This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer (raw, json) Hash identifier: HhJk52bly/1VY/pTwV+2V8GucnM8Q59v7iz27nGYGFM= Subject key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71DF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft caRepository: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 07:43:31 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 167.179.200.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29151 (0x71df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 9 07:43:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:67:a6:d3:5a:5b:c8:8d:57:9e:85:40:7c: be:c5:f1:4a:a4:a1:b2:34:76:21:47:46:88:13:e9: 3c:cb:58:83:d0:45:4c:1f:a6:8a:f4:77:29:fa:ae: 25:3c:3b:67:a8:e7:24:2d:d5:66:d2:a1:04:d9:f8: 69:d8:90:29:c1:85:97:b3:94:36:77:77:a0:fb:76: 19:17:05:7a:50:fa:18:6f:25:05:0b:48:f9:ee:c8: fe:27:07:c4:4b:f4:89:1b:1a:f3:46:45:a0:7d:48: 59:04:80:5a:08:4b:58:ca:7d:eb:64:52:d3:53:c9: 2f:94:1c:e2:16:e5:01:19:d3:cc:5f:19:06:25:d4: 0f:7c:9d:5c:2a:74:43:13:ce:f2:a2:38:d1:3e:a5: 57:19:1d:a0:b7:5c:e4:f6:54:b7:f1:1a:27:f7:2c: 41:85:95:eb:64:80:35:86:c2:5b:dc:c3:a6:86:14: f8:69:b1:2d:92:fc:42:06:4a:4c:1d:31:7d:fb:ef: 68:6d:40:1b:62:a0:f0:15:94:44:1a:71:1b:fa:f7: 26:a4:d2:e1:0f:f7:20:05:8b:88:da:b1:1a:43:1b: 06:19:8f:94:17:4c:87:f1:71:0a:bc:e4:ce:0d:92: a0:7d:7f:1d:70:fe:9b:01:b3:09:3d:85:bc:a5:98: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.200.0/21 Signature Algorithm: sha256WithRSAEncryption 90:4a:65:c1:06:d7:74:e7:88:2c:bf:60:67:e2:c4:6f:c0:c2: 64:ec:10:2a:b7:18:f7:3c:c3:53:f7:49:ff:59:8c:17:69:35: 14:ee:f0:1a:cb:9a:54:d3:ba:d2:1d:7b:b2:62:ba:33:e2:9a: af:ba:15:b1:d8:74:80:11:6f:3a:78:88:13:7d:e8:eb:48:2d: d8:3a:cc:23:6e:90:1d:54:2c:e5:b1:25:8e:fd:41:50:ba:c9: c9:6f:4d:88:14:94:b9:30:fc:90:09:32:48:c5:a5:99:65:8b: 6d:8d:84:4c:48:3e:af:28:5c:4d:2d:15:35:67:05:dd:6b:6a: 5f:a4:a8:ae:da:dc:86:e4:32:1e:76:cc:d0:8f:aa:c4:a4:b4: ac:08:8f:ed:b9:d1:7d:e6:21:6b:2e:48:70:15:d6:f1:4c:36: 3e:96:47:9e:0c:8b:34:7d:87:61:8e:88:76:dc:12:29:ff:a5: 18:21:12:54:7b:29:6a:fc:42:5a:e6:d3:6d:56:c3:6a:01:b9: d4:df:72:49:07:45:29:95:86:3d:5d:35:36:c9:45:30:36:4f: c9:a8:49:f9:b7:10:e6:4d:a7:8d:0a:16:38:a9:27:28:55:f9: 47:b6:c7:dc:e5:70:ad:2b:b5:38:f8:fc:79:84:ab:16:1c:ba: fc:4a:1a:99 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA5MDc0MzMxWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMz MEEwMjc4MjJCOUNBMUZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AIx5Z6bTWlvIjVeehUB8vsXxSqShsjR2IUdGiBPpPMtYg9BFTB+mivR3KfquJTw7 Z6jnJC3VZtKhBNn4adiQKcGFl7OUNnd3oPt2GRcFelD6GG8lBQtI+e7I/icHxEv0 iRsa80ZFoH1IWQSAWghLWMp962RS01PJL5Qc4hblARnTzF8ZBiXUD3ydXCp0QxPO 8qI40T6lVxkdoLdc5PZUt/EaJ/csQYWV62SANYbCW9zDpoYU+GmxLZL8QgZKTB0x ffvvaG1AG2Kg8BWURBpxG/r3JqTS4Q/3IAWLiNqxGkMbBhmPlBdMh/FxCrzkzg2S oH1/HXD+mwGzCT2FvKWYEEcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSebPqrlLQr IXYB4TMKAngiucofuTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI5REYvRTI3QzkzQUVFRDJFMTFGMDgwQzQ2MDMyNDc2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUyOURGL0UyN0M5M0FFRUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMw S3lGMkFlRXpDZ0o0SXJuS0g3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA6ezyDANBgkqhkiG9w0BAQsFAAOCAQEAkEplwQbXdOeILL9gZ+LE b8DCZOwQKrcY9zzDU/dJ/1mMF2k1FO7wGsuaVNO60h17smK6M+Kar7oVsdh0gBFv OniIE33o60gt2DrMI26QHVQs5bEljv1BULrJyW9NiBSUuTD8kAkySMWlmWWLbY2E TEg+ryhcTS0VNWcF3WtqX6SortrchuQyHnbM0I+qxKS0rAiP7bnRfeYhay5IcBXW 8Uw2PpZHngyLNH2HYY6IdtwSKf+lGCESVHspavxCWubTbVbDagG51N9ySQdFKZWG PV01NslFMDZPyahJ+bcQ5k2njQoWOKknKFX5R7bH3OVwrSu1OPj8eYSrFhy6/Eoa mQ== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:44 2026 by rpki-client