This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer File: zq7A6H2VhStEwGE5VUa34MHRHFc.cer (raw, json) Hash identifier: +tfAJFWLwNxTs3Cgvo68W0rVTDsPVC3B8lazzOFNZwQ= Subject key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71B3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft caRepository: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:04:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.232.42.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29107 (0x71b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 7 13:04:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:7b:3d:1a:2e:93:1d:6d:e2:68:2d:1f:80: f4:ad:7e:4a:c4:15:7b:e1:39:3f:3a:1a:9f:8e:a5: 2c:52:ef:e3:fb:c3:00:32:c2:d2:d5:19:29:95:f3: fa:97:f6:eb:bd:e9:0b:ee:35:47:38:99:49:5d:64: 20:5f:db:69:a0:5b:32:9f:23:50:0a:6c:15:3c:18: 0c:ca:f1:3b:f3:3b:dc:8e:e6:85:ba:91:49:26:5d: 5d:45:52:d9:65:b1:1f:5b:51:69:78:3a:d5:29:b4: 11:8d:ff:04:20:55:cb:fd:70:01:d9:76:74:56:33: 46:39:52:26:67:7b:05:42:b2:94:69:ca:2a:27:47: 0f:56:92:e9:e2:0b:be:5b:dc:37:1e:c9:27:2f:13: d3:00:3d:8d:74:e4:3f:6c:87:f3:9e:b1:f5:37:90: 1a:45:cc:70:dc:b7:82:8c:ec:3b:8f:52:d7:c1:ca: fe:0c:2f:45:44:50:d8:86:39:60:30:97:a3:e6:4e: 3e:0f:5e:56:55:76:51:f6:11:ab:79:4e:da:d0:a1: 04:95:4a:8f:f4:05:ea:3d:79:42:17:ff:48:a7:b0: 72:6a:86:e4:b9:04:90:09:20:02:8c:3a:53:34:e0: 2c:6b:3a:91:d2:84:f9:29:13:c8:af:d0:4c:2a:a9: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.232.42.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:39:23:c1:0b:5e:c8:c6:a5:86:7f:9c:47:6d:e5:8c:f0:88: 0f:4f:8a:e6:cd:57:66:9f:37:f3:b0:26:98:00:55:60:05:ad: cc:33:5a:e8:48:57:a7:6b:95:39:be:69:01:d2:1a:1a:ed:c5: d8:53:9a:df:92:1e:38:0a:c7:47:9a:a3:c0:fc:89:c8:f0:50: 66:62:29:e6:91:7b:6e:2f:39:b6:18:32:ce:95:4f:1f:00:e1: ee:4c:34:8a:62:da:66:16:a0:71:63:8d:63:c6:28:e3:18:34: 4b:85:74:18:61:3a:a0:3b:78:73:4a:5b:4a:67:b3:70:1e:f1: 0c:85:cb:f1:9c:9f:51:8f:fa:31:72:00:4e:42:d0:bd:bd:43: 32:9e:7a:7d:7e:71:72:67:90:38:0a:f6:b4:01:3c:24:8f:18: 62:23:75:19:d2:58:e1:b7:74:7b:f0:3e:29:95:b8:0e:c0:2a: f4:73:73:37:89:8f:73:cf:5f:fc:09:63:c0:00:bd:5a:8d:d9: 05:0e:2e:1f:5e:c0:2f:8d:f6:de:0f:fc:25:d3:63:ab:e2:72: 72:5c:6f:d6:fd:73:19:fd:28:76:af:7b:a6:5c:d3:ae:71:0a: 1c:8b:40:dd:54:e3:45:22:c3:17:00:b3:e1:ea:9c:68:7d:12: 10:1a:68:87 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA3MTMwNDE1WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE4QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5 NTU0NkI3RTBDMUQxMUM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANy0ez0aLpMdbeJoLR+A9K1+SsQVe+E5Pzoan46lLFLv4/vDADLC0tUZKZXz+pf2 673pC+41RziZSV1kIF/baaBbMp8jUApsFTwYDMrxO/M73I7mhbqRSSZdXUVS2WWx H1tRaXg61Sm0EY3/BCBVy/1wAdl2dFYzRjlSJmd7BUKylGnKKidHD1aS6eILvlvc Nx7JJy8T0wA9jXTkP2yH856x9TeQGkXMcNy3gozsO49S18HK/gwvRURQ2IY5YDCX o+ZOPg9eVlV2UfYRq3lO2tChBJVKj/QF6j15Qhf/SKewcmqG5LkEkAkgAow6UzTg LGs6kdKE+SkTyK/QTCqpzhkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTOrsDofZWF K0TAYTlVRrfgwdEcVzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI5MDkvNUMyRDEwNjRFQkM5MTFGMDkzNkVEQjgzNjc2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThCOTA5LzVDMkQxMDY0RUJDOTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJW aFN0RXdHRTVWVWEzNE1IUkhGYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcDoKjANBgkqhkiG9w0BAQsFAAOCAQEAnTkjwQteyMalhn+cR23l jPCID0+K5s1XZp8387AmmABVYAWtzDNa6EhXp2uVOb5pAdIaGu3F2FOa35IeOArH R5qjwPyJyPBQZmIp5pF7bi85thgyzpVPHwDh7kw0imLaZhagcWONY8Yo4xg0S4V0 GGE6oDt4c0pbSmezcB7xDIXL8ZyfUY/6MXIATkLQvb1DMp56fX5xcmeQOAr2tAE8 JI8YYiN1GdJY4bd0e/A+KZW4DsAq9HNzN4mPc89f/AljwAC9Wo3ZBQ4uH17AL432 3g/8JdNjq+Jyclxv1v1zGf0odq97plzTrnEKHItA3VTjRSLDFwCz4eqcaH0SEBpo hw== -----END CERTIFICATE-----Generated at Sun Jan 18 01:51:35 2026 by rpki-client