This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer File: mP6mxE_1MoSDXoHQcN_BggttUOk.cer (raw, json) Hash identifier: XMfEh0jWn7JBFGG/VbTrNYKKRGw1hC5pTE9t7k7KtBg= Subject key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70CE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft caRepository: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 24 Dec 2025 12:40:08 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 66.235.120.0/21 IP: 144.249.224.0/20 IP: 158.120.80.0/21 IP: 170.10.68.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28878 (0x70ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 24 12:40:08 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:e4:0b:cd:ab:a9:97:e0:e8:50:bd:7f:2f: 91:2d:1b:93:a8:33:2b:34:e9:b6:c4:29:2e:e7:cd: d7:2e:bb:a7:8e:66:49:bf:45:d7:2e:3e:4c:97:1e: 9c:02:e7:58:cd:b5:88:08:25:d4:a2:a1:a1:aa:47: 03:06:c1:bc:ba:5c:3c:9e:26:93:47:8f:8e:16:ab: b6:35:f4:ec:c5:32:3d:0d:fa:0a:b4:b7:be:9d:b3: c6:99:ca:6d:50:d8:bb:b5:85:39:c2:e5:4d:34:d9: bf:97:68:6c:5f:b2:8d:58:b2:e0:a4:8f:0e:7c:21: b3:e4:16:45:17:a6:6a:49:99:e4:36:a4:09:d0:97: 34:6b:18:8d:1c:9b:df:3c:cd:80:b3:c7:71:c2:c3: b8:95:c3:8b:3d:9a:28:81:a4:24:49:42:b2:96:58: 66:00:3e:4b:06:20:61:d9:e9:4b:a3:40:b9:f5:b2: 15:2c:ed:0b:f3:d8:ec:8e:2a:a1:49:7a:05:14:27: 6f:a2:3b:14:83:7a:67:34:e0:47:24:f8:5d:dd:6a: 82:df:e7:a3:26:0f:25:17:f1:c8:27:17:00:fa:1e: 19:6b:d5:59:38:8f:e7:c8:42:23:c1:03:35:d5:ec: 6e:9d:b1:55:68:1b:a3:6c:0a:be:b7:23:55:bd:66: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.235.120.0/21 144.249.224.0/20 158.120.80.0/21 170.10.68.0/22 Signature Algorithm: sha256WithRSAEncryption 72:2d:e2:fa:4e:53:5c:60:86:60:1a:91:cd:e8:60:2b:5d:f7: cb:de:65:80:dc:1c:13:de:3b:88:83:f4:38:da:7e:05:3b:29: a3:c9:07:5f:de:9d:d0:2b:61:ca:eb:fb:83:60:e1:79:ab:28: b8:83:3c:3e:21:73:bb:98:a3:9d:be:50:de:65:07:3f:c3:e1: ce:13:17:e3:0c:d4:28:0f:8e:6e:cc:29:da:a9:77:8c:27:f8: 7a:0d:88:0d:2b:e8:53:8f:d6:8d:23:a3:5e:bb:7b:7b:55:31: de:3b:1e:b1:60:99:ef:13:26:96:3c:08:40:51:aa:23:71:09: 0b:0c:8e:89:9c:56:22:1e:f5:dd:a4:e7:55:af:6c:a4:b7:ba: aa:22:b9:62:6a:2d:e3:8f:b2:16:55:cc:db:a3:77:8e:b9:58: 13:23:08:e1:73:3c:a5:33:6d:50:f5:be:f7:03:a9:1e:31:84: ee:fd:71:fe:54:6e:b8:41:ed:44:c2:43:93:f0:de:b2:b6:cd: 7a:56:4b:0b:0a:ba:97:a9:20:64:c3:ee:e2:36:a2:94:a6:63: c6:1e:f3:95:b9:2d:77:bb:af:d8:74:d1:6e:3d:e8:dd:ea:10: 78:ce:02:a5:dc:e2:46:27:e4:cb:42:5e:57:04:ee:0d:35:e2: 58:cd:4c:57 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgICcM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI0MTI0MDA4WhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEyRjZFMzExMC8GA1UEBRMoOThGRUE2QzQ0RkY1MzI4NDgzNUU4MUQw NzBERkMxODIwQjZENTBFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKtP5AvNq6mX4OhQvX8vkS0bk6gzKzTptsQpLufN1y67p45mSb9F1y4+TJcenALn WM21iAgl1KKhoapHAwbBvLpcPJ4mk0ePjhartjX07MUyPQ36CrS3vp2zxpnKbVDY u7WFOcLlTTTZv5dobF+yjViy4KSPDnwhs+QWRRemakmZ5DakCdCXNGsYjRyb3zzN gLPHccLDuJXDiz2aKIGkJElCspZYZgA+SwYgYdnpS6NAufWyFSztC/PY7I4qoUl6 BRQnb6I7FIN6ZzTgRyT4Xd1qgt/noyYPJRfxyCcXAPoeGWvVWTiP58hCI8EDNdXs bp2xVWgbo2wKvrcjVb1mtS0CAwEAAaOCAwUwggMBMB0GA1UdDgQWBBSY/qbET/Uy hINegdBw38GCC21Q6TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY2RTMvRUE1MzgxREVCNUREMTFFRjk3RDlGQTM0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJGNkUzL0VBNTM4MURFQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL21QNm14RV8x TW9TRFhvSFFjTl9CZ2d0dFVPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQiMCAw HgQCAAEwGAMEA0LreAMEBJD54AMEA554UAMEAqoKRDANBgkqhkiG9w0BAQsFAAOC AQEAci3i+k5TXGCGYBqRzehgK133y95lgNwcE947iIP0ONp+BTspo8kHX96d0Cth yuv7g2DheasouIM8PiFzu5ijnb5Q3mUHP8PhzhMX4wzUKA+Obswp2ql3jCf4eg2I DSvoU4/WjSOjXrt7e1Ux3jsesWCZ7xMmljwIQFGqI3EJCwyOiZxWIh713aTnVa9s pLe6qiK5Ymot44+yFlXM26N3jrlYEyMI4XM8pTNtUPW+9wOpHjGE7v1x/lRuuEHt RMJDk/DesrbNelZLCwq6l6kgZMPu4jailKZjxh7zlbktd7uv2HTRbj3o3eoQeM4C pdziRifky0JeVwTuDTXiWM1MVw== -----END CERTIFICATE-----Generated at Wed Jan 21 09:05:38 2026 by rpki-client