This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer File: 45qx0HtQ27mr4stRzZseOlqFRSE.cer (raw, json) Hash identifier: 53bCN+PVscUrfdA1TfX4Ql5po7DoAO1dFokzoH/GCcM= Subject key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028815 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 23 Jan 2026 05:14:53 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 27.123.208.0/22 IP: 101.0.8.0 -- 101.0.31.255 IP: 103.3.16.0/22 IP: 103.46.204.0/22 IP: 2400:8040::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165909 (0x28815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 23 05:14:53 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:25:9b:bd:70:4d:db:c2:3d:7c:ac:2e:be: 4e:42:c9:c0:82:f9:2a:ea:02:1a:84:c1:01:27:99: 57:6d:0e:01:b2:aa:1a:7c:21:ca:4c:aa:0e:85:9e: 18:47:42:cb:0a:95:e4:24:0e:6b:b9:53:1b:91:18: a7:50:66:20:ee:13:1f:19:dd:8a:ef:f3:23:a8:36: a7:1c:b5:73:3b:61:a5:53:2c:f9:1b:7a:5e:25:cd: cc:04:bb:2a:b2:79:7c:a6:79:f1:57:40:ca:c7:dc: 3f:d6:8d:a9:00:ce:53:a8:d4:e5:e1:d4:70:36:e8: 6b:8b:f7:0a:4e:5f:cf:71:62:4e:d4:0f:2b:28:b7: f7:87:8c:38:1e:a1:23:65:41:42:f6:fe:0d:06:bb: 0b:01:50:1d:be:80:8c:43:62:9c:e1:f1:ca:89:d8: 76:4a:80:55:8a:86:08:a0:80:69:c0:72:c0:06:f4: 52:0d:20:1e:b3:b9:42:9b:53:15:37:6d:f6:77:bd: 28:0d:44:58:d2:a8:7f:f0:2b:b5:bf:04:d7:11:62: cb:9f:5d:43:b7:b6:38:ed:b1:e1:06:05:80:72:e8: 72:42:75:05:3b:b4:fd:0a:26:d8:7e:c2:d5:c4:92: dc:8b:ba:aa:c0:50:4a:ac:ab:ca:e8:7b:4d:a0:54: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.208.0/22 101.0.8.0-101.0.31.255 103.3.16.0/22 103.46.204.0/22 IPv6: 2400:8040::/32 Signature Algorithm: sha256WithRSAEncryption 46:41:f6:d9:6b:00:7c:e4:3b:5d:22:fd:91:68:a1:fe:8f:82: ed:36:0e:9b:9a:c2:ff:ea:23:a7:c6:73:ee:e7:54:aa:c5:6d: f7:cd:ab:fc:b6:80:0d:d6:d4:54:82:f8:78:41:59:72:58:70: 1a:d7:01:b5:75:af:e1:0c:f0:97:41:74:12:77:07:ea:88:68: a8:cb:b7:cd:92:65:b6:8c:8b:5b:5a:96:89:12:71:09:b7:23: c1:a8:d6:0a:b8:60:c3:a3:93:30:d7:0d:b8:ef:18:1c:97:d6: a2:97:a7:e5:2a:41:ca:91:ad:34:73:b8:a0:86:1f:72:8d:39: fb:c8:a2:62:32:8d:f7:bd:87:05:fc:d9:93:75:84:2a:41:e3: 3b:c5:17:d6:49:b0:03:ff:bb:ed:7c:04:dd:54:3d:1f:7c:37: 27:43:f7:06:40:86:2f:d6:91:a1:6c:91:04:64:7f:ef:98:d8: b3:f0:82:cc:3e:a1:a0:e9:0d:48:49:4d:28:aa:51:59:70:6f: 96:57:eb:11:a4:88:ea:d9:de:65:97:0a:d1:d1:52:40:86:73: 7f:5f:83:41:31:19:38:73:7b:97:51:41:89:60:cf:4c:35:9a: 9a:25:40:98:2f:ae:87:a3:2e:18:3d:db:ef:b5:a9:ac:f9:ec: 9d:03:35:a5 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgIDAogVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMzA1MTQ1M1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1 MUNEOUIxRTNBNUE4NTQ1MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQKCWbvXBN28I9fKwuvk5CycCC+SrqAhqEwQEnmVdtDgGyqhp8IcpMqg6FnhhH QssKleQkDmu5UxuRGKdQZiDuEx8Z3Yrv8yOoNqcctXM7YaVTLPkbel4lzcwEuyqy eXymefFXQMrH3D/WjakAzlOo1OXh1HA26GuL9wpOX89xYk7UDysot/eHjDgeoSNl QUL2/g0GuwsBUB2+gIxDYpzh8cqJ2HZKgFWKhgiggGnAcsAG9FINIB6zuUKbUxU3 bfZ3vSgNRFjSqH/wK7W/BNcRYsufXUO3tjjtseEGBYBy6HJCdQU7tP0KJth+wtXE ktyLuqrAUEqsq8roe02gVBjfAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQU45qx0HtQ 27mr4stRzZseOlqFRSEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk0RTAzLzNGNDhGMjI0MURBNjExRTI5QTA3NUQ5RDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0 UTI3bXI0c3RSelpzZU9scUZSU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8EOTA3 MCYEAgABMCADBAIbe9AwDAMEA2UACAMEBWUAAAMEAmcDEAMEAmcuzDANBAIAAjAH AwUAJACAQDANBgkqhkiG9w0BAQsFAAOCAQEARkH22WsAfOQ7XSL9kWih/o+C7TYO m5rC/+ojp8Zz7udUqsVt982r/LaADdbUVIL4eEFZclhwGtcBtXWv4Qzwl0F0EncH 6ohoqMu3zZJltoyLW1qWiRJxCbcjwajWCrhgw6OTMNcNuO8YHJfWopen5SpBypGt NHO4oIYfco05+8iiYjKN972HBfzZk3WEKkHjO8UX1kmwA/+77XwE3VQ9H3w3J0P3 BkCGL9aRoWyRBGR/75jYs/CCzD6hoOkNSElNKKpRWXBvllfrEaSI6tneZZcK0dFS QIZzf1+DQTEZOHN7l1FBiWDPTDWamiVAmC+uh6MuGD3b77WprPnsnQM1pQ== -----END CERTIFICATE-----Generated at Sun Jan 25 01:18:51 2026 by rpki-client