This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer File: TKAuwRGHSuDn0FVaJf8zAvkS64w.cer (raw, json) Hash identifier: G+JcNUNoZmk1YpDwfd3h/T1wnNrbLJPcorci0IKCcVw= Subject key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70DF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft caRepository: rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 25 Dec 2025 13:04:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.162.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28895 (0x70df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 25 13:04:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:38:2d:31:aa:5f:79:2b:9f:50:00:7c:6e: 24:1e:c8:ad:fa:b7:30:6c:65:bb:b1:3e:70:a0:f3: d9:79:a1:bf:0d:02:46:9e:b7:c0:47:be:49:60:3e: dc:63:a5:27:ae:92:25:90:36:12:05:5a:a7:2a:3f: 9b:e0:a6:20:38:e1:6e:d8:5b:ea:61:e3:72:af:31: e3:fb:27:70:ec:55:c1:82:ee:73:9f:68:b4:d6:ae: 83:9e:fb:0f:cc:23:78:e5:a2:29:d9:85:1a:d8:ec: f8:0c:b0:d4:4f:6a:6b:de:0e:26:d4:1f:b0:6b:46: 37:db:4e:0e:b7:dd:9e:05:d4:aa:b1:04:ed:8f:df: a5:b7:f9:63:e3:5c:32:b0:c9:ca:84:9c:4c:2d:17: 67:59:80:7c:64:91:4b:63:ce:b6:2c:bf:50:a1:86: 6a:13:76:9e:ea:a2:60:a5:cb:f1:9a:17:56:fd:08: 6a:57:0e:48:a9:a0:3e:92:c7:9c:1a:8a:48:17:50: 0f:69:ca:92:65:5f:2b:ad:10:10:7a:3b:81:df:24: c3:33:f4:d5:54:94:ac:80:e1:4c:99:d3:31:93:69: f1:3e:70:5d:f2:ea:fb:da:0b:90:be:f7:ea:af:98: 25:7c:91:f1:67:5c:35:c0:62:9e:3e:7e:5b:7c:65: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.162.0/23 Signature Algorithm: sha256WithRSAEncryption 11:fc:52:da:f7:ea:27:61:17:15:f6:8b:20:c0:5d:f4:6c:58: 45:9e:52:3c:53:b0:50:40:eb:7f:96:1b:45:7e:d4:26:2b:bd: 63:9c:f4:24:7a:52:c0:69:04:c8:fb:4a:8f:38:e3:ad:fc:98: f8:ef:f0:48:92:a8:8d:47:25:db:4e:90:1e:aa:d6:ae:23:b9: 91:d5:c5:d9:17:16:fb:99:6d:f6:84:d6:86:84:49:26:dc:85: 40:6b:2f:4e:86:e5:21:75:d2:ad:3d:f1:ef:33:c5:05:b9:0b: 99:bc:9a:1f:33:37:9e:fe:1e:d0:11:e2:5d:6e:0c:c9:b8:aa: d8:ea:01:f7:a7:7a:4e:24:a4:77:59:f9:dc:4d:79:2d:40:62: 45:f3:5f:5d:ec:c8:19:57:96:c7:41:ef:c1:17:7d:7f:7b:75: 24:be:6f:c1:fb:f0:2a:e9:86:74:53:e3:2a:13:d2:7e:d8:3b: ee:0e:39:84:1a:9e:71:6e:44:2a:00:d2:46:bd:b3:8a:d9:2a: fd:17:de:8b:b0:e2:03:c6:1f:f9:8c:4d:7d:96:b4:ce:53:0f: 23:d0:2f:73:75:d1:56:a6:c5:35:3f:eb:53:b0:a5:57:bb:de: 93:0b:a0:ba:94:b6:c2:2d:cc:6b:05:97:93:08:1d:90:d2:6b: c5:c2:6f:6f -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI1MTMwNDAzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1ODI1RDExMC8GA1UEBRMoNENBMDJFQzExMTg3NEFFMEU3RDA1NTVB MjVGRjMzMDJGOTEyRUI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM/2OC0xql95K59QAHxuJB7Irfq3MGxlu7E+cKDz2Xmhvw0CRp63wEe+SWA+3GOl J66SJZA2EgVapyo/m+CmIDjhbthb6mHjcq8x4/sncOxVwYLuc59otNaug577D8wj eOWiKdmFGtjs+Ayw1E9qa94OJtQfsGtGN9tODrfdngXUqrEE7Y/fpbf5Y+NcMrDJ yoScTC0XZ1mAfGSRS2POtiy/UKGGahN2nuqiYKXL8ZoXVv0IalcOSKmgPpLHnBqK SBdQD2nKkmVfK60QEHo7gd8kwzP01VSUrIDhTJnTMZNp8T5wXfLq+9oLkL736q+Y JXyR8WdcNcBinj5+W3xlWV8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRMoC7BEYdK 4OfQVVol/zMC+RLrjDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyNUQvREQ3MUQ1NjhBNDQ2MTFFRjhENThBNjI0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU4MjVEL0RENzFENTY4QTQ0NjExRUY4RDU4QTYyNEM0RjlBRTAyL1RLQXV3UkdI U3VEbjBGVmFKZjh6QXZrUzY0dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/ojANBgkqhkiG9w0BAQsFAAOCAQEAEfxS2vfqJ2EXFfaLIMBd 9GxYRZ5SPFOwUEDrf5YbRX7UJiu9Y5z0JHpSwGkEyPtKjzjjrfyY+O/wSJKojUcl 206QHqrWriO5kdXF2RcW+5lt9oTWhoRJJtyFQGsvToblIXXSrT3x7zPFBbkLmbya HzM3nv4e0BHiXW4Mybiq2OoB96d6TiSkd1n53E15LUBiRfNfXezIGVeWx0HvwRd9 f3t1JL5vwfvwKumGdFPjKhPSftg77g45hBqecW5EKgDSRr2zitkq/Rfei7DiA8Yf +YxNfZa0zlMPI9Avc3XRVqbFNT/rU7ClV7vekwugupS2wi3MawWXkwgdkNJrxcJv bw== -----END CERTIFICATE-----Generated at Sun Jan 18 01:53:08 2026 by rpki-client