This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer File: IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer (raw, json) Hash identifier: 5MnckZH8WCyFgooyQM1gIKS99BBtJC8YRE2QI+03Z4E= Subject key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70C4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 14:25:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.194.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28868 (0x70c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 23 14:25:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EA409, serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:3e:a8:aa:67:66:99:76:67:c4:21:07:51: 80:8d:f2:1d:76:ea:d9:0e:ef:f3:e1:de:3d:d2:bd: 09:fb:b7:4f:5c:93:04:8f:d0:b6:43:ef:83:6e:ee: 29:94:33:81:d9:0c:8e:42:a2:69:3a:fc:ee:18:f3: 06:1d:b5:d9:24:cd:5b:71:ec:62:3f:a9:0f:3a:c2: 2a:29:da:b9:ba:2d:51:9c:0c:2c:ee:b1:28:e4:02: 22:fe:84:99:94:76:a9:8f:f8:9d:9a:5a:49:04:1d: 70:3c:7c:1e:c1:86:e0:ae:67:22:9a:fa:7e:71:d4: 16:f0:f4:f9:03:28:4a:b6:7b:13:5c:67:55:a1:33: c9:44:ff:86:b2:16:31:26:6a:e3:28:70:b4:37:82: d8:12:ce:e6:70:5c:54:c1:d6:1b:cb:0b:ce:44:41: a3:f5:0b:28:ba:f0:3f:91:12:e2:77:c2:e4:a8:44: da:09:c9:46:45:05:64:4f:a5:45:28:2e:4e:65:5e: 28:b4:d5:14:5d:f0:e6:af:e1:c0:d0:fb:cf:d5:9d: 35:e1:49:83:5f:33:f2:d0:0a:e3:5a:72:97:e0:0b: a6:a0:b1:72:38:63:cb:cf:57:5c:16:e3:e3:70:7f: 69:04:86:ba:79:4c:b2:0e:37:83:d0:c7:ea:5f:68: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.194.0/23 Signature Algorithm: sha256WithRSAEncryption 46:c6:06:0e:f7:2f:37:2b:4d:48:3b:8a:16:b3:43:23:b3:30: 69:84:da:27:47:c2:f5:20:51:1a:53:88:8b:51:72:cf:50:80: ec:9d:95:41:6e:d0:80:8f:f9:ae:ee:22:9f:7c:8f:3d:b0:7c: 2f:b4:2e:ce:fe:56:d6:a6:62:73:8d:52:45:0b:32:dc:f5:09: 1d:63:63:26:85:55:cf:f6:08:b9:bc:e6:21:26:26:60:c7:f4: d8:23:63:de:39:d2:c2:d0:48:08:f9:40:a9:b0:0e:cb:b2:54: b5:7d:a0:bf:ca:4c:f9:1a:d8:45:2b:93:7c:40:a8:54:0d:06: 4c:30:cd:4f:1c:63:4c:84:4c:85:1d:e2:42:73:42:a3:3d:aa: 79:76:75:b6:ac:92:bc:23:2d:06:22:bc:6a:22:f4:0c:de:d1: 2e:d0:10:30:40:ad:96:c5:70:23:66:b6:0d:53:b7:23:3c:df: ea:4b:6c:2a:2f:b4:82:70:cc:22:5e:fe:19:78:0e:9d:83:f5: 24:42:3d:e7:ee:70:02:78:17:94:72:4e:f6:47:e2:8c:53:21: 52:b3:b1:bf:4d:62:3f:bf:c2:82:06:af:3d:92:c6:2d:ae:97: 2e:28:3f:2d:ba:0b:44:58:b1:4a:b2:4c:d2:96:4d:80:8c:65: 4c:e8:b5:2c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIzMTQyNTIxWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFQTQwOTExMC8GA1UEBRMoMjE2NERENTlBNjE1RDVGMkUzMzkzRTcy MDk4QTczQUQ4NjhFNzhEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ7EPqiqZ2aZdmfEIQdRgI3yHXbq2Q7v8+HePdK9Cfu3T1yTBI/QtkPvg27uKZQz gdkMjkKiaTr87hjzBh212STNW3HsYj+pDzrCKinaubotUZwMLO6xKOQCIv6EmZR2 qY/4nZpaSQQdcDx8HsGG4K5nIpr6fnHUFvD0+QMoSrZ7E1xnVaEzyUT/hrIWMSZq 4yhwtDeC2BLO5nBcVMHWG8sLzkRBo/ULKLrwP5ES4nfC5KhE2gnJRkUFZE+lRSgu TmVeKLTVFF3w5q/hwND7z9WdNeFJg18z8tAK41pyl+ALpqCxcjhjy89XXBbj43B/ aQSGunlMsg43g9DH6l9ocFsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQhZN1ZphXV 8uM5PnIJinOtho542jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE0MDkvRjk0NEUzQ0M5Q0FCMTFFRkFCNTk1NTE2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBNDA5L0Y5NDRFM0NDOUNBQjExRUZBQjU5NTUxNkM0RjlBRTAyL0lXVGRXYVlW MWZMak9UNXlDWXB6cllhT2VOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/wjANBgkqhkiG9w0BAQsFAAOCAQEARsYGDvcvNytNSDuKFrND I7MwaYTaJ0fC9SBRGlOIi1Fyz1CA7J2VQW7QgI/5ru4in3yPPbB8L7Quzv5W1qZi c41SRQsy3PUJHWNjJoVVz/YIubzmISYmYMf02CNj3jnSwtBICPlAqbAOy7JUtX2g v8pM+RrYRSuTfECoVA0GTDDNTxxjTIRMhR3iQnNCoz2qeXZ1tqySvCMtBiK8aiL0 DN7RLtAQMECtlsVwI2a2DVO3Izzf6ktsKi+0gnDMIl7+GXgOnYP1JEI95+5wAngX lHJO9kfijFMhUrOxv01iP7/CggavPZLGLa6XLig/LboLRFixSrJM0pZNgIxlTOi1 LA== -----END CERTIFICATE-----Generated at Sun Jan 18 01:56:19 2026 by rpki-client