This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer File: D5BpKh7v5_ChrGi14awJ9wJpccw.cer (raw, json) Hash identifier: vlWeOX/M4g4LhmZN4APTtEnqwsPUoUX9/sU1Zr6n3nI= Subject key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71E3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 12:25:14 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 165.86.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 09:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29155 (0x71e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 9 12:25:14 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:8b:04:f3:bf:8a:b4:ca:81:5e:07:65:37: 67:a0:c6:c5:8d:1a:eb:f0:b4:18:67:5a:eb:3f:32: 4f:56:c1:fe:c8:09:85:b2:70:1c:96:ed:8b:ce:8b: ff:bb:fb:c4:33:b0:68:35:20:87:c8:0b:eb:4e:16: 3f:e4:88:aa:98:26:1c:f3:2d:54:df:fe:8d:4c:7f: 66:5d:7e:23:71:2a:1e:71:10:84:1d:e5:4a:51:a6: 7e:7d:43:bd:c6:a7:c9:51:18:fc:e6:29:b2:3a:ce: 4a:ca:74:99:c8:31:3a:88:33:02:08:64:3d:e0:25: 85:51:7d:62:5a:aa:4e:f4:a2:52:4a:bc:a0:d1:5e: 77:d5:aa:ff:b3:b6:d5:87:71:ac:76:ef:9f:bb:ab: 24:e5:ae:97:0b:18:c1:20:4f:e6:d0:d4:4c:a7:2c: 0e:fe:63:23:d4:df:c6:06:e3:9e:4b:a3:12:8a:5c: 96:53:82:d0:f9:13:4e:c1:fd:7a:2a:b0:8a:3b:22: 6f:93:b1:d7:db:a0:f5:d1:52:02:ae:df:ea:34:ca: e3:a9:d4:43:6f:9a:7d:16:87:1f:71:d5:d2:57:1d: fe:a9:52:c2:6e:c7:44:65:36:61:03:39:61:7a:35: 86:f1:d9:ca:53:3c:69:72:08:c7:12:dd:5a:25:bc: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption c5:a4:43:c1:dc:65:75:cf:75:ab:aa:3b:c0:f0:6a:74:b5:76: f5:ce:4c:ce:4e:9f:7a:99:f6:a7:7c:c2:d5:ae:0c:2c:2e:f5: 57:ce:69:81:e0:3a:5e:b8:36:c6:f4:33:7d:d4:34:e8:fc:c1: 80:57:ae:c0:27:43:53:b4:93:a2:da:9b:ec:aa:85:05:0c:8e: cb:4e:e5:a2:0a:45:8b:b2:54:db:df:86:fc:a5:fd:1a:dc:a1: 38:f1:c5:23:6c:7d:df:06:82:3a:13:20:25:0b:cf:6c:36:a3: f9:65:2f:a7:2a:22:76:5e:aa:3f:26:53:7e:d3:f5:8f:99:76: 73:0f:3c:32:07:8d:f7:ed:4a:70:0f:2b:9d:3c:5d:5d:88:32: b6:c5:ae:21:70:c9:49:aa:10:91:cd:47:cc:3f:89:16:bd:5c: 2b:08:ec:8c:be:6e:b5:34:01:84:b9:92:d0:0e:74:05:25:27: 46:92:4b:8d:18:90:57:7d:1b:14:0e:f7:df:f5:6b:5e:58:ae: a9:bc:6e:0d:3c:c2:a2:17:b6:1b:25:f9:ac:0d:fd:43:60:6c: 4f:ed:dd:8d:82:fd:72:25:4e:37:b2:6a:67:90:bf:8b:ff:c6: 3b:cc:5b:fe:c1:31:e7:ba:38:d1:df:b9:05:94:e0:b4:98:3b: b6:cb:30:60 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICceMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA5MTIyNTE0WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDDAhBOTExODVCODExMC8GA1UEBRMoMEY5MDY5MkExRUVGRTdGMEExQUM2OEI1 RTFBQzA5RjcwMjY5NzFDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANlHiwTzv4q0yoFeB2U3Z6DGxY0a6/C0GGda6z8yT1bB/sgJhbJwHJbti86L/7v7 xDOwaDUgh8gL604WP+SIqpgmHPMtVN/+jUx/Zl1+I3EqHnEQhB3lSlGmfn1Dvcan yVEY/OYpsjrOSsp0mcgxOogzAghkPeAlhVF9YlqqTvSiUkq8oNFed9Wq/7O21Ydx rHbvn7urJOWulwsYwSBP5tDUTKcsDv5jI9TfxgbjnkujEopcllOC0PkTTsH9eiqw ijsib5Ox19ug9dFSAq7f6jTK46nUQ2+afRaHH3HV0lcd/qlSwm7HRGU2YQM5YXo1 hvHZylM8aXIIxxLdWiW8B2kCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQPkGkqHu/n 8KGsaLXhrAn3AmlxzDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg1QjgvQ0ZBMzQwOUFCRTMxMTFFREI0RkY3RDM0QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE4NUI4L0NGQTM0MDlBQkUzMTExRURCNEZGN0QzNEM0RjlBRTAyL0Q1QnBLaDd2 NV9DaHJHaTE0YXdKOXdKcGNjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAKVWMA0GCSqGSIb3DQEBCwUAA4IBAQDFpEPB3GV1z3WrqjvA8Gp0 tXb1zkzOTp96mfanfMLVrgwsLvVXzmmB4DpeuDbG9DN91DTo/MGAV67AJ0NTtJOi 2pvsqoUFDI7LTuWiCkWLslTb34b8pf0a3KE48cUjbH3fBoI6EyAlC89sNqP5ZS+n KiJ2Xqo/JlN+0/WPmXZzDzwyB4337UpwDyudPF1diDK2xa4hcMlJqhCRzUfMP4kW vVwrCOyMvm61NAGEuZLQDnQFJSdGkkuNGJBXfRsUDvff9WteWK6pvG4NPMKiF7Yb JfmsDf1DYGxP7d2Ngv1yJU43smpnkL+L/8Y7zFv+wTHnujjR37kFlOC0mDu2yzBg -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:53 2026 by rpki-client