This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer File: usyV7haoNg4u685zU3tvmszfLq0.cer (raw, json) Hash identifier: L1r6LE2B3z2wciBOYcum1KW2NHyirLAcZQpk7gmmgBw= Subject key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7104 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft caRepository: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 07:56:54 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.174.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28932 (0x7104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 29 07:56:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:3d:a1:c9:7a:91:d3:63:8c:7f:df:09:d8: f7:fb:12:c9:03:32:f2:64:c3:6a:68:2e:34:28:7c: 1c:04:6d:cd:24:ec:e4:e4:8e:49:f0:ec:43:2c:fb: 5f:ee:d5:92:29:fd:c1:e5:0a:ea:33:40:87:ba:10: 37:46:26:52:28:89:de:9b:ea:1b:c2:ca:27:42:34: 01:3e:5f:c6:98:bc:28:ae:8c:38:8e:a3:17:21:a9: eb:39:90:8c:fe:97:ca:72:45:00:45:be:74:20:55: fe:62:90:c0:fa:7f:0a:ae:49:db:bd:22:86:0c:c5: f3:f0:56:61:b9:8a:89:e3:ed:bb:a2:e6:96:d5:b6: ce:07:4f:23:35:da:4f:a6:59:1a:59:b4:04:84:d4: 0d:77:1c:35:a9:dd:e2:37:29:c8:41:c3:b6:29:11: c2:70:a3:1b:20:99:c2:82:16:da:a6:6b:38:46:c2: fb:3d:b5:30:8c:b1:b4:35:bd:f0:a2:a5:29:39:b7: 7e:c2:1c:95:14:11:a4:ef:a9:b0:28:78:c4:55:64: 70:c8:8a:46:6c:85:53:42:53:ad:26:3e:bd:98:a6: 37:5e:b5:11:df:48:c7:0b:38:86:02:dc:6a:14:19: e7:13:84:cc:d1:fc:cc:35:d6:74:46:41:9c:10:48: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.174.0/23 Signature Algorithm: sha256WithRSAEncryption 74:5b:6c:26:18:ee:67:17:4a:92:1d:db:67:57:dd:b8:b9:c5: 10:03:1f:b7:20:01:f4:ab:43:a8:d9:5a:1c:3c:a9:d5:f9:ab: 38:2f:d0:40:c0:21:cd:81:a9:ee:e0:7b:af:c0:d3:a5:d4:ae: 67:89:82:7a:28:5f:f3:f7:97:a1:83:a7:c5:51:cb:53:35:18: 4f:31:a0:9f:79:b3:6c:f2:81:b2:3d:ae:be:f8:1b:2c:8d:34: d2:32:4b:d6:cc:e9:88:ab:64:f8:48:38:74:39:48:b5:dd:93: 30:73:ae:7d:52:3a:c5:e4:dc:73:3e:f8:8f:f3:14:58:81:d9: f8:4b:7e:5f:bd:14:64:e1:69:8a:99:74:f6:dd:16:13:c3:6d: 1b:f2:e3:11:76:1b:57:07:ea:5e:d8:d2:c3:44:1d:38:65:ac: 43:05:c3:86:91:c9:34:bd:ad:3d:74:75:ea:7a:38:a8:29:b9: c5:c2:f6:f0:c0:83:e4:fb:df:d0:9c:57:cc:bb:7f:fc:af:fc: a4:94:33:6d:31:38:c3:82:ae:dc:2e:c8:55:36:03:55:df:2d: 41:80:ee:bc:90:04:f9:f5:37:1d:f8:28:8b:1d:5b:c1:85:9d: 80:fd:05:98:1c:18:46:ac:f9:f5:3a:5a:a0:ae:5d:2f:d3:97: b5:d1:e5:73 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI5MDc1NjU0WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE0RDNCMDExMC8GA1UEBRMoQkFDQzk1RUUxNkE4MzYwRTJFRUJDRTcz NTM3QjZGOUFDQ0RGMkVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMxnPaHJepHTY4x/3wnY9/sSyQMy8mTDamguNCh8HARtzSTs5OSOSfDsQyz7X+7V kin9weUK6jNAh7oQN0YmUiiJ3pvqG8LKJ0I0AT5fxpi8KK6MOI6jFyGp6zmQjP6X ynJFAEW+dCBV/mKQwPp/Cq5J270ihgzF8/BWYbmKiePtu6LmltW2zgdPIzXaT6ZZ Glm0BITUDXccNand4jcpyEHDtikRwnCjGyCZwoIW2qZrOEbC+z21MIyxtDW98KKl KTm3fsIclRQRpO+psCh4xFVkcMiKRmyFU0JTrSY+vZimN161Ed9Ixws4hgLcahQZ 5xOEzNH8zDXWdEZBnBBIYQcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS6zJXuFqg2 Di7rznNTe2+azN8urTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQzQjAvRUVENUI4RjJFNDhCMTFGMDkyQkJBRjZFNDQ2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTREM0IwL0VFRDVCOEYyRTQ4QjExRjA5MkJCQUY2RTQ0NkY1NkJDL3VzeVY3aGFv Tmc0dTY4NXpVM3R2bXN6ZkxxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8rjANBgkqhkiG9w0BAQsFAAOCAQEAdFtsJhjuZxdKkh3bZ1fd uLnFEAMftyAB9KtDqNlaHDyp1fmrOC/QQMAhzYGp7uB7r8DTpdSuZ4mCeihf8/eX oYOnxVHLUzUYTzGgn3mzbPKBsj2uvvgbLI000jJL1szpiKtk+Eg4dDlItd2TMHOu fVI6xeTccz74j/MUWIHZ+Et+X70UZOFpipl09t0WE8NtG/LjEXYbVwfqXtjSw0Qd OGWsQwXDhpHJNL2tPXR16no4qCm5xcL28MCD5Pvf0JxXzLt//K/8pJQzbTE4w4Ku 3C7IVTYDVd8tQYDuvJAE+fU3Hfgoix1bwYWdgP0FmBwYRqz59TpaoK5dL9OXtdHl cw== -----END CERTIFICATE-----Generated at Sun Jan 18 01:51:34 2026 by rpki-client