This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer File: vCXNTkiu32CLScwphHLFwG6L9vs.cer (raw, json) Hash identifier: KLTQMuaaQphhE1VfnbOYgIQ8iQHczZZdQpX4yM6JTEw= Subject key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71A9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 14:20:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.168.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29097 (0x71a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 6 14:20:11 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:ee:1e:89:ed:74:2d:42:1e:aa:bf:a1:59: 11:3a:c0:e5:7e:24:78:01:8e:5e:7a:a9:78:da:16: b8:d2:b2:ec:c1:ae:bd:62:7d:e7:71:3c:dc:53:3b: a9:fb:4b:d3:84:6a:1e:62:d1:47:bb:15:32:a8:b8: ff:4c:e6:ca:3e:1c:2f:30:3b:df:a2:01:14:ec:3a: fe:fe:f6:a3:b1:03:51:6f:5a:81:15:e9:09:0a:f6: 96:2d:ad:2a:18:26:63:77:19:c1:84:ba:ea:6f:6d: 0a:e9:54:f3:17:4c:88:cd:d1:cf:d1:24:e9:65:30: 88:f7:98:00:1c:5d:d1:99:da:be:a6:fa:92:12:7c: 8d:6d:2e:b2:bf:30:e6:67:0b:2a:76:c8:a4:1e:bb: 70:e2:08:06:d8:4d:63:88:ec:48:93:c7:41:52:6b: 74:3e:f4:38:7f:47:89:28:5d:21:01:54:ee:c2:d2: b8:ea:34:70:25:ea:55:c9:d0:67:2c:ee:cb:d4:8d: 4f:84:b2:6c:71:95:b7:f6:68:f0:c2:4d:96:dd:c6: a4:0d:9c:ad:30:ba:5f:0a:83:1b:de:e8:00:ff:45: 47:4d:25:9a:3c:1c:ca:33:98:69:b1:7f:f1:8e:7e: 20:ef:d0:09:28:3e:fa:e8:fd:be:31:db:da:41:d6: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.168.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:06:d3:0c:c6:47:09:4d:2f:eb:03:2f:1f:20:3f:76:3e:f0: b2:ac:18:d4:fd:9c:5a:7b:bc:a5:a7:18:84:ba:e1:c5:9f:47: 08:4b:f3:60:a1:f8:89:00:ea:59:45:0a:57:14:ed:b7:fb:ac: b9:76:d9:f0:2f:1e:ff:96:04:30:52:03:e7:cd:f6:ac:44:54: f6:e0:1a:75:84:27:0c:6d:85:6d:5e:c4:66:52:21:8a:15:f5: 5e:f1:f5:29:7d:28:64:66:54:8a:ef:1f:ae:70:a2:c4:b4:8e: 60:8c:7d:c9:bd:8d:ae:8c:48:1a:64:80:fc:d9:e7:56:1e:b8: 09:51:e1:d9:30:ef:1b:e1:ef:0e:72:5b:cd:6d:78:1b:0b:15: d1:1e:e7:c5:ad:1c:22:de:f5:d6:d7:c5:c3:ed:01:76:aa:7b: ac:95:0b:b6:68:35:a6:03:32:df:65:91:7f:37:27:83:0b:e3: 82:70:b5:1b:80:42:20:55:45:02:6e:e1:a9:c1:34:6a:5a:0f: 1e:ec:11:9a:b7:c2:29:57:e3:73:1b:bc:51:ca:94:18:a6:52: 3d:06:b6:ac:95:02:bc:f6:72:8c:31:e2:11:04:ec:cb:bd:3a: 2b:b8:35:af:ea:7d:30:a3:b0:ef:5a:f7:90:56:28:85:03:46: 79:e9:54:dd -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA2MTQyMDExWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFFNDcwMDExMC8GA1UEBRMoQkMyNUNENEU0OEFFREY2MDhCNDlDQzI5 ODQ3MkM1QzA2RThCRjZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMDU7h6J7XQtQh6qv6FZETrA5X4keAGOXnqpeNoWuNKy7MGuvWJ953E83FM7qftL 04RqHmLRR7sVMqi4/0zmyj4cLzA736IBFOw6/v72o7EDUW9agRXpCQr2li2tKhgm Y3cZwYS66m9tCulU8xdMiM3Rz9Ek6WUwiPeYABxd0Znavqb6khJ8jW0usr8w5mcL KnbIpB67cOIIBthNY4jsSJPHQVJrdD70OH9HiShdIQFU7sLSuOo0cCXqVcnQZyzu y9SNT4SybHGVt/Zo8MJNlt3GpA2crTC6XwqDG97oAP9FR00lmjwcyjOYabF/8Y5+ IO/QCSg++uj9vjHb2kHWapMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS8Jc1OSK7f YItJzCmEcsXAbov2+zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ3MDAvMTg2RjJDMkFCQjgzMTFGMDg4OTY5NzY1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU0NzAwLzE4NkYyQzJBQkI4MzExRjA4ODk2OTc2NUM0RjlBRTAyL3ZDWE5Ua2l1 MzJDTFNjd3BoSExGd0c2TDl2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr8qDANBgkqhkiG9w0BAQsFAAOCAQEAbwbTDMZHCU0v6wMvHyA/ dj7wsqwY1P2cWnu8pacYhLrhxZ9HCEvzYKH4iQDqWUUKVxTtt/usuXbZ8C8e/5YE MFID5832rERU9uAadYQnDG2FbV7EZlIhihX1XvH1KX0oZGZUiu8frnCixLSOYIx9 yb2NroxIGmSA/NnnVh64CVHh2TDvG+HvDnJbzW14GwsV0R7nxa0cIt711tfFw+0B dqp7rJULtmg1pgMy32WRfzcngwvjgnC1G4BCIFVFAm7hqcE0aloPHuwRmrfCKVfj cxu8UcqUGKZSPQa2rJUCvPZyjDHiEQTsy706K7g1r+p9MKOw71r3kFYohQNGeelU 3Q== -----END CERTIFICATE-----Generated at Sun Jan 18 01:52:10 2026 by rpki-client