This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer (raw, json) Hash identifier: ltUGVhUQ5UqSm5hFjLkZsXHhm9OBVb4I2jVc/zDtURA= Subject key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71AE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft caRepository: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 05:03:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.52.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29102 (0x71ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 7 05:03:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:96:c8:0d:8f:60:85:b9:97:02:d5:77:97: c3:cb:3b:bb:26:4a:f3:11:18:aa:91:32:30:b4:e7: ce:71:a1:11:e0:3a:0c:d2:27:36:6a:98:25:ec:61: 31:48:28:04:ee:18:e7:71:d7:9d:a7:ef:ac:67:57: c0:b8:7d:11:2d:a9:fa:77:07:0e:c9:41:a9:e9:66: 05:36:9d:a5:e9:57:cf:89:08:cd:d1:f9:3d:e4:e6: f6:02:ab:78:f7:54:0d:44:09:39:b7:b6:77:27:8a: c5:41:32:6c:a9:00:2d:9b:66:6e:86:e0:55:31:74: db:ce:5f:99:44:ef:f3:e7:de:96:b7:b2:fa:9d:f2: 14:89:55:f5:3a:71:c7:fb:b2:ea:76:14:df:e8:99: bf:73:81:ad:d4:ee:df:2c:d9:d1:ef:79:df:19:c2: 3d:81:9b:f5:ce:52:3d:62:df:1c:34:a3:cd:53:be: e2:71:a5:53:fb:cb:58:dd:02:54:e3:d1:3f:10:42: 85:51:ec:4a:dc:60:f2:72:ca:54:87:38:aa:a7:e2: 01:81:8e:d7:67:89:8f:59:05:c8:12:b1:32:ac:71: 0c:c1:1d:5d:4c:13:21:4c:05:69:0a:51:66:ff:ce: aa:31:24:a1:ae:49:66:09:6b:2d:ac:1a:c2:d4:68: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.52.0/24 Signature Algorithm: sha256WithRSAEncryption 28:0b:38:ac:30:17:64:f5:b7:7d:87:5b:21:1d:ba:1f:92:2f: da:9f:cf:9b:1e:ed:45:ce:cc:7d:62:96:94:71:34:2e:2b:44: f3:f0:51:7f:c5:5c:97:47:b2:e3:3b:6d:4d:2a:de:d0:0e:2a: eb:b3:b4:95:46:c5:50:32:e1:07:59:ed:2a:82:41:75:74:c7: ba:e8:89:de:b2:f0:5d:2a:df:7c:eb:64:f4:39:ec:39:c2:e0: a1:e3:be:bf:e2:77:7e:1a:8d:b3:85:34:ff:c2:91:46:2a:40: 72:57:da:c9:8f:64:5d:a8:c8:a2:76:75:ce:9d:49:a7:89:23: 4f:fe:5f:ed:2a:f2:a9:51:80:59:37:e4:35:e4:33:5d:d3:b5: f0:b8:58:ca:6e:5c:fc:d7:91:00:f0:f1:33:30:bb:16:eb:7b: 65:04:9f:2a:21:32:9b:3e:0c:9c:80:d2:9c:46:79:fa:2a:cf: f9:46:12:3f:4a:2a:20:95:12:bc:01:74:7f:bf:4a:81:0f:16: b7:63:ba:5e:04:7a:fc:83:95:ed:e5:b3:ff:7c:fc:a4:82:68: e9:ee:ad:3d:8f:57:20:74:8b:8c:c5:07:c8:51:53:77:46:cd: 47:f7:f7:22:73:26:35:6e:ff:a2:b8:fc:f3:4b:bd:2e:4e:68: dd:a6:af:b3 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICca4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA3MDUwMzIwWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTExM0I2MjExMC8GA1UEBRMoNDJGRUYzMzE3NDFBNTRENUEwQUU3NTUz MTA4RDREMkQzMkIwNTdCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL5+lsgNj2CFuZcC1XeXw8s7uyZK8xEYqpEyMLTnznGhEeA6DNInNmqYJexhMUgo BO4Y53HXnafvrGdXwLh9ES2p+ncHDslBqelmBTadpelXz4kIzdH5PeTm9gKrePdU DUQJObe2dyeKxUEybKkALZtmbobgVTF0285fmUTv8+felrey+p3yFIlV9Tpxx/uy 6nYU3+iZv3OBrdTu3yzZ0e953xnCPYGb9c5SPWLfHDSjzVO+4nGlU/vLWN0CVOPR PxBChVHsStxg8nLKVIc4qqfiAYGO12eJj1kFyBKxMqxxDMEdXUwTIUwFaQpRZv/O qjEkoa5JZglrLawawtRo/bkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRC/vMxdBpU 1aCudVMQjU0tMrBXsDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTNCNjIvMjY2MTlENDRDNkU4MTFFRkJCNTIwQjBEQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEzQjYyLzI2NjE5RDQ0QzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFh Vk5XZ3JuVlRFSTFOTFRLd1Y3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4NDANBgkqhkiG9w0BAQsFAAOCAQEAKAs4rDAXZPW3fYdbIR26 H5Iv2p/Pmx7tRc7MfWKWlHE0LitE8/BRf8Vcl0ey4zttTSre0A4q67O0lUbFUDLh B1ntKoJBdXTHuuiJ3rLwXSrffOtk9DnsOcLgoeO+v+J3fhqNs4U0/8KRRipAclfa yY9kXajIonZ1zp1Jp4kjT/5f7SryqVGAWTfkNeQzXdO18LhYym5c/NeRAPDxMzC7 Fut7ZQSfKiEymz4MnIDSnEZ5+irP+UYSP0oqIJUSvAF0f79KgQ8Wt2O6XgR6/IOV 7eWz/3z8pIJo6e6tPY9XIHSLjMUHyFFTd0bNR/f3InMmNW7/orj880u9Lk5o3aav sw== -----END CERTIFICATE-----Generated at Sun Jan 18 01:56:18 2026 by rpki-client