This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer File: kw3fQQEGkDvrmRnJm94BY4cGVa4.cer (raw, json) Hash identifier: gDteORbaP7dhtAEiFxfK5mhwTGr/WJgftSd5UV/W9wc= Subject key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 72A0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft caRepository: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:39:17 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.186.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Feb 2026 07:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29344 (0x72a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 21 13:39:17 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:ba:05:f9:d8:f0:67:3b:db:ef:b2:30:42: 6b:51:ac:ec:79:e5:41:49:6b:bc:8c:77:1b:f6:77: f5:73:72:94:1b:4a:15:57:92:2a:5c:bf:32:19:80: 9a:5c:77:57:59:e0:1c:b8:57:77:b6:ef:35:5a:5b: 96:3e:98:9e:4e:6e:12:ca:6a:ee:72:ce:98:3d:1b: f6:79:a5:36:e3:9e:a6:76:10:c2:f9:44:e1:fc:f0: 72:89:2e:18:c3:d6:1c:0a:20:6e:cb:1d:05:d8:ca: ee:ca:ff:1b:fd:f7:fe:57:83:ee:41:35:cd:05:33: 92:00:97:14:5a:e7:2e:da:a5:ca:e9:83:a3:ab:1c: 46:10:c2:74:50:6f:11:82:31:e8:64:2a:a2:cb:11: 42:30:52:21:39:fc:01:e2:42:2e:ea:7d:d3:e4:f0: 0b:0b:04:fe:d9:d3:62:02:8b:53:05:24:f1:7c:63: e3:47:78:9f:ba:50:85:e0:b5:a1:cc:80:42:2d:04: 0e:5e:e3:41:29:f5:6f:47:49:cf:7d:05:da:c3:3a: 7c:c7:40:7e:9f:18:8b:01:14:d1:73:c2:fb:81:8f: 29:7b:25:15:e4:c6:8d:d3:5b:89:ff:d8:51:ab:ae: d5:b5:f6:ef:46:ac:ad:47:7d:6e:64:03:d5:ce:68: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.186.0/23 Signature Algorithm: sha256WithRSAEncryption 64:5b:24:b6:4c:30:ab:63:49:23:12:d8:bb:e2:9c:7a:18:fd: 0b:36:0e:9f:a6:17:f9:95:f5:04:58:b6:86:cf:9d:d7:f5:97: 2c:45:74:b1:e1:ac:29:5b:f9:0e:84:f8:4e:7a:55:b9:af:24: 29:17:4d:4d:7c:39:e1:74:8e:f0:aa:46:74:e9:28:3f:bf:29: ec:cf:a0:fa:86:48:81:00:cc:65:42:0d:e5:ce:aa:ca:ec:03: ad:7e:56:f5:54:0a:8c:44:47:11:e3:b1:5a:3a:0a:41:e8:4a: 4c:b0:37:61:58:80:99:1f:b4:14:53:01:3b:15:17:b8:bc:66: 23:27:12:43:4e:e6:fd:c2:a3:55:3b:f7:fa:71:ac:2a:2b:c3: fe:18:3f:06:1b:27:7b:ee:50:51:3b:2b:0b:5a:2e:33:72:2c: 9f:88:b7:a3:7c:39:28:b8:0f:c8:19:d4:2a:05:09:af:62:56: df:b6:39:1a:2a:41:3a:73:2b:7f:0b:52:59:06:58:62:83:20: b0:ab:d1:e1:ee:62:00:0d:93:06:8b:72:63:dc:31:6f:d3:18: b3:a3:1b:92:0f:67:4c:28:e7:d9:d8:81:0e:0c:1f:9a:11:a7: 13:53:59:b3:d6:4d:d8:93:06:5e:20:5e:57:24:16:a8:43:4a: 69:38:fd:91 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTIxMTMzOTE3WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE5ODU1MzExMC8GA1UEBRMoOTMwRERGNDEwMTA2OTAzQkVCOTkxOUM5 OUJERTAxNjM4NzA2NTVBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALk/ugX52PBnO9vvsjBCa1Gs7HnlQUlrvIx3G/Z39XNylBtKFVeSKly/MhmAmlx3 V1ngHLhXd7bvNVpblj6Ynk5uEspq7nLOmD0b9nmlNuOepnYQwvlE4fzwcokuGMPW HAogbssdBdjK7sr/G/33/leD7kE1zQUzkgCXFFrnLtqlyumDo6scRhDCdFBvEYIx 6GQqossRQjBSITn8AeJCLup90+TwCwsE/tnTYgKLUwUk8Xxj40d4n7pQheC1ocyA Qi0EDl7jQSn1b0dJz30F2sM6fMdAfp8YiwEU0XPC+4GPKXslFeTGjdNbif/YUauu 1bX270asrUd9bmQD1c5oYR0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSTDd9BAQaQ O+uZGcmb3gFjhwZVrjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg1NTMvQTU5QkZGRTREMkVEMTFFRjhERUU1MTIwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk4NTUzL0E1OUJGRkU0RDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL2t3M2ZRUUVH a0R2cm1SbkptOTRCWTRjR1ZhNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaH4ujANBgkqhkiG9w0BAQsFAAOCAQEAZFsktkwwq2NJIxLYu+Kc ehj9CzYOn6YX+ZX1BFi2hs+d1/WXLEV0seGsKVv5DoT4TnpVua8kKRdNTXw54XSO 8KpGdOkoP78p7M+g+oZIgQDMZUIN5c6qyuwDrX5W9VQKjERHEeOxWjoKQehKTLA3 YViAmR+0FFMBOxUXuLxmIycSQ07m/cKjVTv3+nGsKivD/hg/Bhsne+5QUTsrC1ou M3Isn4i3o3w5KLgPyBnUKgUJr2JW37Y5GipBOnMrfwtSWQZYYoMgsKvR4e5iAA2T BotyY9wxb9MYs6Mbkg9nTCjn2diBDgwfmhGnE1NZs9ZN2JMGXiBeVyQWqENKaTj9 kQ== -----END CERTIFICATE-----Generated at Sat Feb 7 11:38:46 2026 by rpki-client