This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer File: lDrZvGF3q4wvjoExwUpUZexClU8.cer (raw, json) Hash identifier: PDyzRdOAOFXppMjz1gUP9H/JvP6Rndap5P6Nmm0HEgs= Subject key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F2B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:07:43 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 37.139.131.0/24 IP: 193.47.63.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 14:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20267 (0x4f2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 7 13:07:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:e8:c7:ee:02:f3:cb:06:75:3d:a7:d7:cc: f2:15:e7:fc:16:8f:7c:da:e6:96:c4:66:12:99:dc: 7e:09:0f:d0:35:8e:6d:0b:11:ec:f6:0c:a6:05:df: f4:2e:7e:3e:e7:ab:21:6f:aa:c3:67:2f:b8:e2:95: b6:6c:57:39:fd:9f:b0:06:45:74:26:f1:4b:79:7d: 4f:1d:d6:c4:67:71:d9:b3:d0:7b:33:3c:37:7a:47: db:55:bd:05:d9:f1:b0:62:fd:8a:dd:01:5b:03:a1: 7b:65:cc:cb:34:d5:54:5d:e7:e2:99:39:97:20:ac: 98:54:f6:d8:5b:92:c8:dc:07:fa:2f:bf:99:1c:2d: 2a:1d:84:20:4f:6f:61:e6:b7:eb:d7:5c:24:c8:2f: 15:f5:b0:7e:28:cf:9a:77:43:67:0d:21:45:94:f7: ac:bc:b9:7e:1e:90:63:42:59:e9:79:33:e4:c5:c9: ee:4f:ef:7a:3d:62:e7:c1:ea:61:9a:1f:45:bb:d3: 6f:3d:56:3b:31:0a:0a:78:17:53:e5:22:39:76:c1: e3:f3:dc:3b:e9:e2:e2:e1:61:d3:74:37:c5:d1:6a: 40:c3:ce:58:d0:2d:07:fb:90:97:65:d5:2c:ae:c4: cf:b4:60:f6:ec:62:3d:d7:66:ca:be:3e:ef:40:33: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 37.139.131.0/24 193.47.63.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:52:0c:0b:56:c3:29:c8:ef:0d:c7:0d:b2:1c:ce:6f:cf:bd: b4:28:97:b6:6c:11:33:8f:39:01:45:5b:cf:4f:d2:77:1d:78: 38:a5:d1:52:29:77:ae:99:bd:d2:b3:b5:14:99:ad:77:99:e9: 73:23:77:56:4b:1c:6c:72:24:cc:be:9f:52:f2:eb:1f:90:6d: af:9e:ad:f2:dc:8a:eb:33:d9:0a:cd:b3:07:29:df:57:aa:54: 8d:98:cd:90:41:d1:8f:c5:81:bb:52:5a:a4:6b:e7:f0:eb:1f: 85:58:28:f7:01:49:a4:44:22:35:31:39:1d:52:17:db:cc:94: 3c:ed:f5:27:64:db:a8:21:e6:12:8e:2f:cb:02:a9:ec:09:a8: 4b:e6:a8:56:15:55:cd:94:41:fe:cf:f1:57:c3:d6:07:4b:12: d3:c7:d1:7f:4c:cf:aa:9c:8e:f0:43:a9:6b:d0:da:54:92:20: 2e:52:f2:e3:f3:e1:2a:4c:92:eb:39:d1:df:62:a6:75:68:c6: 78:a7:7f:cd:8a:fe:b8:ec:f5:44:6f:60:16:05:00:1d:4d:03: 57:56:cc:54:69:e2:ec:d1:ae:18:e9:f3:1e:46:73:02:b9:47: 97:a7:d5:79:83:a6:d5:4e:09:c1:e9:f5:1e:76:f5:1b:81:93: 72:4c:18:97 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICTyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTA3MTMwNzQzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1ODU2ODExMC8GA1UEBRMoOTQzQUQ5QkM2MTc3QUI4QzJGOEU4MTMx QzE0QTU0NjVFQzQyOTU0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKl16MfuAvPLBnU9p9fM8hXn/BaPfNrmlsRmEpncfgkP0DWObQsR7PYMpgXf9C5+ PuerIW+qw2cvuOKVtmxXOf2fsAZFdCbxS3l9Tx3WxGdx2bPQezM8N3pH21W9Bdnx sGL9it0BWwOhe2XMyzTVVF3n4pk5lyCsmFT22FuSyNwH+i+/mRwtKh2EIE9vYea3 69dcJMgvFfWwfijPmndDZw0hRZT3rLy5fh6QY0JZ6Xkz5MXJ7k/vej1i58HqYZof RbvTbz1WOzEKCngXU+UiOXbB4/PcO+ni4uFh03Q3xdFqQMPOWNAtB/uQl2XVLK7E z7Rg9uxiPddmyr4+70AzmD0CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSUOtm8YXer jC+OgTHBSlRl7EKVTzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg1NjgvMzYxOEFCNkU3MkEzMTFFRTk0NTU3MjExQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU4NTY4LzM2MThBQjZFNzJBMzExRUU5NDU1NzIxMUM0RjlBRTAyL2xEclp2R0Yz cTR3dmpvRXh3VXBVWmV4Q2xVOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEACWLgwMEAMEvPzANBgkqhkiG9w0BAQsFAAOCAQEAm1IMC1bDKcjv DccNshzOb8+9tCiXtmwRM485AUVbz0/Sdx14OKXRUil3rpm90rO1FJmtd5npcyN3 VkscbHIkzL6fUvLrH5Btr56t8tyK6zPZCs2zBynfV6pUjZjNkEHRj8WBu1JapGvn 8OsfhVgo9wFJpEQiNTE5HVIX28yUPO31J2TbqCHmEo4vywKp7AmoS+aoVhVVzZRB /s/xV8PWB0sS08fRf0zPqpyO8EOpa9DaVJIgLlLy4/PhKkyS6znR32KmdWjGeKd/ zYr+uOz1RG9gFgUAHU0DV1bMVGni7NGuGOnzHkZzArlHl6fVeYOm1U4Jwen1Hnb1 G4GTckwYlw== -----END CERTIFICATE-----Generated at Mon Jan 12 17:49:49 2026 by rpki-client