This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer File: YG6ylYJUrJi2M26qQayAstyxnG4.cer (raw, json) Hash identifier: /+LB8lvRVHIgWvzu9YNE21JlAASrSuaBIZYWn/PInk8= Subject key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70FA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft caRepository: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 04:44:24 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.210.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28922 (0x70fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 04:44:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:17:2e:b4:80:64:3a:27:2e:ff:3e:f8:20: 6a:e1:7f:5b:e8:9c:37:33:ea:9a:36:44:f6:fd:ed: 52:ad:ad:70:3a:48:a1:86:c7:3e:89:84:eb:b7:eb: 6c:11:bf:59:01:83:51:ac:23:43:33:0f:39:90:fe: 43:24:52:cb:48:6d:04:b3:d3:03:68:53:f4:4e:ab: 4c:fe:73:76:e3:31:12:32:07:72:fb:29:98:56:40: d0:7b:5b:56:b7:e2:b0:07:03:b1:9d:0e:31:cd:95: 7d:aa:51:68:ea:d6:60:12:42:95:29:56:2a:66:e3: 58:42:7b:bb:2d:43:16:54:d3:d0:8a:4b:45:2d:64: e2:6e:90:ea:db:83:1d:fa:d2:1f:f6:2e:87:4a:35: ca:70:40:cf:bd:6f:67:e5:38:22:3c:2f:1d:fe:93: 8a:f4:41:86:aa:e5:75:ec:87:55:9f:41:0a:34:c1: bc:c8:02:d0:5a:13:b8:24:48:c1:e7:76:29:2d:f6: a3:52:f4:1a:54:98:3e:94:b9:b2:b3:71:43:b9:20: 2f:5e:5d:ca:5b:35:c8:91:69:5d:0c:5e:f6:74:b1: 17:66:90:6f:ed:22:7c:60:26:b1:f9:1a:39:83:6c: 65:0f:4e:8a:51:2c:2f:ab:e9:f5:d5:6f:5a:dc:2c: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.210.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:1f:1d:7a:9a:1c:dd:0a:b5:d5:e6:7f:e2:63:8c:e1:97:39: 98:74:da:b9:34:63:0b:26:73:86:5d:a8:02:89:c3:2a:f5:b7: 0a:86:50:39:cd:d7:72:73:2b:fc:3b:3f:81:6f:f1:40:0c:0d: 4b:c7:d8:f8:f9:64:08:cc:7a:13:ee:77:9f:ed:68:c5:ab:e9: 0d:b1:c4:ad:83:46:23:4b:d5:e1:ad:40:34:3a:5a:0f:2a:93: b6:52:fe:63:d1:b6:c7:cc:3f:c0:9c:65:c4:3b:c5:37:86:e7: 30:d7:82:2e:14:cb:fa:fe:ad:87:4b:c7:68:20:a8:79:9d:ac: 36:cf:f8:cc:f4:e6:65:5d:cb:7f:cc:f8:54:ef:9f:15:a0:7e: c1:a7:e1:53:0a:b0:84:8c:dc:0f:07:b9:9f:e9:b2:f8:12:be: 62:f1:9b:a3:b0:14:61:56:e5:9d:e1:35:6a:2b:16:0e:7b:06: c8:0a:d1:1e:d0:1b:9e:36:7c:86:49:de:75:fd:45:59:78:46: d3:34:52:c6:df:31:87:15:89:11:34:71:58:be:58:d7:6f:39: e9:ba:4b:9b:5d:43:ed:61:88:9c:80:9e:4a:97:46:3d:c6:20: 68:81:68:8d:57:51:e5:ef:ff:1a:f3:d5:ca:ff:4c:4f:be:1f: e8:cd:1d:65 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MDQ0NDI0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE3MEQzRTExMC8GA1UEBRMoNjA2RUIyOTU4MjU0QUM5OEI2MzM2RUFB NDFBQzgwQjJEQ0IxOUM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALhUFy60gGQ6Jy7/PvggauF/W+icNzPqmjZE9v3tUq2tcDpIoYbHPomE67frbBG/ WQGDUawjQzMPOZD+QyRSy0htBLPTA2hT9E6rTP5zduMxEjIHcvspmFZA0HtbVrfi sAcDsZ0OMc2VfapRaOrWYBJClSlWKmbjWEJ7uy1DFlTT0IpLRS1k4m6Q6tuDHfrS H/Yuh0o1ynBAz71vZ+U4IjwvHf6TivRBhqrldeyHVZ9BCjTBvMgC0FoTuCRIwed2 KS32o1L0GlSYPpS5srNxQ7kgL15dyls1yJFpXQxe9nSxF2aQb+0ifGAmsfkaOYNs ZQ9OilEsL6vp9dVvWtwsJBkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRgbrKVglSs mLYzbqpBrICy3LGcbjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBEM0UvQjVERkM4QzA5RkQ3MTFFRjlFMzhBODM3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcwRDNFL0I1REZDOEMwOUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL1lHNnlsWUpV ckppMk0yNnFRYXlBc3R5eG5HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/0jANBgkqhkiG9w0BAQsFAAOCAQEAah8depoc3Qq11eZ/4mOM 4Zc5mHTauTRjCyZzhl2oAonDKvW3CoZQOc3XcnMr/Ds/gW/xQAwNS8fY+PlkCMx6 E+53n+1oxavpDbHErYNGI0vV4a1ANDpaDyqTtlL+Y9G2x8w/wJxlxDvFN4bnMNeC LhTL+v6th0vHaCCoeZ2sNs/4zPTmZV3Lf8z4VO+fFaB+wafhUwqwhIzcDwe5n+my +BK+YvGbo7AUYVblneE1aisWDnsGyArRHtAbnjZ8hknedf1FWXhG0zRSxt8xhxWJ ETRxWL5Y12856bpLm11D7WGInICeSpdGPcYgaIFojVdR5e//GvPVyv9MT74f6M0d ZQ== -----END CERTIFICATE-----Generated at Sun Jan 18 01:56:29 2026 by rpki-client