This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer File: dzzFL61HXymuNv14yBJ3Et_SFUI.cer (raw, json) Hash identifier: DxYpsOeQY/+IF2SRqXBaW7nOVkFwgGdoI+/VCRZ5tzw= Subject key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71D9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 05:00:09 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 129.78.0.0/16 IP: 192.195.170.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29145 (0x71d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 9 05:00:09 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:21:bf:26:d0:61:cc:f2:5e:7a:ab:b4:b4: 81:e2:10:bd:4b:b8:3b:f3:cd:ea:9e:d6:89:de:f4: 9b:af:4c:7d:1f:e3:95:49:73:75:03:9e:83:c9:7c: a1:aa:d0:e7:24:eb:a8:73:04:d6:e7:4e:ea:27:17: 5d:35:24:e1:5d:a9:f1:71:85:f9:cd:b4:a1:20:8e: 17:2a:d8:2b:59:7b:c1:bc:7b:49:b5:d1:f9:d3:8d: c0:38:29:8a:c6:27:f0:69:6f:35:c8:58:11:63:f6: 3d:e2:26:10:ac:77:cc:b0:6f:6a:35:fd:cb:8c:09: ac:19:47:2a:8c:dd:b2:a1:92:17:75:a6:39:a7:43: 20:e6:e8:35:2f:c2:5b:7f:c9:2e:51:70:21:03:81: 6e:51:32:89:bb:bc:b8:95:c7:63:ab:bb:a7:d2:96: 75:91:9c:d6:c4:93:9c:3b:8f:7b:dd:5c:e9:4f:dc: fc:21:1c:30:6c:29:d7:66:da:f7:9f:4f:c6:c1:a7: c2:00:18:d4:cc:57:01:9f:93:1b:16:67:19:1e:cb: 0e:7d:7e:3f:4e:0d:dd:65:0a:b9:05:0b:03:d7:86: 82:57:2f:07:0c:8e:de:d0:2d:28:83:48:9d:68:dd: 96:e0:c0:13:2c:5f:7f:63:f3:11:fb:7f:d6:70:2b: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.78.0.0/16 192.195.170.0/24 Signature Algorithm: sha256WithRSAEncryption 54:0b:55:7d:03:c5:b8:d0:5d:04:93:9d:f9:cd:9c:fe:fa:e4: ea:61:33:ba:81:f4:9d:99:d2:c0:cc:c0:99:e2:d8:b4:4b:e4: 25:66:6f:53:3b:d4:d1:16:ca:65:24:e5:49:f0:2b:72:56:0b: c6:05:21:75:db:b1:72:16:bd:93:c4:67:41:db:6c:1c:4f:b0: 0e:af:d8:27:4e:f5:3d:cb:6a:f5:a0:b2:23:77:e8:9b:e5:f4: 71:d8:fc:1c:f0:9b:16:1e:2e:81:4f:91:24:ec:c6:83:37:1c: 30:a5:2d:0d:15:40:fc:62:71:be:f7:a8:00:5b:44:6f:91:d8: 52:d3:d5:e3:8d:1a:b4:6a:bb:a1:2d:d3:38:ed:09:e8:1b:e9: 89:1b:bb:e1:fe:3c:a6:cd:24:4b:d6:c3:51:73:0b:a9:2e:4d: 87:a4:4e:e5:be:e4:af:0f:86:e4:2c:bf:69:60:7e:e2:53:bf: de:2d:17:50:2b:7b:e2:e9:fa:8e:f3:ed:c6:69:cf:1b:b7:ac: d6:58:02:6a:81:d4:24:c2:8d:6b:8e:fc:14:2e:3c:51:59:42: 06:87:83:1f:88:d8:93:d9:73:11:7f:04:33:cf:dc:35:e9:f0: a5:7b:8d:f5:76:59:00:a3:27:78:48:79:73:7e:12:4c:6c:a8: de:d9:4a:1d -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICcdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA5MDUwMDA5WhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEyNTg2NDExMC8GA1UEBRMoNzczQ0M1MkZBRDQ3NUYyOUFFMzZGRDc4 QzgxMjc3MTJERkQyMTU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKK1Ib8m0GHM8l56q7S0geIQvUu4O/PN6p7Wid70m69MfR/jlUlzdQOeg8l8oarQ 5yTrqHME1udO6icXXTUk4V2p8XGF+c20oSCOFyrYK1l7wbx7SbXR+dONwDgpisYn 8GlvNchYEWP2PeImEKx3zLBvajX9y4wJrBlHKozdsqGSF3WmOadDIOboNS/CW3/J LlFwIQOBblEyibu8uJXHY6u7p9KWdZGc1sSTnDuPe91c6U/c/CEcMGwp12ba959P xsGnwgAY1MxXAZ+TGxZnGR7LDn1+P04N3WUKuQULA9eGglcvBwyO3tAtKINInWjd luDAEyxff2PzEft/1nArBakCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBR3PMUvrUdf Ka42/XjIEncS39IVQjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU4NjQvMTAwMDE2RkFFRDE4MTFGMDhFMUMwNjAyNDA2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1ODY0LzEwMDAxNkZBRUQxODExRjA4RTFDMDYwMjQwNkY1NkJDL2R6ekZMNjFI WHltdU52MTR5QkozRXRfU0ZVSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw EQQCAAEwCwMDAIFOAwQAwMOqMA0GCSqGSIb3DQEBCwUAA4IBAQBUC1V9A8W40F0E k535zZz++uTqYTO6gfSdmdLAzMCZ4ti0S+QlZm9TO9TRFsplJOVJ8CtyVgvGBSF1 27FyFr2TxGdB22wcT7AOr9gnTvU9y2r1oLIjd+ib5fRx2Pwc8JsWHi6BT5Ek7MaD NxwwpS0NFUD8YnG+96gAW0RvkdhS09XjjRq0aruhLdM47QnoG+mJG7vh/jymzSRL 1sNRcwupLk2HpE7lvuSvD4bkLL9pYH7iU7/eLRdQK3vi6fqO8+3Gac8bt6zWWAJq gdQkwo1rjvwULjxRWUIGh4MfiNiT2XMRfwQzz9w16fCle431dlkAoyd4SHlzfhJM bKje2Uod -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:44 2026 by rpki-client