This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer File: Zi7Jore2zkLSOlI4U0xldiIyU3I.cer (raw, json) Hash identifier: 5+ifDlbZcFKMeJu0NX8aT4R0mH3BYuGkD25FS6S6DBY= Subject key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7178 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft caRepository: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 04 Jan 2026 07:46:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 198.56.24.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29048 (0x7178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 4 07:46:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:b8:f5:18:11:0b:21:15:c8:a1:97:4a:b0: 88:6a:e1:c4:a4:22:6a:3b:81:c0:0a:a5:a5:22:f7: 39:bf:6c:3b:34:a6:7f:a8:8b:da:49:ad:97:4b:9e: 40:a8:73:5a:bc:cd:c4:a8:45:58:09:04:07:80:0f: 2a:58:fa:05:6b:e3:4f:fc:0e:5c:97:08:15:b5:8b: 36:cd:71:04:4d:bf:76:24:46:ff:1f:b0:7b:0d:92: 6e:e7:b7:ca:7a:98:8b:a9:1d:25:c4:bb:9b:f8:39: 40:7f:64:de:77:76:a0:bd:9f:b3:e4:62:bb:5c:2b: 7c:d7:de:c0:d2:ff:f6:67:3e:30:9d:88:3d:af:24: 14:95:f4:65:4c:93:09:43:7b:8c:0a:c1:05:d5:23: 3c:52:bd:ee:7c:bf:bf:d4:a8:df:8d:0a:07:58:e1: fb:a0:22:38:ae:c4:ad:65:a9:56:a9:53:6b:29:98: 6e:33:ae:28:18:f2:cc:60:e4:16:71:4a:61:22:2c: 5e:2f:29:93:16:ed:db:34:fc:a5:fd:9d:a3:a5:82: 73:13:7d:1e:ec:ef:47:03:60:f9:ac:22:70:fb:32: 49:36:52:76:b8:20:0a:57:b0:cb:6b:7f:3a:b9:e9: 09:f5:84:b1:ad:14:ca:2b:e7:51:60:5f:92:a7:96: ac:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 198.56.24.0/23 Signature Algorithm: sha256WithRSAEncryption 24:99:65:d7:b5:1f:b0:6a:4c:27:fb:a8:59:19:96:73:ed:2e: 36:ee:40:ec:e5:83:29:ca:5e:33:bd:69:39:0f:94:2d:fc:91: ba:3c:1e:4f:ac:12:2a:34:4a:06:db:3b:19:a0:ae:d8:ae:4e: 94:bc:d8:ae:21:45:1e:9f:ef:54:36:55:98:f2:1e:01:5b:a8: c1:b1:7c:63:5e:d2:f7:dd:7c:b6:90:58:b5:5d:f9:98:e8:3f: 8f:7a:9f:a3:9e:92:84:03:c5:32:c3:48:a8:61:be:5c:4c:9a: 3b:68:dd:c6:5c:fb:80:a8:7f:95:29:60:f2:45:0d:0b:b3:89: bc:96:68:e6:65:95:80:2d:96:2a:09:ef:77:74:cf:97:eb:f2: dd:d6:8f:e3:35:02:5c:7d:b6:c7:34:7e:c3:4f:ea:5b:10:e6: 6d:e2:1e:45:82:77:4e:42:5f:cb:c5:cc:c7:e3:74:e0:3a:2b: c5:21:58:25:9a:eb:db:79:71:48:b4:37:bf:a2:f3:5c:f3:a4: 98:db:f2:fd:97:3d:60:d9:61:65:39:7c:a7:8f:f7:c9:bc:d1: 6a:f7:47:64:33:5d:f9:4b:e9:3e:bb:de:f2:09:7c:51:e0:c8: e7:1e:5d:13:a0:b4:c0:56:ee:63:0d:33:02:7e:96:6a:db:e8: 8d:62:a8:fb -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA0MDc0NjU5WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4 NTM0QzY1NzYyMjMyNTM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKP9uPUYEQshFcihl0qwiGrhxKQiajuBwAqlpSL3Ob9sOzSmf6iL2kmtl0ueQKhz WrzNxKhFWAkEB4APKlj6BWvjT/wOXJcIFbWLNs1xBE2/diRG/x+wew2Sbue3ynqY i6kdJcS7m/g5QH9k3nd2oL2fs+Riu1wrfNfewNL/9mc+MJ2IPa8kFJX0ZUyTCUN7 jArBBdUjPFK97ny/v9So340KB1jh+6AiOK7ErWWpVqlTaymYbjOuKBjyzGDkFnFK YSIsXi8pkxbt2zT8pf2do6WCcxN9HuzvRwNg+awicPsySTZSdrggClewy2t/Ornp CfWEsa0UyivnUWBfkqeWrEECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRmLsmit7bO QtI6UjhTTGV2IjJTcjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE4QUIvOEE1Nzk3RENFOTQxMTFGMEJGRDZDRTMzM0M2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkxOEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUy emtMU09sSTRVMHhsZGlJeVUzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcY4GDANBgkqhkiG9w0BAQsFAAOCAQEAJJll17UfsGpMJ/uoWRmW c+0uNu5A7OWDKcpeM71pOQ+ULfyRujweT6wSKjRKBts7GaCu2K5OlLzYriFFHp/v VDZVmPIeAVuowbF8Y17S9918tpBYtV35mOg/j3qfo56ShAPFMsNIqGG+XEyaO2jd xlz7gKh/lSlg8kUNC7OJvJZo5mWVgC2WKgnvd3TPl+vy3daP4zUCXH22xzR+w0/q WxDmbeIeRYJ3TkJfy8XMx+N04DorxSFYJZrr23lxSLQ3v6LzXPOkmNvy/Zc9YNlh ZTl8p4/3ybzRavdHZDNd+UvpPrve8gl8UeDI5x5dE6C0wFbuYw0zAn6WatvojWKo +w== -----END CERTIFICATE-----Generated at Sat Jan 10 09:06:06 2026 by rpki-client