This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer File: LRhptz6h6I6xK-afHA1OfCGWoz4.cer (raw, json) Hash identifier: osnV22id4+7sB9s2/rLgS+xG9uefehEukDn/npiGM4k= Subject key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71F7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 11 Jan 2026 09:38:45 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.106.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29175 (0x71f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 11 09:38:45 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:e3:35:fd:18:26:1b:5e:9e:38:47:a8:6f: 11:d5:10:8a:1b:eb:1a:3f:46:d9:ad:d6:05:8f:93: 48:a3:5b:69:99:23:fe:b1:68:8e:f3:8d:72:3e:83: 07:0f:34:fd:f1:d0:51:97:8a:56:2b:00:33:12:6f: 21:d6:36:b1:57:32:40:42:1b:f0:50:ca:60:df:69: e7:d3:ab:93:4f:92:b2:1a:2e:08:5d:55:f2:9a:b9: 4a:09:57:40:1b:98:f4:da:c6:b9:a2:15:f7:36:27: be:3b:fd:46:7b:3b:1c:1f:dd:85:e7:c6:89:87:18: ee:c2:97:28:a7:36:a3:76:4c:f9:3f:e5:9e:1f:73: f2:20:d1:2b:59:cc:95:84:8c:a3:ce:75:38:c6:c1: a8:3e:5c:f1:ba:48:26:cd:ad:44:67:74:68:4d:b8: dc:40:2c:d2:17:6a:e8:1d:d9:d6:13:78:ec:9f:65: b9:c3:15:cb:06:39:59:5b:7d:35:30:58:ce:9a:8d: 64:9d:55:3e:95:52:07:1c:9c:32:53:85:e0:26:7f: 54:9c:01:dd:f1:af:76:ae:9a:2b:ad:31:64:40:10: 6a:5e:cb:ab:b5:e8:54:d6:f6:46:bf:84:dc:c5:b9: 3a:13:0c:71:87:0f:b4:4d:ed:69:37:c2:68:b0:b2: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.106.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:b8:79:ad:f1:f3:d5:df:cb:6f:2a:0e:7d:64:80:69:ec:f4: 75:0d:62:68:fa:e1:02:6c:24:0f:49:7d:fc:12:95:a3:9a:5c: bf:a4:1e:9d:24:93:f3:19:80:f0:84:05:62:f5:7e:31:82:7d: f0:29:9a:7f:7d:82:5c:c0:a5:3b:06:6d:5c:9f:1f:fc:0f:15: 51:ed:37:e2:23:c8:ce:9e:a1:15:0f:68:dc:ac:d5:05:f4:8b: 9b:5c:50:2f:0c:51:e8:f4:ec:f5:7d:0c:a8:d2:58:f5:38:51: 82:e8:5e:f8:ef:6f:d2:ff:96:25:e8:db:10:a1:a0:1d:7b:45: 51:a6:a7:4b:a8:b7:b0:fd:1d:4e:0c:25:10:07:65:33:2e:19: 14:78:42:1b:73:dd:5c:0a:f6:ad:99:df:a2:dc:a8:d6:81:1c: 8e:d2:dc:26:c8:92:02:d3:99:5c:7c:3f:7a:b2:d3:fe:f2:44: 86:f3:e8:02:ab:97:90:5f:66:16:78:ea:a5:58:51:cb:26:c6: 87:03:a8:4c:1a:05:dc:fb:d0:3c:f3:03:a6:70:8d:f8:fa:6d: 2f:17:b1:e8:15:6a:78:5a:17:ff:be:a5:e1:e9:81:42:3f:82: 91:a5:b6:62:59:66:dc:93:97:30:20:db:11:88:bd:7e:6a:33: 5b:28:18:da -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTExMDkzODQ1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFOEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlG MUMwRDRFN0MyMTk2QTMzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN6c4zX9GCYbXp44R6hvEdUQihvrGj9G2a3WBY+TSKNbaZkj/rFojvONcj6DBw80 /fHQUZeKVisAMxJvIdY2sVcyQEIb8FDKYN9p59Ork0+SshouCF1V8pq5SglXQBuY 9NrGuaIV9zYnvjv9Rns7HB/dhefGiYcY7sKXKKc2o3ZM+T/lnh9z8iDRK1nMlYSM o851OMbBqD5c8bpIJs2tRGd0aE243EAs0hdq6B3Z1hN47J9lucMVywY5WVt9NTBY zpqNZJ1VPpVSBxycMlOF4CZ/VJwB3fGvdq6aK60xZEAQal7Lq7XoVNb2Rr+E3MW5 OhMMcYcPtE3taTfCaLCy+tsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQtGGm3PqHo jrEr5p8cDU58IZajPjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThGRkYvNTAzNTdDRjBFRUQxMTFGMEIwQUNEMjc2NzM2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU4RkZGLzUwMzU3Q0YwRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZo Nkk2eEstYWZIQTFPZkNHV296NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8ajANBgkqhkiG9w0BAQsFAAOCAQEALrh5rfHz1d/LbyoOfWSA aez0dQ1iaPrhAmwkD0l9/BKVo5pcv6QenSST8xmA8IQFYvV+MYJ98Cmaf32CXMCl OwZtXJ8f/A8VUe034iPIzp6hFQ9o3KzVBfSLm1xQLwxR6PTs9X0MqNJY9ThRguhe +O9v0v+WJejbEKGgHXtFUaanS6i3sP0dTgwlEAdlMy4ZFHhCG3PdXAr2rZnfotyo 1oEcjtLcJsiSAtOZXHw/erLT/vJEhvPoAquXkF9mFnjqpVhRyybGhwOoTBoF3PvQ PPMDpnCN+PptLxex6BVqeFoX/76l4emBQj+CkaW2Yllm3JOXMCDbEYi9fmozWygY 2g== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:42 2026 by rpki-client