This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer File: YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer (raw, json) Hash identifier: uMrIFUxuLbztjgIqSwYxW7+Bjz/bQpRbQJDVRXPo+p4= Subject key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7100 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 06:42:59 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.224.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28928 (0x7100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 06:42:59 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:e1:fe:bd:5d:50:97:96:58:7e:d6:ab:b6: 02:95:a7:5f:75:4f:16:e1:9d:71:aa:cb:06:86:f4: b4:ed:cc:68:5e:26:0b:7f:cd:98:22:a6:d8:d6:9d: 68:8a:41:df:a0:b9:9d:91:d9:50:30:0e:43:05:5f: 57:da:52:6d:df:5d:dd:48:6c:ea:4e:6b:8a:79:65: 90:4e:00:74:33:cc:a1:f7:aa:9c:be:1e:e6:29:e4: 15:5f:86:52:47:cc:dc:73:88:b5:e4:7d:1a:f7:7c: 6e:45:8e:85:73:6d:c4:29:cc:32:7e:f4:d5:01:e5: 35:97:74:23:5f:02:79:e3:c5:6c:fd:3b:44:a3:23: 0a:30:37:2b:bc:5a:a6:e9:37:4e:14:2e:1b:00:7e: dd:6c:78:41:e1:26:b6:51:4c:a6:18:51:ec:8f:5e: b6:5f:ea:73:9d:50:7a:0e:38:31:13:68:e1:c6:ff: 85:a4:63:03:8b:21:b6:95:56:77:0f:31:c5:55:fb: 53:93:de:df:d9:9c:81:84:9a:c7:58:87:70:a8:28: ca:e7:08:52:60:1b:43:d6:15:89:95:dd:73:4d:2e: c8:f3:d7:f0:8d:ce:c1:db:2b:ee:21:c0:61:f3:af: b1:4f:b7:3c:ea:b4:d1:d4:7a:1f:cc:80:be:f1:c8: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.224.0/23 Signature Algorithm: sha256WithRSAEncryption 37:ac:75:9b:93:25:ad:23:02:59:f7:90:a6:52:05:8a:6d:23: 39:2c:00:07:b6:91:56:76:9d:52:e5:9d:a8:e4:d2:b4:95:2e: ca:d3:4a:6c:fa:73:00:c1:53:26:8d:fe:38:27:05:bb:33:8f: 15:6a:62:da:1d:54:68:b9:df:bb:c5:4c:af:20:e4:23:71:da: 28:55:1b:70:d0:db:53:82:89:4c:66:4d:83:57:38:d1:6e:66: 33:88:6e:ee:00:3c:98:71:82:36:95:31:8c:2d:55:c7:b5:bf: 3b:86:5c:aa:0a:75:23:b8:91:64:95:ab:4c:b8:58:d3:4b:d8: 5a:07:82:b4:23:c6:ae:58:90:c6:45:fe:60:ea:8f:c2:75:55: 5a:d3:6c:11:34:d0:70:8e:74:a1:5d:79:df:c3:97:14:4d:8f: a0:6a:38:de:92:6c:bc:10:f4:70:7e:fd:a9:d4:7e:e9:05:7d: 9b:f6:fd:3c:e0:34:ad:d5:40:c0:5a:dd:e9:ef:f0:e0:ee:65: 39:55:c9:08:69:ee:f9:b6:58:dc:65:89:3f:2c:b7:a5:19:bb: fa:90:f2:12:28:15:0f:35:52:3b:37:ce:71:90:09:05:fe:ca: 43:73:4e:22:12:91:63:10:b3:bd:e7:28:e1:bb:53:2c:09:41: 76:a2:8b:bd -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MDY0MjU5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE4MjUwOTExMC8GA1UEBRMoNjJBMjNGMzNFOTBCNzIwNjA1NTM3MTk1 MTREMEM1QUJDMkUyMzQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ0m4f69XVCXllh+1qu2ApWnX3VPFuGdcarLBob0tO3MaF4mC3/NmCKm2NadaIpB 36C5nZHZUDAOQwVfV9pSbd9d3Uhs6k5rinllkE4AdDPMofeqnL4e5inkFV+GUkfM 3HOIteR9Gvd8bkWOhXNtxCnMMn701QHlNZd0I18CeePFbP07RKMjCjA3K7xapuk3 ThQuGwB+3Wx4QeEmtlFMphhR7I9etl/qc51Qeg44MRNo4cb/haRjA4shtpVWdw8x xVX7U5Pe39mcgYSax1iHcKgoyucIUmAbQ9YViZXdc00uyPPX8I3Owdsr7iHAYfOv sU+3POq00dR6H8yAvvHI6TcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRioj8z6Qty BgVTcZUU0MWrwuI0RzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI1MDkvOUIxQ0UyMTJFNDgxMTFGMEFDNDY3QkMxNDI2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgyNTA5LzlCMUNFMjEyRTQ4MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtM Y2dZRlUzR1ZGTkRGcThMaU5FYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP4DANBgkqhkiG9w0BAQsFAAOCAQEAN6x1m5MlrSMCWfeQplIF im0jOSwAB7aRVnadUuWdqOTStJUuytNKbPpzAMFTJo3+OCcFuzOPFWpi2h1UaLnf u8VMryDkI3HaKFUbcNDbU4KJTGZNg1c40W5mM4hu7gA8mHGCNpUxjC1Vx7W/O4Zc qgp1I7iRZJWrTLhY00vYWgeCtCPGrliQxkX+YOqPwnVVWtNsETTQcI50oV1538OX FE2PoGo43pJsvBD0cH79qdR+6QV9m/b9POA0rdVAwFrd6e/w4O5lOVXJCGnu+bZY 3GWJPyy3pRm7+pDyEigVDzVSOzfOcZAJBf7KQ3NOIhKRYxCzveco4btTLAlBdqKL vQ== -----END CERTIFICATE-----Generated at Sun Jan 11 06:11:18 2026 by rpki-client