This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer File: -gRcYwK4c-iDZfqaAhSZtPPFhog.cer (raw, json) Hash identifier: BGD9i/KZLbQGcvDrHYjphBn/rlmto+yccdDom29shtg= Subject key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282E4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft caRepository: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 13:27:03 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 2697 IP: 202.41.64.0 -- 202.41.111.255 IP: 202.141.128.0/19 IP: 2001:e30::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164580 (0x282e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 13:27:03 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:ef:d9:56:43:84:60:56:e9:23:2f:01:a0: 33:2e:28:a5:9c:68:28:de:3b:44:3a:a0:98:06:01: c1:ef:35:e5:81:a7:a5:29:85:7e:af:f2:fd:fe:33: 5a:77:20:27:3c:20:f9:ef:6a:50:5e:78:84:be:1a: 66:47:61:77:7c:15:c9:dd:a7:cb:46:67:99:50:16: 8b:ee:0e:d0:11:a6:0d:8b:83:2f:ed:90:e1:6f:b2: 4f:88:98:c0:4d:3d:c1:4f:af:bc:e3:6b:5a:4f:6a: 6a:a7:3d:ba:7b:dc:31:8c:d9:a9:e0:c6:5b:ee:c5: 1d:65:c7:a7:a4:67:e5:35:c5:e0:e4:5f:52:0c:9b: b0:9e:7e:e3:85:29:44:1c:bf:87:4d:13:8b:b2:85: 06:d1:99:21:37:32:a3:d1:9c:99:79:b4:37:d8:36: b2:2d:22:b3:da:e2:94:0f:6d:1c:78:cb:5c:c5:a9: 1d:f2:40:b8:d7:18:54:2d:44:6c:a7:ff:3a:e4:41: c0:f6:b9:fa:a5:e6:5e:13:29:b6:91:09:7e:4e:a6: 91:a3:b2:d1:13:59:25:36:56:0c:6c:4a:4b:2f:61: 9c:0b:19:d0:ea:9f:e9:df:b8:fb:4d:4c:50:ae:fb: bd:35:55:58:4b:3d:20:e2:0a:e2:1a:75:a8:73:41: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 2697 sbgp-ipAddrBlock: critical IPv4: 202.41.64.0-202.41.111.255 202.141.128.0/19 IPv6: 2001:e30::/32 Signature Algorithm: sha256WithRSAEncryption 38:4b:e5:ee:0c:3f:62:3c:e6:ef:d9:e4:fc:96:91:7d:40:8f: 56:3f:72:a3:69:18:aa:b5:5f:1f:fe:c6:2c:5b:2e:39:72:34: 0d:7f:b3:fb:10:58:45:56:d1:2e:ce:d5:40:b7:22:53:0d:52: 3b:67:02:af:d9:0c:8a:b6:8c:5b:3f:30:45:b4:a6:70:eb:84: e0:0b:2c:b1:b8:91:71:cb:ef:dc:c0:cb:b7:f6:47:33:5a:7d: b2:b2:c2:60:5d:24:c4:53:23:4c:c7:86:66:d3:40:e9:44:32: 85:64:d3:37:c9:6c:7c:87:5e:d8:ae:59:90:a3:a2:09:78:34: 34:df:9d:95:88:23:2a:05:66:6f:d3:40:a6:f6:9f:5c:05:7e: e8:a8:c4:2f:ea:ad:3b:d8:55:c8:47:6b:d1:fc:c9:71:9b:2d: 59:fb:29:12:68:6e:3f:a7:d1:d9:64:4f:7c:92:29:df:78:37: 33:af:8e:9f:fd:b2:0c:c8:08:d0:8d:8d:76:28:cd:59:f5:13: 65:72:45:4b:e9:ca:3c:ad:92:19:49:f3:5c:1f:3b:2b:1e:4f: bc:2a:2b:4b:4e:3a:bc:64:92:aa:12:cd:14:54:ba:5d:ee:ef: 70:6d:fc:2e:2f:b0:5f:2f:7e:0c:35:31:be:b6:84:2e:fb:94: e2:2b:42:5f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIDAoLkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTEzMjcwM1oXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5 QTAyMTQ5OUI0RjNDNTg2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsPO/ZVkOEYFbpIy8BoDMuKKWcaCjeO0Q6oJgGAcHvNeWBp6UphX6v8v3+M1p3 ICc8IPnvalBeeIS+GmZHYXd8Fcndp8tGZ5lQFovuDtARpg2Lgy/tkOFvsk+ImMBN PcFPr7zja1pPamqnPbp73DGM2angxlvuxR1lx6ekZ+U1xeDkX1IMm7CefuOFKUQc v4dNE4uyhQbRmSE3MqPRnJl5tDfYNrItIrPa4pQPbRx4y1zFqR3yQLjXGFQtRGyn /zrkQcD2ufql5l4TKbaRCX5OppGjstETWSU2VgxsSksvYZwLGdDqn+nfuPtNTFCu +701VVhLPSDiCuIadahzQSftAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQU+gRcYwK4 c+iDZfqaAhSZtPPFhogwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg1M0QzLzZFQzBFMzY4MDAwQTExRUM4QzI4NzI1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdL NGMtaURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICCokwPAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQwDAMEBsopQAMEBMop YAMEBcqNgDANBAIAAjAHAwUAIAEOMDANBgkqhkiG9w0BAQsFAAOCAQEAOEvl7gw/ Yjzm79nk/JaRfUCPVj9yo2kYqrVfH/7GLFsuOXI0DX+z+xBYRVbRLs7VQLciUw1S O2cCr9kMiraMWz8wRbSmcOuE4AsssbiRccvv3MDLt/ZHM1p9srLCYF0kxFMjTMeG ZtNA6UQyhWTTN8lsfIde2K5ZkKOiCXg0NN+dlYgjKgVmb9NApvafXAV+6KjEL+qt O9hVyEdr0fzJcZstWfspEmhuP6fR2WRPfJIp33g3M6+On/2yDMgI0I2NdijNWfUT ZXJFS+nKPK2SGUnzXB87Kx5PvCorS046vGSSqhLNFFS6Xe7vcG38Li+wXy9+DDUx vraELvuU4itCXw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:17 2026 by rpki-client