This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer File: HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer (raw, json) Hash identifier: 3kmxQJvgVJzxtp7Vnc+YtcKphFLJyx7OWnrwvwjJ4HE= Subject key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70EB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft caRepository: rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 26 Dec 2025 19:33:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.212.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28907 (0x70eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 26 19:33:15 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:b2:d2:98:f2:6b:52:ef:67:76:b7:3a:10: 49:87:d6:ee:67:57:2c:8f:79:84:33:c0:bb:8b:3e: 64:d6:d3:eb:15:75:05:b6:e3:fe:5e:49:d3:58:71: c1:8b:85:7e:82:bf:5d:fe:eb:3c:29:b6:67:fb:ff: 76:99:e6:5d:ce:dd:e7:3d:a7:67:15:df:7a:c3:eb: b2:21:28:c8:ac:b4:66:bb:bb:b5:61:89:79:34:c6: c3:0d:93:a6:4b:93:80:c8:94:35:91:0b:62:53:07: 85:ff:0e:d2:99:5a:84:38:c8:1e:30:ea:ff:d9:01: 37:fc:ae:e3:1f:eb:d1:b8:2f:db:cb:e4:e3:61:09: f6:9e:52:b7:6e:14:fa:19:8b:f2:43:e8:1e:7b:ef: 92:f0:d9:e5:ae:5f:76:fd:b4:f4:0b:a4:14:f8:9e: 8a:58:b7:71:5f:85:68:93:9c:a1:cb:7c:62:ce:6e: 21:9d:26:89:a8:0d:3d:08:87:6f:3f:4c:27:10:8d: 21:8d:5a:6f:bc:2b:28:29:e5:d2:fb:07:0e:a0:b8: 9e:75:99:7b:05:24:08:38:42:a8:63:5b:cd:14:84: b6:87:79:07:8d:30:81:d1:52:6a:7d:e9:b3:8e:53: 28:cb:57:3c:4d:ac:3e:89:84:78:a9:47:ad:bd:7e: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.212.0/23 Signature Algorithm: sha256WithRSAEncryption 66:06:c2:10:9b:61:95:ce:21:f2:27:53:0f:69:a4:b7:a8:2b: e1:63:27:00:d3:49:fa:62:7b:7f:31:08:2f:64:db:9d:59:15: 6e:a7:6d:26:f4:50:cd:7d:b5:ba:3f:31:26:77:05:d2:74:7f: 72:36:a7:38:11:47:14:7f:6e:c8:53:c6:15:5c:cf:fb:5e:43: ef:3a:1f:f0:89:08:5b:0d:df:92:b6:63:1d:6e:3e:6d:53:c6: ec:ab:56:0e:c0:04:ca:22:52:52:c4:60:ae:3c:d0:88:52:a5: 2a:1a:6b:bc:16:fb:b3:c5:d0:5c:ea:c1:a4:aa:6b:c1:d1:88: 23:98:4e:67:e8:1e:e9:33:01:34:76:07:b2:df:58:d6:54:04: 20:6f:d1:ea:33:03:69:68:5c:58:12:58:96:62:47:21:ca:eb: d0:7c:b5:a2:28:75:7d:ab:6e:7d:47:52:fc:7e:dc:51:f6:99: e8:fc:99:7e:ad:be:5d:bc:e1:47:08:ec:13:61:05:34:f0:8d: c8:9a:99:1c:69:44:e4:dd:60:21:7a:52:7a:7d:7a:01:5a:0d: b0:02:f2:74:96:ce:95:2e:29:93:3e:27:67:b4:10:ca:18:2b: ed:4b:06:be:ad:c0:cc:82:d0:f6:6d:7f:19:b7:0e:72:61:10: 46:5d:0d:fb -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI2MTkzMzE1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTExQkQ2RTExMC8GA1UEBRMoMUVFQzA3OENCNkJBNTI2NjAzQzIwQzhE OTlDM0E3NDYzMUQ5QzE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ4xstKY8mtS72d2tzoQSYfW7mdXLI95hDPAu4s+ZNbT6xV1Bbbj/l5J01hxwYuF foK/Xf7rPCm2Z/v/dpnmXc7d5z2nZxXfesPrsiEoyKy0Zru7tWGJeTTGww2TpkuT gMiUNZELYlMHhf8O0plahDjIHjDq/9kBN/yu4x/r0bgv28vk42EJ9p5St24U+hmL 8kPoHnvvkvDZ5a5fdv209AukFPieili3cV+FaJOcoct8Ys5uIZ0miagNPQiHbz9M JxCNIY1ab7wrKCnl0vsHDqC4nnWZewUkCDhCqGNbzRSEtod5B40wgdFSan3ps45T KMtXPE2sPomEeKlHrb1+hoMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQe7AeMtrpS ZgPCDI2Zw6dGMdnBTzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENkUvQjY1OTc5NENFMjkxMTFGMDk2RTI3RDExNDU2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCRDZFL0I2NTk3OTRDRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL0h1d0hqTGE2 VW1ZRHdneU5tY09uUmpIWndVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP1DANBgkqhkiG9w0BAQsFAAOCAQEAZgbCEJthlc4h8idTD2mk t6gr4WMnANNJ+mJ7fzEIL2TbnVkVbqdtJvRQzX21uj8xJncF0nR/cjanOBFHFH9u yFPGFVzP+15D7zof8IkIWw3fkrZjHW4+bVPG7KtWDsAEyiJSUsRgrjzQiFKlKhpr vBb7s8XQXOrBpKprwdGII5hOZ+ge6TMBNHYHst9Y1lQEIG/R6jMDaWhcWBJYlmJH Icrr0Hy1oih1fatufUdS/H7cUfaZ6PyZfq2+XbzhRwjsE2EFNPCNyJqZHGlE5N1g IXpSen16AVoNsALydJbOlS4pkz4nZ7QQyhgr7UsGvq3AzILQ9m1/GbcOcmEQRl0N +w== -----END CERTIFICATE-----Generated at Sat Jan 10 08:21:21 2026 by rpki-client