This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer (raw, json) Hash identifier: eqF/z/uLStuXWZDzwwPwYRMW4Y2/WO87tbda6GSJQAU= Subject key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283C6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:12:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.16.25.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164806 (0x283c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 5 13:12:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:91:bb:db:cb:a5:61:03:b3:68:a5:e9:e0: ab:0a:43:24:56:c4:89:80:b8:d2:2d:de:1a:96:d8: 80:5d:2d:22:54:f4:e6:c5:c6:f5:c5:eb:8b:d0:7a: 2f:44:f9:58:34:c2:dd:70:b0:87:5f:20:ee:0c:25: a3:ea:8e:4c:da:df:2c:1d:32:2e:dc:02:84:c7:e4: 1c:d4:61:64:84:78:e6:5e:aa:30:ca:34:c7:76:56: 80:a9:8a:ae:70:b4:32:1d:48:29:90:30:15:40:c3: 89:b5:43:be:19:9c:00:9d:c1:32:ba:4d:b0:8b:46: f9:e3:e0:c5:4f:2e:3f:85:fd:7f:ce:25:0e:ac:ef: 08:80:fd:61:84:39:09:be:a2:4e:1e:65:94:a7:74: 95:2a:8a:cf:ad:7c:f4:0c:1a:38:b6:c9:7e:56:68: f4:08:e7:6f:af:a1:50:c3:b5:a6:97:31:3e:3c:92: 1b:a7:19:4a:f8:c4:56:05:34:e5:70:3c:09:dd:88: f4:74:b8:6e:4e:77:01:9b:99:ef:13:d3:42:35:a5: 43:b0:b9:e3:29:ff:fe:d2:42:21:e6:59:7e:aa:65: 2c:80:d7:3a:0f:5c:0b:55:f1:77:ce:bb:e8:2b:9e: 48:13:ec:3f:bc:d8:c2:3e:dd:5c:b1:40:5f:da:1e: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.16.25.0/24 Signature Algorithm: sha256WithRSAEncryption d2:14:9e:91:15:ed:fa:2f:74:18:c1:01:f5:5d:9b:7e:f2:41: f5:cb:9c:bc:fc:25:9f:81:ea:c7:6d:18:71:4f:67:96:9d:74: 52:78:21:48:ab:c8:36:f4:bd:52:ad:be:c9:3f:c1:16:7d:6d: 66:2f:27:8d:25:c6:43:0c:56:da:a3:13:17:4a:c5:fb:59:b1: 7a:87:74:f0:6c:d6:ed:c7:c7:42:1f:73:94:1c:4b:00:b1:f4: 6f:f9:0f:3e:93:d4:29:fe:bc:c1:8a:d9:4e:5a:e3:54:83:1d: 27:04:aa:7d:4e:5c:a1:65:2a:6b:f8:97:50:b1:60:89:03:ea: 0d:09:a5:58:8a:5c:35:fa:26:b7:3c:89:7d:56:ed:2b:d0:d2: 15:35:93:fe:17:37:79:c0:28:e6:6c:c1:f1:e8:1d:77:d5:ef: 5f:6d:1f:1f:02:80:67:27:95:eb:9b:6f:ec:63:6b:4c:d0:ac: c2:50:41:75:9e:b5:1e:5d:e2:f2:c1:ca:9f:e4:d4:ba:30:df: fa:1c:47:99:1d:7f:bc:8c:8c:06:79:97:08:57:89:15:d6:27: 81:28:9f:8a:38:07:38:84:e5:64:e0:20:36:ab:99:fa:44:a8: c2:90:c1:cf:ee:f9:c6:24:f7:f0:c8:49:a5:53:de:4d:ba:f8: b8:78:39:4b -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAoPGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNTEzMTIxMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNUUwMTIxMTAvBgNVBAUTKEY5QjQwMjJDMDI5RTdEOUU1QTYzNDk2 OEZEQkE0QTBFOUNENjI0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFKpG728ulYQOzaKXp4KsKQyRWxImAuNIt3hqW2IBdLSJU9ObFxvXF64vQei9E +Vg0wt1wsIdfIO4MJaPqjkza3ywdMi7cAoTH5BzUYWSEeOZeqjDKNMd2VoCpiq5w tDIdSCmQMBVAw4m1Q74ZnACdwTK6TbCLRvnj4MVPLj+F/X/OJQ6s7wiA/WGEOQm+ ok4eZZSndJUqis+tfPQMGji2yX5WaPQI52+voVDDtaaXMT48khunGUr4xFYFNOVw PAndiPR0uG5OdwGbme8T00I1pUOwueMp//7SQiHmWX6qZSyA1zoPXAtV8XfOu+gr nkgT7D+82MI+3VyxQF/aHsltAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU+bQCLAKe fZ5aY0lo/bpKDpzWJOQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVFMDEyL0I4MUFBMjU4MTQxMzExRjBCNjhFNzM3M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RTAxMi9CODFBQTI1ODE0MTMxMUYwQjY4RTczNzNDNEY5QUUwMi8tYlFDTEFL ZWZaNWFZMGxvX2JwS0RweldKT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLEBkwDQYJKoZIhvcNAQELBQADggEBANIUnpEV7fovdBjBAfVd m37yQfXLnLz8JZ+B6sdtGHFPZ5addFJ4IUiryDb0vVKtvsk/wRZ9bWYvJ40lxkMM VtqjExdKxftZsXqHdPBs1u3Hx0Ifc5QcSwCx9G/5Dz6T1Cn+vMGK2U5a41SDHScE qn1OXKFlKmv4l1CxYIkD6g0JpViKXDX6Jrc8iX1W7SvQ0hU1k/4XN3nAKOZswfHo HXfV719tHx8CgGcnleubb+xja0zQrMJQQXWetR5d4vLByp/k1Low3/ocR5kdf7yM jAZ5lwhXiRXWJ4Eon4o4BziE5WTgIDarmfpEqMKQwc/u+cYk9/DISaVT3k26+Lh4 OUs= -----END CERTIFICATE-----Generated at Sun Jan 25 01:16:32 2026 by rpki-client