This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer File: nNdxObeuQMY2CS0SiGlE3j8a_-I.cer (raw, json) Hash identifier: UUQR3LMB23Vqly8C7tCLxRiyQgP7Nhz35J2KjqKh318= Subject key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7227 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 00:33:15 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 192.58.100.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29223 (0x7227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 13 00:33:15 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:0b:5b:1a:3b:3e:17:45:6d:51:de:ad:2c: 66:12:2c:0f:48:2e:0a:11:0c:f2:31:9e:38:26:31: 4c:6f:b3:79:f9:21:a9:2f:b3:5a:a8:43:de:60:00: 59:10:f2:8c:bf:af:fe:79:3d:a2:7f:5b:e4:e9:f0: 81:00:6a:2f:e8:da:89:57:22:fb:2b:c4:b9:ba:6e: d0:cd:da:ef:d0:28:b1:48:c9:df:1f:d7:3c:e3:eb: b4:16:97:85:05:34:2a:63:02:ec:f8:d4:0c:d4:88: c7:c6:8a:e7:e5:87:2c:58:e2:98:f4:f5:92:6d:3a: ed:9f:a4:c2:db:3d:d0:a7:62:bb:13:7c:64:45:4a: da:6a:d1:8a:9e:19:a2:40:9d:46:38:14:25:a0:bb: 46:95:dc:7d:46:96:ef:e7:83:64:6f:44:d7:b4:56: 2a:21:23:92:eb:5d:51:2d:38:6b:d9:eb:c9:52:b7: df:67:a5:08:20:14:02:94:45:c5:b8:54:07:f6:52: b7:bd:6a:17:12:58:26:dd:39:e8:05:e9:2c:5d:4f: 53:46:63:da:2d:8b:d1:ae:a9:cf:41:d1:43:8d:0f: b7:f7:4e:15:50:25:97:fb:d0:72:d2:90:1c:8e:af: 4b:71:e8:40:40:60:5a:9c:61:7f:ca:fe:72:70:10: 4f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.58.100.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:14:d8:65:fd:78:ef:49:8f:8e:8a:f8:81:75:bc:3f:dd:84: 5a:2d:bd:8d:2f:ef:f4:58:94:ec:a6:0f:b6:1c:92:98:20:cb: 3f:ee:a1:50:a6:67:05:f6:ff:c4:72:43:e5:d6:c2:54:0c:ce: ca:b7:4a:4b:6a:83:99:19:76:98:20:b6:09:aa:3c:dc:4c:cc: 5e:70:21:a0:22:d2:d9:14:6a:11:2b:c6:f8:2a:81:5f:4e:ba: db:65:f0:6b:70:fb:8e:05:8c:23:a2:09:d5:0b:ce:29:39:6c: 9b:aa:07:b7:f3:4e:53:e8:fd:3b:83:d7:90:25:07:b4:fe:f1: 09:a9:38:f3:11:39:67:6c:15:d1:3e:9b:86:bc:3f:70:92:df: 4b:e7:22:94:3d:c5:77:a2:0b:9c:0e:32:2c:fc:3f:44:d6:5f: 3a:9c:f3:72:96:82:c1:37:bc:5a:9b:f7:c3:a3:0a:af:d9:ce: 8c:64:a6:9c:4e:96:76:4f:7e:7f:b0:6f:e9:a7:56:a8:e4:cc: 27:f6:2a:dc:df:4f:10:3d:52:76:a4:59:19:2f:ba:a6:59:83: ba:18:3a:c9:d9:48:2b:21:84:3b:59:50:c9:77:ef:54:17:fd: a9:0e:51:09:15:04:68:da:e2:77:e1:dd:57:bd:03:09:c2:da: 7a:57:79:06 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTEzMDAzMzE1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFGM0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEy ODg2OTQ0REUzRjFBRkZFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKG2C1saOz4XRW1R3q0sZhIsD0guChEM8jGeOCYxTG+zefkhqS+zWqhD3mAAWRDy jL+v/nk9on9b5OnwgQBqL+jaiVci+yvEubpu0M3a79AosUjJ3x/XPOPrtBaXhQU0 KmMC7PjUDNSIx8aK5+WHLFjimPT1km067Z+kwts90KdiuxN8ZEVK2mrRip4ZokCd RjgUJaC7RpXcfUaW7+eDZG9E17RWKiEjkutdUS04a9nryVK332elCCAUApRFxbhU B/ZSt71qFxJYJt056AXpLF1PU0Zj2i2L0a6pz0HRQ40Pt/dOFVAll/vQctKQHI6v S3HoQEBgWpxhf8r+cnAQT6UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSc13E5t65A xjYJLRKIaUTePxr/4jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCREUvNkZGMjNCOTBGMDE3MTFGMDg1NTQxRjI0NDc2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzQkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1 UU1ZMkNTMFNpR2xFM2o4YV8tSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMA6ZDANBgkqhkiG9w0BAQsFAAOCAQEAGxTYZf1470mPjor4gXW8 P92EWi29jS/v9FiU7KYPthySmCDLP+6hUKZnBfb/xHJD5dbCVAzOyrdKS2qDmRl2 mCC2Cao83EzMXnAhoCLS2RRqESvG+CqBX06622Xwa3D7jgWMI6IJ1QvOKTlsm6oH t/NOU+j9O4PXkCUHtP7xCak48xE5Z2wV0T6bhrw/cJLfS+cilD3Fd6ILnA4yLPw/ RNZfOpzzcpaCwTe8Wpv3w6MKr9nOjGSmnE6Wdk9+f7Bv6adWqOTMJ/Yq3N9PED1S dqRZGS+6plmDuhg6ydlIKyGEO1lQyXfvVBf9qQ5RCRUEaNrid+HdV70DCcLaeld5 Bg== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:44 2026 by rpki-client