This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer (raw, json) Hash identifier: 6DLj/3jSHjCYezYP6aCDLQzjps9y3Uf7GpFQ5CIBgqY= Subject key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7135 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 06:27:36 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.226.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28981 (0x7135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 31 06:27:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:aa:6c:8c:0a:8e:56:68:75:de:9a:20:94:cd: 43:7f:45:76:b9:79:78:31:7f:05:cc:d5:67:29:26: d0:cc:2b:15:50:3a:d2:fd:e5:72:48:19:66:d8:8f: f5:98:2d:e5:9c:80:63:1c:34:bd:ac:1a:9c:d1:62: d6:10:25:0c:ec:d4:99:b7:36:f6:61:21:a5:6b:ac: 8f:7c:f8:a7:2c:e8:87:34:3e:38:56:5f:a2:f9:4c: ad:3f:37:ad:b6:16:18:9b:12:b6:49:75:5b:42:9b: ea:a6:3d:98:1f:61:4c:44:d4:71:70:c9:7f:2a:6a: db:c5:60:b2:27:b3:78:35:c2:bb:4e:70:91:2d:3a: 81:a8:12:9a:4c:0f:b8:35:d6:c4:4d:32:02:fe:6d: 32:1b:81:f7:d6:a8:ad:d2:90:65:91:81:74:3c:df: 29:24:1f:3c:3b:5a:97:0a:9e:11:ec:b1:74:84:dc: d8:09:4c:4e:51:46:a2:6a:f9:4c:3a:47:7b:78:0e: 52:9f:52:56:2d:dc:d8:c3:3f:3b:2c:87:1b:76:fd: 32:c0:dc:7c:6a:33:a0:7a:28:54:91:0e:3a:a9:ae: 61:29:89:5f:eb:08:97:e0:1b:bf:79:9e:da:d7:5d: 21:b1:a4:fc:b9:60:fc:a0:95:05:c3:16:46:13:15: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.226.0/23 Signature Algorithm: sha256WithRSAEncryption a7:43:6f:da:bc:7a:56:b1:d0:71:b9:57:a3:6d:62:23:95:74: df:4b:32:4f:c9:49:9b:ec:df:69:5c:ea:6c:3c:00:7e:39:ac: dc:d3:7c:f9:af:34:db:99:b2:a2:06:ec:75:6b:37:a5:88:7d: 71:f1:17:f9:b4:6e:aa:91:9f:c9:a7:00:eb:18:f6:c8:d2:79: bb:7e:9c:a6:41:d6:bb:de:a7:45:ca:ff:96:c0:e6:05:4d:83: 85:91:4d:5e:4f:cd:b4:14:b2:43:64:3b:d3:15:f1:ec:86:a7: ec:7d:6f:26:01:86:8f:71:94:4a:84:73:12:cf:e5:36:30:6c: 1e:29:e0:2d:64:aa:ff:96:4a:a9:95:ea:3c:bf:36:55:d2:08: 46:37:84:a7:cf:e9:78:e4:52:d7:8d:07:f8:78:24:4f:2b:cd: 87:b6:50:e9:eb:c6:d3:96:7d:98:8c:1b:35:48:e0:fb:c4:b8: 5c:64:a9:6e:8f:d6:12:bc:95:23:07:cb:23:a6:d5:be:7d:a4: 5e:78:dd:45:1c:6a:54:2b:93:f9:80:ab:5e:37:80:66:0c:14: 55:7e:13:b9:66:0f:0e:7c:57:ab:de:da:9b:e1:d3:30:af:60: 03:29:36:53:21:d6:d5:0c:da:00:68:ea:5c:b8:78:c7:ae:21: 81:e6:86:00 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjMxMDYyNzM2WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFERjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEy NEI1MTA3QzQ0MDU3M0M2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOWqbIwKjlZodd6aIJTNQ39Fdrl5eDF/BczVZykm0MwrFVA60v3lckgZZtiP9Zgt 5ZyAYxw0vawanNFi1hAlDOzUmbc29mEhpWusj3z4pyzohzQ+OFZfovlMrT83rbYW GJsStkl1W0Kb6qY9mB9hTETUcXDJfypq28VgsiezeDXCu05wkS06gagSmkwPuDXW xE0yAv5tMhuB99aordKQZZGBdDzfKSQfPDtalwqeEeyxdITc2AlMTlFGomr5TDpH e3gOUp9SVi3c2MM/OyyHG3b9MsDcfGozoHooVJEOOqmuYSmJX+sIl+Abv3me2tdd IbGk/Llg/KCVBcMWRhMVoWMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQY6Sl6HxoY y4eafhJLUQfEQFc8YzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYxOTUvNkI2NjY5MEE5MzhBMTFGMEJCRDYyMzg1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURGMTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhh R011SG1uNFNTMUVIeEVCWFBHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/4jANBgkqhkiG9w0BAQsFAAOCAQEAp0Nv2rx6VrHQcblXo21i I5V030syT8lJm+zfaVzqbDwAfjms3NN8+a8025myogbsdWs3pYh9cfEX+bRuqpGf yacA6xj2yNJ5u36cpkHWu96nRcr/lsDmBU2DhZFNXk/NtBSyQ2Q70xXx7Ian7H1v JgGGj3GUSoRzEs/lNjBsHingLWSq/5ZKqZXqPL82VdIIRjeEp8/peORS140H+Hgk TyvNh7ZQ6evG05Z9mIwbNUjg+8S4XGSpbo/WEryVIwfLI6bVvn2kXnjdRRxqVCuT +YCrXjeAZgwUVX4TuWYPDnxXq97am+HTMK9gAyk2UyHW1QzaAGjqXLh4x64hgeaG AA== -----END CERTIFICATE-----Generated at Sun Jan 18 01:54:04 2026 by rpki-client