This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer File: oaoqLFbmSp2buqM3ttarNhctNo8.cer (raw, json) Hash identifier: AbIOQDPmm0hBakt72RWSxtAyjTZbAm7q8gekPFOphDc= Subject key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 715D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft caRepository: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 07:47:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.188.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29021 (0x715d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 2 07:47:12 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:2f:6d:35:43:c3:06:43:61:76:57:8d:b6: 9c:f9:b6:0f:0d:79:b4:cf:48:f8:b2:6f:14:cc:cf: 37:ad:fd:d6:da:11:c9:51:2d:71:75:90:16:34:2b: d7:f5:2e:39:86:ce:ee:cf:f7:d9:45:91:24:19:42: 0c:aa:0c:0a:d2:15:ed:ba:47:3e:7c:cc:bb:67:12: 14:29:5a:dc:ca:24:76:52:d8:76:82:6b:6a:93:31: fd:7d:ed:a8:d6:c7:c0:8b:0a:7d:18:8c:68:25:f2: da:2a:4e:5a:63:ca:94:bb:5b:b0:34:de:b0:7b:92: 79:3e:22:0f:06:88:db:c2:69:3a:75:2c:f2:3d:c4: fc:6d:e6:6e:76:ed:ba:63:43:6a:1e:9f:df:cf:45: a8:90:54:23:67:8b:26:97:fa:56:d3:11:55:59:c3: ef:33:f7:70:67:4c:50:94:21:6c:5d:b0:10:da:42: 51:53:33:b9:70:fe:78:d1:6a:96:8c:c9:5e:89:94: 79:77:88:90:39:46:bd:c7:a3:81:d9:f2:6e:a1:f5: 35:69:0e:9b:09:39:51:f4:a9:38:b9:22:ca:eb:6b: 5a:3d:f3:b5:98:a9:4b:33:d2:a4:90:f7:0f:cd:1b: d0:e8:4d:35:70:7a:4c:20:da:63:ff:05:99:ce:98: 9c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.188.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:d8:8b:c5:6a:ac:e6:d0:4b:a7:01:8d:4d:79:89:94:3a:82: fe:cd:2e:18:4c:26:9a:05:ee:de:70:5d:8d:2f:5c:98:c3:ed: 8f:87:26:2b:cf:f8:3e:eb:cc:3d:ba:95:b0:e8:b9:f3:ff:1c: e5:97:9f:fe:56:b2:88:09:b2:0d:06:75:cf:89:3e:97:21:39: 84:a8:6a:04:df:ba:ec:b3:5e:a0:39:3c:d8:0f:3e:3b:03:6e: 41:3e:15:03:d9:73:98:bd:e3:47:6b:1c:d7:6a:86:16:47:71: 57:6a:7e:b9:0d:03:77:3e:7b:73:8d:1c:87:01:f2:2e:ce:5f: 6e:2d:00:dc:d8:53:52:0b:7c:32:29:f4:58:8c:b0:00:c0:fe: 3a:33:78:df:ff:89:d3:91:ac:12:40:22:61:70:44:25:04:14: fc:86:20:bc:9d:ca:18:2d:34:ac:45:1a:9e:b2:04:58:92:47: ed:1a:f4:e7:42:aa:75:60:2a:42:6f:54:98:0e:6d:61:20:db: 1b:53:d2:68:16:3d:ff:5f:03:0e:4b:39:99:62:f9:f1:ba:77: 3b:0d:12:11:f1:de:8d:1a:d2:0d:3b:7f:94:f2:b1:01:a7:97: 98:42:d2:ae:d0:66:96:c6:b1:f0:04:c5:80:22:b7:70:ae:66: 5b:21:27:71 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTAyMDc0NzEyWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEyRThGNjExMC8GA1UEBRMoQTFBQTJBMkM1NkU2NEE5RDlCQkFBMzM3 QjZENkFCMzYxNzJEMzY4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKDHL201Q8MGQ2F2V422nPm2Dw15tM9I+LJvFMzPN6391toRyVEtcXWQFjQr1/Uu OYbO7s/32UWRJBlCDKoMCtIV7bpHPnzMu2cSFCla3MokdlLYdoJrapMx/X3tqNbH wIsKfRiMaCXy2ipOWmPKlLtbsDTesHuSeT4iDwaI28JpOnUs8j3E/G3mbnbtumND ah6f389FqJBUI2eLJpf6VtMRVVnD7zP3cGdMUJQhbF2wENpCUVMzuXD+eNFqlozJ XomUeXeIkDlGvcejgdnybqH1NWkOmwk5UfSpOLkiyutrWj3ztZipSzPSpJD3D80b 0OhNNXB6TCDaY/8Fmc6YnJECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBShqiosVuZK nZu6oze21qs2Fy02jzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU4RjYvM0Q2RDhGRjBFN0FGMTFGMDlCMDZBMzQyNTM2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJFOEY2LzNENkQ4RkYwRTdBRjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJt U3AyYnVxTTN0dGFyTmhjdE5vOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8vDANBgkqhkiG9w0BAQsFAAOCAQEALdiLxWqs5tBLpwGNTXmJ lDqC/s0uGEwmmgXu3nBdjS9cmMPtj4cmK8/4PuvMPbqVsOi58/8c5Zef/layiAmy DQZ1z4k+lyE5hKhqBN+67LNeoDk82A8+OwNuQT4VA9lzmL3jR2sc12qGFkdxV2p+ uQ0Ddz57c40chwHyLs5fbi0A3NhTUgt8Min0WIywAMD+OjN43/+J05GsEkAiYXBE JQQU/IYgvJ3KGC00rEUanrIEWJJH7Rr050KqdWAqQm9UmA5tYSDbG1PSaBY9/18D Dks5mWL58bp3Ow0SEfHejRrSDTt/lPKxAaeXmELSrtBmlsax8ATFgCK3cK5mWyEn cQ== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:42 2026 by rpki-client