This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer File: MsmO2NT8cwga_uVSIcRCR1xNzDA.cer (raw, json) Hash identifier: Z33/sm6nG200ufnXOpz6I9RKInRwutd96i9QktBu6kw= Subject key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71B1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 10:09:38 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.168.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29105 (0x71b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 7 10:09:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:14:63:05:33:0d:ed:b1:bd:f7:39:ac:9c: 3e:48:be:f8:ef:1e:d7:41:9b:03:1c:b7:25:77:9b: 03:25:18:29:4a:4a:f6:c3:a0:fe:a3:17:58:0c:e8: 48:73:c1:93:32:09:9c:78:18:ac:c0:77:63:fa:a3: 7e:ee:ee:58:a3:c1:4a:36:bf:22:3e:64:da:fb:b3: d5:d3:4a:d7:1d:4f:e3:6f:85:5f:c3:d8:cf:b1:0f: ef:0e:00:f1:97:31:8f:f3:10:2d:16:56:42:d4:e8: 2c:83:bc:72:8a:b0:e5:ed:19:de:5f:9a:47:4b:0f: 30:78:c7:76:2b:70:4d:be:f5:91:eb:0d:ae:9f:71: 54:34:34:3d:fe:5c:df:d2:10:f4:e3:07:8e:bf:ad: 3e:5a:fc:55:3b:c4:af:18:1c:15:b9:ac:da:72:57: a0:7a:fd:b6:51:3b:a7:bd:09:51:e2:7e:b4:53:63: ee:92:3d:78:43:62:5d:34:59:49:e4:1c:3b:2a:a9: 57:fe:cf:85:d0:13:d5:f3:fc:9a:63:fb:86:c2:6e: e7:b2:f0:c8:30:42:18:17:9f:e3:b1:50:34:0f:bd: 6d:df:a9:9c:ad:b9:20:52:23:75:cb:ff:14:99:1c: 9e:f4:15:1b:cb:71:b4:08:fd:eb:78:45:51:92:9f: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.168.0/23 Signature Algorithm: sha256WithRSAEncryption 49:05:fd:c4:72:ec:cb:e1:56:66:b1:f5:25:31:81:93:93:b6: 0a:de:b5:6a:d7:46:3c:1e:5a:a1:86:7f:49:7f:3a:b4:ad:8a: 06:d0:01:d6:86:0e:d4:d9:90:b9:d8:10:b6:9b:a2:8d:53:01: 88:c2:00:9c:29:b6:e2:5a:3e:a3:e6:8f:49:2a:8b:d0:5b:49: 5b:0a:fe:2b:1c:59:5d:90:ee:66:f2:e6:ca:37:c0:87:ff:05: 30:24:98:ff:f5:e4:f2:b5:bc:3d:8c:d5:1c:e3:8f:f6:66:18: 13:c7:04:b5:c2:02:e6:00:ae:20:e0:35:8b:41:b7:7e:f3:7c: 23:7f:b7:a4:f2:6a:cc:80:ed:29:14:68:45:0a:ee:03:3e:73: 0a:0b:9b:a3:d4:75:5a:2a:43:ee:92:14:78:13:7d:00:03:25: 1e:7b:33:cd:38:4a:c8:b7:e6:b5:87:16:c1:49:a3:9b:2f:b3: 6c:79:a3:bc:61:34:6c:c3:e5:8c:17:89:61:a6:ff:89:72:8b: c2:32:ee:32:3e:93:43:36:da:a8:a3:a2:3c:a0:d2:94:ef:a0: 77:db:69:1f:9a:5a:99:cb:a9:3c:93:1e:33:63:94:7a:71:7e: 19:e6:92:10:04:48:46:f8:ab:e8:57:b3:10:b0:6d:e5:c3:dd: 6d:32:29:04 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA3MTAwOTM4WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5OTYwNjExMC8GA1UEBRMoMzJDOThFRDhENEZDNzMwODFBRkVFNTUy MjFDNDQyNDc1QzREQ0MzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANqSFGMFMw3tsb33OaycPki++O8e10GbAxy3JXebAyUYKUpK9sOg/qMXWAzoSHPB kzIJnHgYrMB3Y/qjfu7uWKPBSja/Ij5k2vuz1dNK1x1P42+FX8PYz7EP7w4A8Zcx j/MQLRZWQtToLIO8coqw5e0Z3l+aR0sPMHjHditwTb71kesNrp9xVDQ0Pf5c39IQ 9OMHjr+tPlr8VTvErxgcFbms2nJXoHr9tlE7p70JUeJ+tFNj7pI9eENiXTRZSeQc OyqpV/7PhdAT1fP8mmP7hsJu57LwyDBCGBef47FQNA+9bd+pnK25IFIjdcv/FJkc nvQVG8txtAj963hFUZKfvSECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQyyY7Y1Pxz CBr+5VIhxEJHXE3MMDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk2MDYvRjc3ODI0NzhFQkIwMTFGMDg5MjE2RTdDNjA2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5NjA2L0Y3NzgyNDc4RUJCMDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4 Y3dnYV91VlNJY1JDUjF4TnpEQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPqDANBgkqhkiG9w0BAQsFAAOCAQEASQX9xHLsy+FWZrH1JTGB k5O2Ct61atdGPB5aoYZ/SX86tK2KBtAB1oYO1NmQudgQtpuijVMBiMIAnCm24lo+ o+aPSSqL0FtJWwr+KxxZXZDuZvLmyjfAh/8FMCSY//Xk8rW8PYzVHOOP9mYYE8cE tcIC5gCuIOA1i0G3fvN8I3+3pPJqzIDtKRRoRQruAz5zCgubo9R1WipD7pIUeBN9 AAMlHnszzThKyLfmtYcWwUmjmy+zbHmjvGE0bMPljBeJYab/iXKLwjLuMj6TQzba qKOiPKDSlO+gd9tpH5pamcupPJMeM2OUenF+GeaSEARIRvir6FezELBt5cPdbTIp BA== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:45 2026 by rpki-client