This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer (raw, json) Hash identifier: 2Oa2FrrBeTPq0PrXjKBR2Qt9wao1w66LchXOxweb+YQ= Subject key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 724F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 11:31:12 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.203.247.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29263 (0x724f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 15 11:31:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:8d:27:c4:54:1f:b6:51:ad:5f:2b:7b:fe: 2d:0c:64:58:60:39:34:8c:93:09:60:d5:54:dc:5b: 3a:1e:b2:eb:f1:e8:a2:a0:89:8b:ca:11:14:92:22: c9:54:09:84:0f:8d:b7:fa:bf:a3:e7:d1:45:09:82: dd:7f:7a:0d:7c:62:6a:8d:69:29:55:de:55:c5:96: c7:0f:75:85:95:9f:2c:b5:9c:76:2b:a5:02:20:3a: 92:5c:47:40:d3:1a:ee:50:94:03:98:3a:90:a6:65: 52:47:a1:03:fa:11:c0:c5:00:7e:a2:63:45:00:0e: 5f:bc:cc:61:98:e6:21:33:6d:d9:a0:ba:8f:f8:ba: 96:14:43:7f:76:72:b0:c8:94:51:49:db:5d:c4:16: 88:af:64:60:43:0f:ae:51:8e:bd:1b:ad:47:85:cd: 24:3c:39:fc:57:ea:d0:e5:74:10:78:2d:76:77:aa: 58:92:89:31:3b:96:85:da:74:3e:f0:1e:9d:3d:c4: 83:89:29:0b:bd:12:9b:9e:c2:22:70:2f:44:aa:cb: 9e:36:93:41:64:e5:a5:3c:68:d0:45:ce:e2:89:21: 56:50:59:4c:3d:f2:b8:72:98:db:3b:39:75:9e:e0: 22:63:f7:69:a7:af:b4:25:b2:e8:8f:52:e2:41:ae: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.203.247.0/24 Signature Algorithm: sha256WithRSAEncryption 33:22:c6:37:52:4b:d9:ad:03:ca:35:8f:a9:f8:9b:31:7e:45: 61:8c:32:12:0c:f0:e1:a2:98:f0:69:ab:09:f0:cf:88:ff:82: 61:95:51:d8:d6:68:7e:9c:a9:92:8d:a6:d8:68:03:a1:5f:00: 2e:a3:97:dd:b9:57:a6:2e:73:99:40:25:85:bd:c5:81:d1:66: 67:5c:d1:da:63:42:b2:d0:af:25:18:01:d3:13:40:01:f8:e8: 0a:a3:d8:dd:7b:00:fa:23:5a:a2:43:c8:6d:37:c3:ca:ac:43: b5:39:30:64:0c:94:1e:53:76:50:d6:1f:c9:7f:e6:54:f4:1c: 2c:21:f6:25:71:bd:84:e8:c7:c7:01:1c:08:a5:ee:b2:ad:a5: ce:f9:af:52:ae:14:0e:12:78:9c:d0:d2:06:b1:a9:d0:5b:cd: 28:6b:55:25:87:26:a8:c5:e2:77:bf:83:19:39:e7:e3:4b:24: 93:90:6d:c3:54:91:bf:92:5c:64:5c:48:6a:29:38:08:20:cd: f7:00:67:06:70:3a:ad:d7:39:48:7f:31:62:da:5c:b3:a8:26: 81:fc:1f:88:15:02:09:c2:48:b0:e0:3d:74:8c:78:41:85:3f: df:5b:15:af:db:b7:8b:bc:6f:c3:29:90:6a:50:40:55:71:fc: 0e:6c:11:6a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICck8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTE1MTEzMTEyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFNTg1QjExMC8GA1UEBRMoMzFDOEU0RDQzODk3NEVERDBFODdBMUM3 RUJEOTA5Q0ExQzFEMTJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKl1jSfEVB+2Ua1fK3v+LQxkWGA5NIyTCWDVVNxbOh6y6/HooqCJi8oRFJIiyVQJ hA+Nt/q/o+fRRQmC3X96DXxiao1pKVXeVcWWxw91hZWfLLWcdiulAiA6klxHQNMa 7lCUA5g6kKZlUkehA/oRwMUAfqJjRQAOX7zMYZjmITNt2aC6j/i6lhRDf3ZysMiU UUnbXcQWiK9kYEMPrlGOvRutR4XNJDw5/Ffq0OV0EHgtdneqWJKJMTuWhdp0PvAe nT3Eg4kpC70Sm57CInAvRKrLnjaTQWTlpTxo0EXO4okhVlBZTD3yuHKY2zs5dZ7g ImP3aaevtCWy6I9S4kGuBvcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQxyOTUOJdO 3Q6Hocfr2QnKHB0SpTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU4NUIvQUZEMUI1MDJGMjA1MTFGMDgxOEI3NzMyNEE2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU1ODVCL0FGRDFCNTAyRjIwNTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlY VHQwT2g2SEg2OWtKeWh3ZEVxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMDL9zANBgkqhkiG9w0BAQsFAAOCAQEAMyLGN1JL2a0DyjWPqfib MX5FYYwyEgzw4aKY8GmrCfDPiP+CYZVR2NZofpypko2m2GgDoV8ALqOX3blXpi5z mUAlhb3FgdFmZ1zR2mNCstCvJRgB0xNAAfjoCqPY3XsA+iNaokPIbTfDyqxDtTkw ZAyUHlN2UNYfyX/mVPQcLCH2JXG9hOjHxwEcCKXusq2lzvmvUq4UDhJ4nNDSBrGp 0FvNKGtVJYcmqMXid7+DGTnn40skk5Btw1SRv5JcZFxIaik4CCDN9wBnBnA6rdc5 SH8xYtpcs6gmgfwfiBUCCcJIsOA9dIx4QYU/31sVr9u3i7xvwymQalBAVXH8DmwR ag== -----END CERTIFICATE-----Generated at Sun Jan 18 01:51:34 2026 by rpki-client