This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer File: mV1wqX9WsuAAuspuykNz5iB7uY0.cer (raw, json) Hash identifier: c36oE6T+4sRCWEqUdkzsUdsLvHhY9sGO/cXLySeXDnU= Subject key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71DD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 06:48:21 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 192.58.99.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29149 (0x71dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 9 06:48:21 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:e0:cb:e3:1b:cf:b1:6e:6a:d1:f0:30:60: dd:bd:d2:08:30:a0:6b:b7:25:cc:33:2c:bf:3f:35: 00:49:8a:53:c9:93:a8:95:02:f7:d6:09:0f:4a:e4: 26:b2:72:99:69:50:ad:96:13:4f:0e:cc:7f:ba:b0: d0:2e:2d:f8:d5:da:af:1d:54:83:4e:6c:4b:56:17: 92:24:5a:fe:7a:72:d8:0b:7d:89:7a:ae:59:8e:b0: 29:23:1b:da:1c:10:d8:ba:07:c7:7b:96:4f:f1:95: 69:0a:7d:8f:b6:04:f3:c5:45:49:31:b1:20:e9:c6: f9:5c:cd:54:ae:04:52:52:11:13:b1:8f:be:c2:0a: 18:f3:78:c2:73:43:c6:92:a3:dd:cd:b1:ba:59:d9: e9:07:d1:85:81:1b:cd:85:cd:3d:58:49:49:78:e2: ad:f0:7d:ce:8e:95:87:c9:05:98:90:28:8f:97:7c: fe:c0:bf:1c:84:08:70:a5:e6:2f:eb:62:7a:28:39: 04:dc:11:3e:ed:47:60:a8:21:92:0f:c2:dd:6f:5a: e7:7a:2c:98:1b:73:2a:ef:6d:40:1c:a7:78:1d:78: 79:8b:39:61:36:45:0d:49:ba:69:3f:cf:46:21:12: ba:ce:66:93:33:1b:e5:3b:dc:fc:37:51:ea:d0:f9: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.58.99.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ca:b2:c7:ff:b8:95:db:21:92:8e:3a:50:17:3b:d4:9d:c9: 0e:e8:8b:ef:3a:38:d8:5d:c3:d9:a8:6b:a1:64:ef:b7:eb:37: 1c:40:1b:fa:35:6e:ea:ca:e3:c6:70:1f:30:49:50:7d:65:a4: 3c:ba:21:83:85:28:8a:11:85:ab:2a:42:b8:49:4c:0a:a0:58: 61:4f:88:a7:89:58:f3:00:98:ce:65:6f:2c:c4:39:7b:f8:b2: ee:3e:8e:a7:a7:6b:73:7e:12:26:91:ae:18:14:6a:c8:81:41: 74:78:e4:89:e2:4f:ba:a5:31:75:a1:14:83:9b:78:29:94:96: fd:3e:54:a7:ba:df:d9:9e:5d:88:08:01:a9:8e:33:b0:2f:84: 89:26:b0:df:94:88:fa:1e:a6:4a:e1:7f:1e:f6:49:e2:74:b3: 05:b4:92:de:83:2c:9c:5d:9a:30:e5:50:9a:31:e9:3b:b7:99: 9e:c8:7c:7d:02:fa:31:f6:7b:1c:2b:20:64:e5:2d:42:d6:07: ec:4d:d7:2d:1d:a5:52:91:62:89:68:2a:5b:c5:fc:65:e9:6a: 59:03:23:f7:29:b5:18:20:5d:09:ac:4e:77:d7:4f:7a:43:bf: 4f:8a:bd:33:41:84:ef:ff:63:0e:e8:e5:d4:f7:7f:8c:d7:53: 6a:76:9f:b2 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA5MDY0ODIxWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFQTg1MDExMC8GA1UEBRMoOTk1RDcwQTk3RjU2QjJFMDAwQkFDQTZF Q0E0MzczRTYyMDdCQjk4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALWJ4MvjG8+xbmrR8DBg3b3SCDCga7clzDMsvz81AEmKU8mTqJUC99YJD0rkJrJy mWlQrZYTTw7Mf7qw0C4t+NXarx1Ug05sS1YXkiRa/npy2At9iXquWY6wKSMb2hwQ 2LoHx3uWT/GVaQp9j7YE88VFSTGxIOnG+VzNVK4EUlIRE7GPvsIKGPN4wnNDxpKj 3c2xulnZ6QfRhYEbzYXNPVhJSXjirfB9zo6Vh8kFmJAoj5d8/sC/HIQIcKXmL+ti eig5BNwRPu1HYKghkg/C3W9a53osmBtzKu9tQByneB14eYs5YTZFDUm6aT/PRiES us5mkzMb5Tvc/DdR6tD5s/MCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSZXXCpf1ay 4AC6ym7KQ3PmIHu5jTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE4NTAvMkRCQzQ5NDhFRDI3MTFGMEIzOTdEMzc5NDQ2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBODUwLzJEQkM0OTQ4RUQyNzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlX c3VBQXVzcHV5a056NWlCN3VZMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMA6YzANBgkqhkiG9w0BAQsFAAOCAQEAOcqyx/+4ldshko46UBc7 1J3JDuiL7zo42F3D2ahroWTvt+s3HEAb+jVu6srjxnAfMElQfWWkPLohg4UoihGF qypCuElMCqBYYU+Ip4lY8wCYzmVvLMQ5e/iy7j6Op6drc34SJpGuGBRqyIFBdHjk ieJPuqUxdaEUg5t4KZSW/T5Up7rf2Z5diAgBqY4zsC+EiSaw35SI+h6mSuF/HvZJ 4nSzBbSS3oMsnF2aMOVQmjHpO7eZnsh8fQL6MfZ7HCsgZOUtQtYH7E3XLR2lUpFi iWgqW8X8ZelqWQMj9ym1GCBdCaxOd9dPekO/T4q9M0GE7/9jDujl1Pd/jNdTanaf sg== -----END CERTIFICATE-----Generated at Sun Jan 18 01:51:33 2026 by rpki-client