This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer (raw, json) Hash identifier: jsPxPZVro0G9/SQfe6y+XpO6BcQ6kFA6KQUlY14dr7w= Subject key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02823C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 14:01:29 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 151796 IP: 103.144.196.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164412 (0x2823c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 14:01:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:41:25:a0:8f:55:13:15:64:a8:53:8f:45:0f: 48:7b:fa:1a:fc:7b:4b:0f:65:6e:7e:0d:90:48:d2: 84:0f:d9:89:cb:59:50:ba:d4:35:18:00:47:8f:07: e1:01:d4:38:e2:eb:36:15:09:52:5a:5a:fc:b9:37: 5b:ca:f2:40:71:a1:92:92:c0:0b:60:7e:2a:09:c5: c9:00:21:50:06:7e:1d:15:c0:48:c1:2f:84:af:ea: 8d:62:d5:5a:02:84:ab:37:e3:f9:f2:ea:51:60:8a: 9f:f0:f0:0c:5d:5d:2c:0f:52:b3:7a:44:26:3b:9b: 54:57:87:67:e4:13:3e:2e:73:2e:27:77:48:3e:09: 78:7b:e5:dd:48:f0:07:ff:ca:69:60:cc:f6:fb:cb: e1:74:2e:e2:49:82:60:1b:15:86:9b:4e:c9:69:89: 17:14:36:2a:8c:5e:3a:4a:f4:ec:5c:37:df:60:c5: b5:ef:66:b3:f1:8b:87:91:cd:f4:7e:4f:2e:0a:4a: db:32:3a:10:95:16:7f:04:9a:37:ae:89:c9:42:4f: b1:6b:03:a6:43:3a:bf:05:d4:2a:b7:fd:aa:2f:88: bc:91:bc:0b:15:5f:72:28:fb:ee:26:03:3d:a8:14: cd:78:db:46:33:b3:e4:58:bd:72:de:4a:38:ca:63: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151796 sbgp-ipAddrBlock: critical IPv4: 103.144.196.0/23 Signature Algorithm: sha256WithRSAEncryption 22:d6:2b:cb:8d:21:f4:6b:5a:31:21:e2:61:56:05:20:d1:79: 7c:b1:09:3b:59:1b:65:48:a6:6d:ce:0f:1d:cd:cf:ee:8e:fa: a2:cc:1e:50:68:4c:78:30:e1:ce:49:8b:d6:05:0d:07:77:c1: d3:cc:73:51:63:86:c3:ba:70:eb:b1:1c:c1:ca:4c:f5:ff:1b: f4:21:d8:65:25:f6:82:62:94:25:c4:2e:72:34:46:3b:52:54: 93:4d:6f:5f:22:a2:e6:a1:51:d5:c1:39:36:80:6d:0f:50:fc: 15:fa:33:04:93:a6:fe:59:70:23:e9:62:37:eb:78:90:61:40: 19:04:d4:a9:00:ac:7b:68:fe:51:58:11:13:1e:fd:f4:b1:f0: ff:29:b4:da:3d:c6:4c:d2:0a:1f:87:b8:1d:f9:ac:05:3e:cd: d6:c9:9e:9f:1c:2c:93:20:ca:74:cc:92:63:0f:66:41:d3:4c: 6d:03:2b:a4:79:4b:fb:63:ba:5b:0e:d4:1b:ee:67:6f:ad:8c: 6a:07:98:a2:a4:79:b0:21:cd:c7:a9:2f:24:47:7b:77:92:09: b9:18:5c:b9:d5:b6:d6:22:8e:0c:e2:9c:99:12:a2:0c:18:36: 89:7c:44:55:b5:5d:3a:12:bd:37:8d:81:8a:86:35:7a:75:89: ed:e8:3b:c2 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAoI8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE0MDEyOVoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQx M0JEMzRGRjM4NzhFNEVFRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvQSWgj1UTFWSoU49FD0h7+hr8e0sPZW5+DZBI0oQP2YnLWVC61DUYAEePB+EB 1Dji6zYVCVJaWvy5N1vK8kBxoZKSwAtgfioJxckAIVAGfh0VwEjBL4Sv6o1i1VoC hKs34/ny6lFgip/w8AxdXSwPUrN6RCY7m1RXh2fkEz4ucy4nd0g+CXh75d1I8Af/ ymlgzPb7y+F0LuJJgmAbFYabTslpiRcUNiqMXjpK9OxcN99gxbXvZrPxi4eRzfR+ Ty4KStsyOhCVFn8EmjeuiclCT7FrA6ZDOr8F1Cq3/aoviLyRvAsVX3Io++4mAz2o FM1420Yzs+RYvXLeSjjKY+fPAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU3xHpJo0G rlO6+3QTvTT/OHjk7tAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJDNjREL0IyRUYzRTM0OTVENjExRUI5ODIxNUMxOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8w R3JsTzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlD0MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5DEMA0GCSqG SIb3DQEBCwUAA4IBAQAi1ivLjSH0a1oxIeJhVgUg0Xl8sQk7WRtlSKZtzg8dzc/u jvqizB5QaEx4MOHOSYvWBQ0Hd8HTzHNRY4bDunDrsRzBykz1/xv0IdhlJfaCYpQl xC5yNEY7UlSTTW9fIqLmoVHVwTk2gG0PUPwV+jMEk6b+WXAj6WI363iQYUAZBNSp AKx7aP5RWBETHv30sfD/KbTaPcZM0gofh7gd+awFPs3WyZ6fHCyTIMp0zJJjD2ZB 00xtAyukeUv7Y7pbDtQb7mdvrYxqB5iipHmwIc3HqS8kR3t3kgm5GFy51bbWIo4M 4pyZEqIMGDaJfERVtV06Er03jYGKhjV6dYnt6DvC -----END CERTIFICATE-----Generated at Sun Jan 25 01:21:34 2026 by rpki-client