This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer (raw, json) Hash identifier: 3LQetUbNyTXb0ltGHB4dK+RYdT5ttb8R+EW1HXoY7vM= Subject key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028320 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft caRepository: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 13:07:26 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.56.44.0/24 IP: 2001:df1:6500::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 10:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164640 (0x28320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 13:07:26 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:cd:03:0a:8f:9c:15:7f:8e:1b:5d:73:ab: 3b:ec:ba:36:f5:ce:d2:b8:d0:62:38:cf:ce:7c:d7: e7:78:52:2a:96:45:5f:c4:79:4a:ae:d0:b9:eb:5b: 6c:b1:ef:71:55:93:c3:dc:4f:b9:c6:3b:ea:be:a8: b3:c6:40:93:80:fa:80:d6:3d:90:03:b7:25:2d:db: d1:4d:a9:66:b7:1c:37:9c:28:43:b8:b6:29:02:ac: 46:b5:eb:88:69:38:a9:0c:f7:f7:d3:04:fc:17:17: 19:6d:cc:d7:16:5e:d4:b4:01:a6:f2:f1:5c:89:2e: b1:ed:92:4b:b1:7e:63:7d:6e:1b:8a:39:b2:df:5e: b7:4d:fb:0e:51:31:d6:d0:dc:a6:28:de:4d:ab:fc: b4:2a:a2:98:00:d0:bf:d9:9e:4c:bc:32:2b:10:03: c8:47:50:5b:87:ab:b0:9c:13:96:da:4a:e1:18:e4: 92:81:5d:7e:c2:91:34:fa:8c:ac:97:1b:04:06:f6: f9:3f:73:54:2d:58:58:67:c3:8d:94:d3:02:51:f8: a1:8e:bc:9c:fb:ae:2d:12:4d:91:02:3b:fc:b9:ad: d4:3a:cf:36:7a:5d:e4:df:05:89:00:c9:e7:59:7e: 30:4e:b3:59:46:ff:1d:e1:e5:1a:61:cd:4e:cb:52: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.56.44.0/24 IPv6: 2001:df1:6500::/48 Signature Algorithm: sha256WithRSAEncryption 75:b0:6e:46:c9:53:f1:49:ed:a7:af:86:2c:2b:4b:4b:07:84: 2a:29:80:a7:75:bd:ec:b8:a5:8b:36:68:6a:0a:c4:31:eb:cb: d5:9e:c2:85:ca:38:37:27:2d:00:aa:f5:bf:25:6b:b9:7d:02: 2a:dc:01:66:f0:1c:40:46:fa:2e:16:3d:a2:3e:bd:d5:4d:90: 66:29:12:20:84:08:11:bb:b7:6b:b1:4f:7b:b1:be:3e:73:a9: 75:62:99:fc:ee:f8:2a:2f:53:19:b4:88:5a:cd:c1:45:30:35: 6d:42:b8:e5:ab:9d:a6:3e:75:04:90:3d:92:67:27:13:3d:19: 39:82:9e:8a:cb:d0:c2:55:ed:d9:a6:96:bc:bf:37:34:5a:b7: 2e:ba:59:ba:85:e0:5e:72:02:07:cf:39:7b:ca:be:e1:83:24: 8c:86:4e:0b:1d:9a:c6:0e:a5:dd:cb:ef:08:6d:56:da:ae:5a: e6:40:2b:ec:7c:a2:ba:f1:30:86:7a:b8:d8:a5:27:56:b1:72: 9e:a4:08:d5:20:3f:b3:71:01:e6:6c:2f:10:62:23:d9:d7:46: a1:0f:08:e4:e1:0b:5a:1c:80:0a:94:7b:54:43:3f:e5:78:06: 44:f0:3f:a3:91:18:fd:03:3f:5f:dd:d2:f1:e7:9a:3e:d5:c2: 75:80:c7:fc -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAoMgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjEzMDcyNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgy RUIxOENEQjZDRjk2NDRGRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+5c0DCo+cFX+OG11zqzvsujb1ztK40GI4z8581+d4UiqWRV/EeUqu0LnrW2yx 73FVk8PcT7nGO+q+qLPGQJOA+oDWPZADtyUt29FNqWa3HDecKEO4tikCrEa164hp OKkM9/fTBPwXFxltzNcWXtS0Aaby8VyJLrHtkkuxfmN9bhuKObLfXrdN+w5RMdbQ 3KYo3k2r/LQqopgA0L/Znky8MisQA8hHUFuHq7CcE5baSuEY5JKBXX7CkTT6jKyX GwQG9vk/c1QtWFhnw42U0wJR+KGOvJz7ri0STZECO/y5rdQ6zzZ6XeTfBYkAyedZ fjBOs1lG/x3h5RphzU7LUqX/AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUJkz8AvZx rKkvQFgusYzbbPlkT/UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRGRDg1L0E4RDRBRkVDRDBFMTExRUI5NUExRkY1NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZa eHJLa3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBADLOCwwDwQCAAIwCQMHACABDfFlADANBgkqhkiG9w0BAQsFAAOC AQEAdbBuRslT8Untp6+GLCtLSweEKimAp3W97LilizZoagrEMevL1Z7Chco4Nyct AKr1vyVruX0CKtwBZvAcQEb6LhY9oj691U2QZikSIIQIEbu3a7FPe7G+PnOpdWKZ /O74Ki9TGbSIWs3BRTA1bUK45audpj51BJA9kmcnEz0ZOYKeisvQwlXt2aaWvL83 NFq3LrpZuoXgXnICB885e8q+4YMkjIZOCx2axg6l3cvvCG1W2q5a5kAr7HyiuvEw hnq42KUnVrFynqQI1SA/s3EB5mwvEGIj2ddGoQ8I5OELWhyACpR7VEM/5XgGRPA/ o5EY/QM/X93S8eeaPtXCdYDH/A== -----END CERTIFICATE-----Generated at Wed Jan 7 13:25:00 2026 by rpki-client