This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer File: WKqOb2Cb9VgUA20moSpeKyUViTo.cer (raw, json) Hash identifier: 5EWJtK6g9ihUWtFZxDlWFvThdliIt0ql2zdMgzfK1Nk= Subject key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7209 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft caRepository: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:00:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 206.109.72.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29193 (0x7209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 12 13:00:32 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:68:56:2f:b1:d1:5c:8a:67:2b:da:bf:48: d8:ac:d8:86:a9:13:0e:a3:03:2a:7e:e3:04:72:67: 96:f7:43:be:7c:e6:24:a8:6e:45:e5:75:69:50:55: f0:4a:ea:2d:18:88:bc:9c:ef:15:db:50:5e:27:fd: ac:25:f4:21:a8:a7:40:c6:ef:18:90:ce:50:41:ed: 40:55:2b:da:ba:9d:b1:e8:77:4c:ac:70:0f:dc:20: b6:2a:ce:15:27:dd:b7:42:0c:e8:f6:39:7d:a7:d5: c9:37:b0:b9:8c:c3:e6:81:27:60:5d:88:82:33:ce: e4:d4:89:82:b7:0d:c9:5b:6c:5a:0a:1b:2b:98:b9: 11:39:89:01:b9:0b:26:1a:a5:da:5a:e3:9a:6c:fa: b6:5f:49:de:be:8b:31:d6:e0:96:9f:19:8d:68:f4: cf:2d:67:00:24:a8:1a:5b:f8:90:9f:1a:bd:6b:c6: a1:12:e4:89:5f:8c:df:7c:e0:10:29:36:5d:b5:7f: ae:ae:7c:45:81:2a:37:b7:16:db:34:13:91:21:61: f1:e4:c9:d7:c3:94:75:c2:3a:6e:f9:83:65:f6:6c: 93:4a:88:4b:82:1b:5c:1a:b9:3a:77:a2:d6:db:b3: d0:2d:db:7d:b2:d3:19:ff:54:c2:3b:e4:54:97:4b: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.109.72.0/22 Signature Algorithm: sha256WithRSAEncryption c1:fd:52:0a:1b:04:c6:ba:05:f2:55:11:c4:37:f3:34:6c:94: 76:8a:d8:73:62:e9:67:d9:eb:9f:c8:12:7a:a6:49:72:8d:a3: 5b:91:9b:31:ce:33:14:7f:a5:05:b6:c7:10:b6:82:c0:1c:0f: 5f:07:ee:1b:55:5a:6f:70:b5:3e:ff:31:06:ee:26:21:0b:d9: e1:81:20:f2:8a:66:2d:82:d8:46:4c:0c:32:26:7e:79:ec:52: 47:7e:3e:86:de:7f:21:20:fe:84:78:56:47:0e:a6:14:f5:e3: 6b:65:d0:92:8a:ae:98:88:14:12:14:0b:b6:5b:90:3a:a8:83: 7f:84:2d:3d:c6:05:3a:c4:7f:94:4e:70:c3:ad:8b:16:c1:e6: f2:00:55:2f:1f:95:51:ef:d6:c5:26:b5:a5:64:2e:d5:5d:b6: 08:87:e4:85:6b:79:70:1d:bd:91:f6:d1:7b:f8:bf:36:77:06: 64:44:7a:57:b1:55:42:e2:fa:5f:6f:1a:9a:b6:96:5d:0e:f8: 0e:86:36:eb:f5:e0:78:df:a6:28:0f:6a:07:d6:f5:25:7d:e4: 59:f6:6c:31:81:ad:7f:f6:12:bd:a8:68:80:65:4b:46:fa:06: b0:90:16:d9:aa:fa:f4:7a:7f:a8:c6:50:46:5b:cb:dc:38:38: b4:59:11:f9 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEyMTMwMDMyWhcNMjYwNzAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE0RUJCMjExMC8GA1UEBRMoNThBQThFNkY2MDlCRjU1ODE0MDM2RDI2 QTEyQTVFMkIyNTE1ODkzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK7BaFYvsdFcimcr2r9I2KzYhqkTDqMDKn7jBHJnlvdDvnzmJKhuReV1aVBV8Erq LRiIvJzvFdtQXif9rCX0IainQMbvGJDOUEHtQFUr2rqdseh3TKxwD9wgtirOFSfd t0IM6PY5fafVyTewuYzD5oEnYF2IgjPO5NSJgrcNyVtsWgobK5i5ETmJAbkLJhql 2lrjmmz6tl9J3r6LMdbglp8ZjWj0zy1nACSoGlv4kJ8avWvGoRLkiV+M33zgECk2 XbV/rq58RYEqN7cW2zQTkSFh8eTJ18OUdcI6bvmDZfZsk0qIS4IbXBq5Onei1tuz 0C3bfbLTGf9UwjvkVJdLv6MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRYqo5vYJv1 WBQDbSahKl4rJRWJOjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVCQjIvRjA5MUYwNzBFRDBGMTFGMEE4MTAzNDA0QTFFRTUyOEUvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFQkIyL0YwOTFGMDcwRUQwRjExRjBBODEwMzQwNEExRUU1MjhFL1dLcU9iMkNi OVZnVUEyMG1vU3BlS3lVVmlUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAs5tSDANBgkqhkiG9w0BAQsFAAOCAQEAwf1SChsExroF8lURxDfz NGyUdorYc2LpZ9nrn8gSeqZJco2jW5GbMc4zFH+lBbbHELaCwBwPXwfuG1Vab3C1 Pv8xBu4mIQvZ4YEg8opmLYLYRkwMMiZ+eexSR34+ht5/ISD+hHhWRw6mFPXja2XQ koqumIgUEhQLtluQOqiDf4QtPcYFOsR/lE5ww62LFsHm8gBVLx+VUe/WxSa1pWQu 1V22CIfkhWt5cB29kfbRe/i/NncGZER6V7FVQuL6X28amraWXQ74DoY26/XgeN+m KA9qB9b1JX3kWfZsMYGtf/YSvahogGVLRvoGsJAW2ar69Hp/qMZQRlvL3Dg4tFkR +Q== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:43 2026 by rpki-client