This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer (raw, json) Hash identifier: LGCtHdTg0E8So+MRaE9NtGZm/X+OeMEBSPe4luA9Vmw= Subject key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70C0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 13:51:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 157.10.72.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28864 (0x70c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 23 13:51:18 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:1a:43:96:42:a4:9a:19:aa:54:90:66:e5: 73:16:32:6d:d3:ee:52:9c:6f:66:50:49:d2:a2:30: c9:d4:1e:5b:94:20:7e:58:c0:73:1f:ce:00:80:d2: 62:f0:5a:97:86:03:4c:9a:dc:a7:86:14:56:81:0d: 11:0b:e7:bf:e0:6a:b4:f7:c7:92:ae:69:b3:03:ce: bb:d9:00:04:b6:5d:08:a4:e4:82:19:9f:b2:cb:b2: 10:97:7d:5f:98:f1:89:d5:9d:2e:42:96:6f:8a:d3: f4:40:24:7e:0b:8d:68:8c:2e:d4:cc:79:d0:fd:6b: c4:36:7e:bd:0f:4c:4e:1f:4a:99:4c:f9:69:ad:a0: 38:0d:0f:61:d9:51:66:5c:fb:3a:52:35:f3:be:fd: 49:f0:14:4d:72:60:84:60:a6:6a:ba:fb:37:da:5e: ec:a2:63:92:3e:e8:19:c0:d3:cc:5a:18:8a:0c:c8: 73:90:17:41:0f:45:2d:b2:33:f6:16:42:b7:70:6e: df:51:35:7d:7a:32:25:ff:8e:39:e9:ec:12:f1:98: a5:9f:42:59:5e:12:71:9b:65:7e:28:07:a7:08:d4: 4a:10:2e:89:1f:6c:ab:74:1f:a7:24:99:bc:1a:49: b5:13:3b:95:1b:83:e9:55:41:a5:4b:58:36:c0:12: b4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.72.0/23 Signature Algorithm: sha256WithRSAEncryption a2:a6:55:e4:78:ad:60:d4:28:1a:14:89:e2:09:9b:51:51:17: c4:f9:2b:ff:6f:7e:30:32:fe:69:b9:d1:cd:78:3f:e3:53:1b: 7a:1b:35:e4:5a:1a:61:cc:fc:46:50:9b:2d:fd:02:09:3d:1c: c1:c2:52:f9:60:c0:66:64:89:1d:ed:20:9a:90:2c:b8:5d:19: b6:81:b0:63:eb:9d:aa:0c:58:bc:26:47:bf:3f:1c:a4:e7:79: 37:a5:7c:8b:e6:8a:18:41:be:0a:7f:e9:23:dc:92:f9:3c:e5: 41:a8:7b:41:16:aa:17:2b:9e:9b:6e:a1:16:0b:bb:9c:95:fe: ee:d4:1c:2a:36:47:78:e5:47:f2:6a:15:be:e2:4a:09:4e:bc: 0d:16:aa:97:f4:d0:55:aa:56:99:6c:1a:28:21:5d:0a:4f:21: c6:c5:92:2a:ab:3b:f9:d3:07:bd:c4:4e:d0:b8:93:9b:1e:3f: fd:d2:00:c1:2a:98:23:48:b9:0a:39:4a:e8:f3:15:b0:8e:39: 4b:9e:a8:83:d2:1b:de:06:4d:4d:32:4c:6f:e2:52:9a:50:18: 7f:10:b6:09:f4:34:ef:ec:d0:00:27:b5:05:11:f6:28:c1:1a: f2:2f:64:52:72:c0:6d:b3:43:1f:6f:68:23:96:dd:e7:0f:5c: 87:39:3c:fd -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIzMTM1MTE4WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFBNEVGOTExMC8GA1UEBRMoODcyQzkzNjg2NTZDNzc4MzU3QzJBNUE5 OUJFQ0ZGRjY3NzU1MEFDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ7/GkOWQqSaGapUkGblcxYybdPuUpxvZlBJ0qIwydQeW5QgfljAcx/OAIDSYvBa l4YDTJrcp4YUVoENEQvnv+BqtPfHkq5pswPOu9kABLZdCKTkghmfssuyEJd9X5jx idWdLkKWb4rT9EAkfguNaIwu1Mx50P1rxDZ+vQ9MTh9KmUz5aa2gOA0PYdlRZlz7 OlI18779SfAUTXJghGCmarr7N9pe7KJjkj7oGcDTzFoYigzIc5AXQQ9FLbIz9hZC t3Bu31E1fXoyJf+OOensEvGYpZ9CWV4ScZtlfigHpwjUShAuiR9sq3QfpySZvBpJ tRM7lRuD6VVBpUtYNsAStIkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSHLJNoZWx3 g1fCpamb7P/2d1UKyDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRFRjkvNzVBMENEMTREMTM3MTFFRUFBOUYxOTgwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE0RUY5Lzc1QTBDRDE0RDEzNzExRUVBQTlGMTk4MEM0RjlBRTAyL2h5eVRhR1Zz ZDROWHdxV3BtLXpfOW5kVkNzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0KSDANBgkqhkiG9w0BAQsFAAOCAQEAoqZV5HitYNQoGhSJ4gmb UVEXxPkr/29+MDL+abnRzXg/41Mbehs15FoaYcz8RlCbLf0CCT0cwcJS+WDAZmSJ He0gmpAsuF0ZtoGwY+udqgxYvCZHvz8cpOd5N6V8i+aKGEG+Cn/pI9yS+TzlQah7 QRaqFyuem26hFgu7nJX+7tQcKjZHeOVH8moVvuJKCU68DRaql/TQVapWmWwaKCFd Ck8hxsWSKqs7+dMHvcRO0LiTmx4//dIAwSqYI0i5CjlK6PMVsI45S56og9Ib3gZN TTJMb+JSmlAYfxC2CfQ07+zQACe1BRH2KMEa8i9kUnLAbbNDH29oI5bd5w9chzk8 /Q== -----END CERTIFICATE-----Generated at Sun Jan 18 01:54:30 2026 by rpki-client