This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.cer (raw, json) Hash identifier: OGf0N+Z7mY0ngvtvOOU8JKchIMg0Eb9p6vTraELYOJE= Subject key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028693 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 13:58:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 135091 IP: 2401:df20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165523 (0x28693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 13:58:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:28:91:71:30:45:48:21:f5:dc:43:28:b9: 7c:16:a2:49:e3:2f:f8:fb:3e:4a:2c:29:7f:6d:e0: ad:a5:61:ca:2b:a5:03:a4:57:bb:a0:12:a6:9f:fd: b3:e5:52:e9:91:a6:9d:4e:14:f5:5a:66:69:ba:06: 28:49:54:e4:35:74:dc:98:45:20:d1:0a:4a:25:6c: 49:33:c7:0b:f5:bd:8b:9b:7a:d8:f5:a1:36:2d:51: ab:de:29:76:94:b7:b6:5e:43:dd:b3:6d:f9:80:ba: 66:3a:5c:c6:ef:9f:be:78:08:83:74:1d:ad:18:bb: fe:9f:5d:79:18:41:1c:c3:f7:98:a8:16:67:23:96: 94:77:23:ab:5c:e3:6f:a2:b1:f7:5e:a6:bb:65:8a: 60:0a:f3:d2:97:78:b0:41:74:09:b2:63:8f:6b:cf: 9c:7e:41:a0:d1:3d:6b:58:ab:f4:49:ed:af:35:cd: fc:63:3d:dd:99:e3:42:34:8a:d6:70:ac:e0:0f:ac: bc:c7:5e:e7:64:1b:a3:37:1c:5b:3e:7f:04:ae:0d: 19:8b:de:9e:c5:5b:e4:2b:a2:85:c4:59:a0:e0:54: 38:6b:48:40:b0:9c:e8:cd:b5:1f:b6:48:3f:7f:80: c5:2e:30:14:23:00:f1:32:db:92:4e:54:61:b3:9a: f4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135091 sbgp-ipAddrBlock: critical IPv6: 2401:df20::/32 Signature Algorithm: sha256WithRSAEncryption 51:bc:6e:93:18:34:8b:b6:61:b1:a1:cf:71:89:b5:e2:0e:b4: 5d:84:ad:37:08:87:ed:19:e0:48:cf:ba:1b:fb:62:38:16:1c: 82:93:02:5d:8b:af:ca:9b:55:3e:06:54:be:71:75:0e:40:2a: a5:18:58:a4:e2:1e:e8:93:2d:e8:b2:f5:4b:2d:29:fa:fd:4b: 66:1f:37:a2:1a:de:58:03:5a:f4:9f:50:70:6e:1f:5e:54:8b: a7:78:81:ba:42:9a:a3:e5:be:2c:58:82:8c:0e:55:6e:c5:c2: e2:4f:3f:d7:c8:3e:e9:5c:ea:4d:71:00:3c:f2:83:15:60:a9: 0e:5a:b1:87:05:fb:8d:ca:d7:11:56:d1:75:17:23:04:3e:60: 19:63:43:eb:3f:96:40:80:65:30:03:cc:7c:03:a0:51:30:2f: bb:c4:f3:6f:a8:6e:ac:24:21:bf:93:f0:17:86:f7:9b:3a:03: 02:30:02:ac:88:51:35:97:0f:2b:93:5a:cd:ca:81:c6:0b:c9: cf:9e:aa:04:b3:95:92:db:59:53:9b:51:54:97:b4:ee:a2:ce: fd:a1:62:54:86:e6:ed:5e:81:d2:78:b6:07:e5:22:0b:14:44: 4d:de:45:9a:89:a7:eb:67:27:ba:61:ba:35:64:e1:04:27:b2: 18:b1:2e:84 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAoaTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTEzNTg0OVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1 RjIwRTY5NzE5QTk5QzMyQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJYSiRcTBFSCH13EMouXwWoknjL/j7PkosKX9t4K2lYcorpQOkV7ugEqaf/bPl UumRpp1OFPVaZmm6BihJVOQ1dNyYRSDRCkolbEkzxwv1vYubetj1oTYtUaveKXaU t7ZeQ92zbfmAumY6XMbvn754CIN0Ha0Yu/6fXXkYQRzD95ioFmcjlpR3I6tc42+i sfdeprtlimAK89KXeLBBdAmyY49rz5x+QaDRPWtYq/RJ7a81zfxjPd2Z40I0itZw rOAPrLzHXudkG6M3HFs+fwSuDRmL3p7FW+QrooXEWaDgVDhrSECwnOjNtR+2SD9/ gMUuMBQjAPEy25JOVGGzmvSxAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU3BEw2GFr q8bOCI9fIOaXGamcMrswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3MzJBLzA4OUJDNEU2QjYzMTExRUZBMkQ3RkI2M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdG cnE4Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg+zMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHfIDANBgkq hkiG9w0BAQsFAAOCAQEAUbxukxg0i7ZhsaHPcYm14g60XYStNwiH7RngSM+6G/ti OBYcgpMCXYuvyptVPgZUvnF1DkAqpRhYpOIe6JMt6LL1Sy0p+v1LZh83ohreWANa 9J9QcG4fXlSLp3iBukKao+W+LFiCjA5VbsXC4k8/18g+6VzqTXEAPPKDFWCpDlqx hwX7jcrXEVbRdRcjBD5gGWND6z+WQIBlMAPMfAOgUTAvu8Tzb6hurCQhv5PwF4b3 mzoDAjACrIhRNZcPK5NazcqBxgvJz56qBLOVkttZU5tRVJe07qLO/aFiVIbm7V6B 0ni2B+UiCxRETd5Fmomn62cnumG6NWThBCeyGLEuhA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:11 2026 by rpki-client