This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer File: qCkvYgTIIT15H6bMqvV4UZTvgaA.cer (raw, json) Hash identifier: Jx8D4oC8bv0ybKqCFNdSUyEhnW6RlqNQedCQdZNPFdg= Subject key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70AF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 14:29:02 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.247.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28847 (0x70af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 22 14:29:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:3a:ea:2f:e1:6f:45:66:f9:b7:f2:e6:c1: 94:6e:33:e0:63:19:4c:70:3f:54:fe:38:7d:cd:73: 8c:a0:fa:df:6a:1e:28:cc:f4:e2:84:24:d2:3d:e0: c7:57:4b:f5:60:23:03:d5:9a:1e:fa:3c:af:68:ee: db:5b:82:68:e0:68:94:ab:55:16:e2:83:55:32:3a: b2:a1:78:d5:05:2b:11:f6:2c:bb:5a:a5:28:99:e4: 65:4f:bc:bd:62:f3:74:56:5c:ee:4a:85:d5:61:8c: 0f:ec:0d:72:66:da:f0:eb:0e:68:5c:0d:03:29:4a: 4d:da:b1:74:8d:af:44:74:20:05:6b:9a:bc:70:d8: df:75:fd:29:ee:a1:8a:40:a6:f2:0f:cc:f6:d3:73: b0:09:90:2c:60:73:73:ec:4e:26:0c:a0:94:77:bf: 06:69:eb:a1:17:4d:d3:4e:d2:7e:cb:e2:dd:3e:2d: 67:16:45:ed:65:0b:a6:e6:40:de:2c:9d:91:64:59: 76:d4:b3:a9:85:f0:91:91:74:65:9e:15:aa:01:a4: d3:9c:1a:47:d7:64:b9:88:0d:da:0d:39:f0:3e:fe: f9:14:d2:29:c6:a3:f4:c5:f7:5e:8d:28:53:40:30: c7:4a:c6:5c:3d:6f:48:de:87:ef:59:ed:83:b2:4f: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.247.0/24 Signature Algorithm: sha256WithRSAEncryption 44:dc:cc:27:88:e0:9b:55:6a:df:60:5c:6c:6f:e9:91:ff:1e: 16:5e:b3:7d:ac:e0:42:26:2c:a8:e7:f5:0b:41:80:b8:2d:a8: b7:ce:a5:b3:ba:73:01:83:72:67:6c:d9:15:b8:4e:d1:ed:36: 14:a9:0f:be:ee:a8:8c:fc:63:c2:9c:a7:6f:3e:e7:16:60:e5: 1e:2c:d3:1d:12:97:14:b0:c3:12:37:07:65:cd:e4:b8:88:0c: 0d:b7:cd:6f:0f:8d:46:79:ae:1c:c2:c0:27:d7:f0:97:f5:e0: 3c:15:f0:bf:b7:44:f5:5b:0a:47:b2:a4:a5:f5:b9:37:17:7e: 9c:cc:2e:66:29:2b:11:ec:9c:6e:1d:0e:09:26:4b:7d:6c:a1: d7:a0:ba:2c:ea:a6:2a:63:a1:7e:35:37:5e:47:22:39:bf:cc: 68:9c:c6:36:7e:de:f3:42:4f:89:0f:f9:31:04:d8:1a:34:e4: de:b4:58:e0:e5:2d:1c:22:e0:93:b2:a7:11:18:ec:da:2e:78: 1f:bf:fe:9c:2a:48:a2:f6:bb:82:24:7d:bb:ae:ff:c1:a5:4a: 58:53:d6:54:19:fc:70:0e:5a:ff:e8:19:33:5b:cb:cb:aa:a0: 84:bb:d8:35:99:dd:1f:44:65:b4:76:d2:85:48:d6:c6:a6:6a: 32:d4:6c:c2 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjIyMTQyOTAyWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFGREVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkND QUFGNTc4NTE5NEVGODFBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL6bOuov4W9FZvm38ubBlG4z4GMZTHA/VP44fc1zjKD632oeKMz04oQk0j3gx1dL 9WAjA9WaHvo8r2ju21uCaOBolKtVFuKDVTI6sqF41QUrEfYsu1qlKJnkZU+8vWLz dFZc7kqF1WGMD+wNcmba8OsOaFwNAylKTdqxdI2vRHQgBWuavHDY33X9Ke6hikCm 8g/M9tNzsAmQLGBzc+xOJgyglHe/BmnroRdN007Sfsvi3T4tZxZF7WULpuZA3iyd kWRZdtSzqYXwkZF0ZZ4VqgGk05waR9dkuYgN2g058D7++RTSKcaj9MX3Xo0oU0Aw x0rGXD1vSN6H71ntg7JPC+0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSoKS9iBMgh PXkfpsyq9XhRlO+BoDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRFRkUvMTE2NENBRTBBNTE2MTFFRjg5MEVDRDNFQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZERUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJ SVQxNUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKC/9zANBgkqhkiG9w0BAQsFAAOCAQEARNzMJ4jgm1Vq32BcbG/p kf8eFl6zfazgQiYsqOf1C0GAuC2ot86ls7pzAYNyZ2zZFbhO0e02FKkPvu6ojPxj wpynbz7nFmDlHizTHRKXFLDDEjcHZc3kuIgMDbfNbw+NRnmuHMLAJ9fwl/XgPBXw v7dE9VsKR7KkpfW5Nxd+nMwuZikrEeycbh0OCSZLfWyh16C6LOqmKmOhfjU3Xkci Ob/MaJzGNn7e80JPiQ/5MQTYGjTk3rRY4OUtHCLgk7KnERjs2i54H7/+nCpIova7 giR9u67/waVKWFPWVBn8cA5a/+gZM1vLy6qghLvYNZndH0RltHbShUjWxqZqMtRs wg== -----END CERTIFICATE-----Generated at Sun Jan 18 01:56:13 2026 by rpki-client