7:3c:cd: 62:ac:d4:1a:50:2e:20:d8:e2:e9:82:01:55:b3:00:89:b0:9d: f1:72:39:a3:0c:a3:91:87:cc:a6:0c:fc:ea:7d:e5:f5:fa:fd: 87:34:2c:aa:f4:da:43:db:1e:34:ed:1b:a4:4f:8f:97:f9:f3: d2:a9:ef:94:24:03:57:92:95:60:8c:f1:0a:0a:89:f3:c7:d2: 9d:9f:49:b0 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICcSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjMwMTQzMzAyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFGNkU3RDExMC8GA1UEBRMoMDZERjUyRDI5MTUwM0QwRTJCMTE3MkQz ODVDMkIxODc3OTRDNzlDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APGMHo/nbWUd7x+BUrFuE7oaGzbJ+SFdhtBnLCd1oKWb3Km40EBiLbeS5ymutyoz zc1UmTifXZdNyapgG0Vj3FYhhMKoFuQQSZovbrXMZSYoyLgoZ+0V+j9aAMAw6XZa JMSic4IevjmWkU26Efo3L5AKrZZ+Rlmx77V3YzqMfHsDXCCCUYXYHyynFbqOi3X+ lyXAxYKSiebYIidXdpfDRG0mQhIXhToaUL0rVy+q5tEOmQYYHgFxRIlz2PXZ9QDg AHu1ZjAYO28yF9Ipm7h6/+hDadiam75ugPsuXClDeJdoMXdb4rG01k7deWGYSw3u vVElQ9mxTa3wwPEIcWQXUmECAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQG31LSkVA9 DisRctOFwrGHeUx5xzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZFN0QvMTc1OUU0Qzg4MzgxMTFFQUFDQjlCQzMwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY2RTdELzE3NTlFNEM4ODM4MTExRUFBQ0I5QkMzMEM0RjlBRTAyL0J0OVMwcEZR UFE0ckVYTFRoY0t4aDNsTWVjYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAIs7MA0GCSqGSIb3DQEBCwUAA4IBAQBaMY2Wb36qvlfhAIO2WAvn DWmiDHX26E49ykGdHFOZQi8ZfN0KV2rlqaR/XkSZmOa4qnLhLkvDLwVtIBw/DSpN LNIts2+TjI2Zp0glEUs4v3xP4cZy5xAqTN8HoW5DNntKEFZJNg9x1+3ZW3To+6LO pBYi48mOVoIHdl8+LYo//c091oPVwcl1eOynTWPV6Yg3FPwUU3iEWjkjwTCym1B2 VpXURFAF2TVd3e+Ck6x7JPPXPM1irNQaUC4g2OLpggFVswCJsJ3xcjmjDKORh8ym DPzqfeX1+v2HNCyq9NpD2x407RukT4+X+fPSqe+UJANXkpVgjPEKConzx9Kdn0mw -----END CERTIFICATE-----Generated at Sun Jan 18 01:53:27 2026 by rpki-client