This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer File: rQUyxqhtSiMdAK5R-tgo9qK2qos.cer (raw, json) Hash identifier: rlaYQk5GKQMXyufPpC3oe2kwUHXUKZes22zypy4sMl4= Subject key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7122 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 12:19:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.216.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28962 (0x7122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 30 12:19:10 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:20:b3:bf:58:bc:cb:65:b2:55:8a:8f:6a: 23:28:73:fc:4c:51:38:d5:f6:c9:2d:15:64:ed:9b: 77:87:27:77:03:aa:b1:cd:f0:66:7a:bb:23:3a:f9: e5:9e:98:eb:60:86:9e:16:9d:43:7b:3d:67:22:67: d0:8f:d0:36:dc:16:a5:57:48:f5:03:72:ee:2a:92: 13:a1:55:31:f6:31:88:78:85:be:dd:2b:86:ef:57: 50:91:5b:e8:3e:e3:ba:bb:b4:25:b9:ca:d5:64:d1: 4a:b6:0c:b0:8e:f2:53:f8:77:7c:12:d0:ea:05:d2: d6:db:4c:b1:99:0c:20:36:f6:a3:d3:ea:6b:b5:f7: a7:40:30:a6:b6:74:af:81:11:75:ac:eb:0d:0b:57: 6d:c5:1c:07:e9:3f:a5:d0:4e:89:2e:7a:6a:29:de: c1:53:9b:72:24:21:05:8a:9b:0d:f1:0f:ce:55:98: 24:09:7c:42:bf:d6:dd:4b:f4:bb:df:88:0c:be:66: 72:a6:2e:c6:06:05:d2:79:42:29:65:30:02:59:42: 00:f1:af:e5:e5:d9:3e:09:42:b8:d4:9a:e0:57:2e: 67:01:c5:65:70:85:b8:26:08:13:17:59:71:02:d0: ef:37:e2:29:3d:14:74:17:2c:5f:24:51:bf:f1:8a: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.216.0/23 Signature Algorithm: sha256WithRSAEncryption 21:4f:31:a3:c3:b9:d1:6d:a1:7c:fe:94:e3:3d:ff:98:53:98: ba:dd:c2:f3:9a:53:82:2a:11:93:b8:4a:2a:d5:29:c5:04:22: 2c:ec:ef:c2:0e:38:81:1a:3e:4c:df:0e:1f:3d:72:1a:46:22: 11:fe:84:8a:52:94:0a:1c:ec:90:7b:19:e8:b3:39:32:de:5d: 90:a7:a4:a5:e5:4c:76:70:cf:72:77:ed:58:76:9a:61:bb:ce: 72:3b:45:6d:34:35:3c:fd:a9:2c:58:88:e4:71:31:09:49:7a: 79:0c:7a:1f:70:ca:cd:df:f6:a4:05:2b:e6:9d:d0:e5:ed:d4: 51:c0:a8:df:f7:78:84:7b:40:11:26:1b:4c:9e:82:0b:df:14: 0e:c9:86:f6:08:25:48:24:8d:b6:75:7c:0c:b1:3d:ee:78:24: d1:4f:43:e8:c8:bd:e1:ee:02:a5:5e:a5:44:98:3d:9c:49:c6: 3d:94:f9:44:d5:70:4d:0e:80:99:3e:4e:3d:42:4a:98:22:d4: 43:bc:db:9d:b1:11:9c:c5:75:59:92:00:66:f2:9c:f9:db:7e: b7:36:14:ae:76:a1:52:da:ea:f0:05:73:6d:3d:1b:90:8e:91: 62:c8:b5:87:5d:5a:96:28:f4:4c:f6:63:bf:50:cf:40:a1:fc: f9:13:1b:08 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjMwMTIxOTEwWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFERTMzNDExMC8GA1UEBRMoQUQwNTMyQzZBODZENEEyMzFEMDBBRTUx RkFEODI4RjZBMkI2QUE4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK2IILO/WLzLZbJVio9qIyhz/ExRONX2yS0VZO2bd4cndwOqsc3wZnq7Izr55Z6Y 62CGnhadQ3s9ZyJn0I/QNtwWpVdI9QNy7iqSE6FVMfYxiHiFvt0rhu9XUJFb6D7j uru0JbnK1WTRSrYMsI7yU/h3fBLQ6gXS1ttMsZkMIDb2o9Pqa7X3p0AwprZ0r4ER dazrDQtXbcUcB+k/pdBOiS56ainewVObciQhBYqbDfEPzlWYJAl8Qr/W3Uv0u9+I DL5mcqYuxgYF0nlCKWUwAllCAPGv5eXZPglCuNSa4FcuZwHFZXCFuCYIExdZcQLQ 7zfiKT0UdBcsXyRRv/GK8SkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBStBTLGqG1K Ix0ArlH62Cj2oraqizAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUzMzQvQkM1QjRCQkVFNTc5MTFGMDgzNkVFQUExNDE2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURFMzM0L0JDNUI0QkJFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0 U2lNZEFLNVItdGdvOXFLMnFvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP2DANBgkqhkiG9w0BAQsFAAOCAQEAIU8xo8O50W2hfP6U4z3/ mFOYut3C85pTgioRk7hKKtUpxQQiLOzvwg44gRo+TN8OHz1yGkYiEf6EilKUChzs kHsZ6LM5Mt5dkKekpeVMdnDPcnftWHaaYbvOcjtFbTQ1PP2pLFiI5HExCUl6eQx6 H3DKzd/2pAUr5p3Q5e3UUcCo3/d4hHtAESYbTJ6CC98UDsmG9gglSCSNtnV8DLE9 7ngk0U9D6Mi94e4CpV6lRJg9nEnGPZT5RNVwTQ6AmT5OPUJKmCLUQ7zbnbERnMV1 WZIAZvKc+dt+tzYUrnahUtrq8AVzbT0bkI6RYsi1h11alij0TPZjv1DPQKH8+RMb CA== -----END CERTIFICATE-----Generated at Thu Jan 1 20:39:59 2026 by rpki-client