This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer File: 526yVsD8sH4pB5eDQ-mtndIf4gY.cer (raw, json) Hash identifier: dtvA06i5eC5EEBA4T+atFS8M+zvvomQkdn6bnqFo1dA= Subject key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0285D9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft caRepository: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 13:15:19 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 38616 AS: 38710 AS: 55414 IP: 103.246.108.0/22 IP: 111.88.0.0/17 IP: 111.88.132.0/23 IP: 111.88.136.0/22 IP: 111.88.168.0/22 IP: 111.88.184.0/21 IP: 111.88.212.0 -- 111.88.239.255 IP: 115.186.0.0/17 IP: 117.102.0.0/18 IP: 203.81.224.0/20 IP: 2406:7000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165337 (0x285d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 13 13:15:19 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:c3:78:7c:1c:62:55:e2:dc:96:33:ef:d3: ef:37:71:9f:7b:68:89:bb:f0:35:40:a8:1b:3c:6b: e9:ce:69:bd:57:a3:35:40:b1:af:bd:74:c0:a1:e9: 8b:13:d8:e2:f8:28:12:94:a4:54:c3:5a:7a:7d:ae: 12:79:c7:94:ee:d7:58:41:60:1a:60:36:bf:a5:0d: e3:2c:e5:99:6a:17:36:28:a6:d9:db:b1:83:fc:0d: 90:6c:ac:5f:e7:b5:a3:35:10:ab:f8:2f:a2:14:df: 71:d2:a6:7c:96:6e:40:04:c9:69:78:e1:07:61:14: f0:14:b0:d6:8d:33:6a:46:0e:4b:03:3f:95:ff:45: c0:dc:9c:5b:0b:d6:18:0c:ee:d9:fc:5f:12:40:f9: 45:5c:46:8e:7a:a8:3a:5c:4b:66:da:3f:ae:e8:0f: 33:a6:66:b1:03:73:42:ec:6f:e2:40:0e:54:37:54: 30:55:2f:6a:1d:95:fe:df:5b:a6:8d:58:16:9f:b1: 01:1c:4c:db:dc:a7:61:3d:49:04:f5:ff:1b:17:02: 76:6a:69:d0:cb:b8:3b:1b:84:b6:52:4f:e4:bc:1c: ff:28:39:7d:db:d3:0b:7c:5c:29:f4:c0:8a:96:ae: cc:7b:30:4e:7b:a4:e7:9f:9a:f6:bb:54:af:aa:dd: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38616 38710 55414 sbgp-ipAddrBlock: critical IPv4: 103.246.108.0/22 111.88.0.0/17 111.88.132.0/23 111.88.136.0/22 111.88.168.0/22 111.88.184.0/21 111.88.212.0-111.88.239.255 115.186.0.0/17 117.102.0.0/18 203.81.224.0/20 IPv6: 2406:7000::/32 Signature Algorithm: sha256WithRSAEncryption 11:78:c1:27:74:66:59:ee:f9:d9:ba:13:99:f4:78:95:f2:94: 24:46:40:46:c3:99:6c:52:65:8d:2d:a3:0c:18:44:c3:0e:32: 9e:56:4f:72:10:4a:c1:d6:e2:50:df:55:fd:4c:da:cb:34:8d: 96:c7:21:42:e5:13:5a:7d:a2:05:c3:05:67:6f:77:6f:f7:e5: 93:a0:2b:d7:51:07:d6:26:a0:1f:f1:c1:fc:66:54:2b:be:18: 05:58:c3:cf:8b:c0:be:b5:11:e0:82:09:c0:14:d4:e8:fe:a6: 59:6e:0c:6d:23:4f:37:04:30:1b:43:ae:bd:8f:2f:dd:47:80: de:3c:1b:ef:9c:3f:eb:57:07:f6:23:2a:95:38:fd:fa:96:63: a9:a1:e3:88:e3:e0:40:a6:a3:4c:fc:4a:09:83:11:59:30:61: 61:77:4a:7b:fd:29:98:5c:4c:58:e4:06:68:45:d2:2a:c8:94: 5b:79:c1:78:48:b3:af:c3:17:c4:ae:8d:1f:47:d2:76:77:8a: 6e:a0:b7:32:fc:f5:62:e2:b5:2c:ff:24:71:63:db:aa:bf:77: ef:4d:cf:20:31:cf:7c:f5:29:8c:cd:6c:92:d4:2e:d3:3d:ee: 3c:13:1d:0f:80:a6:56:d2:52:00:ec:10:43:b9:3d:c5:38:f4: 1a:67:b7:c3 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIDAoXZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMzEzMTUxOVoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4 MzQzRTlBRDlERDIxRkUyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQIMN4fBxiVeLcljPv0+83cZ97aIm78DVAqBs8a+nOab1XozVAsa+9dMCh6YsT 2OL4KBKUpFTDWnp9rhJ5x5Tu11hBYBpgNr+lDeMs5ZlqFzYoptnbsYP8DZBsrF/n taM1EKv4L6IU33HSpnyWbkAEyWl44QdhFPAUsNaNM2pGDksDP5X/RcDcnFsL1hgM 7tn8XxJA+UVcRo56qDpcS2baP67oDzOmZrEDc0Lsb+JADlQ3VDBVL2odlf7fW6aN WBafsQEcTNvcp2E9SQT1/xsXAnZqadDLuDsbhLZST+S8HP8oOX3b0wt8XCn0wIqW rsx7ME57pOefmva7VK+q3RVXAgMBAAGjggNmMIIDYjAdBgNVHQ4EFgQU526yVsD8 sH4pB5eDQ+mtndIf4gYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZDODNCL0U0RTEwQjRBMUQ4ODExRTJBMDEyQ0JFMTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNE OHNINHBCNWVEUS1tdG5kSWY0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAJbYAgMAlzYCAwDYdjBsBggrBgEFBQcBBwEB/wRdMFswSgQCAAEwRAME Amf2bAMEB29YAAMEAW9YhAMEAm9YiAMEAm9YqAMEA29YuDAMAwQCb1jUAwQEb1jg AwQHc7oAAwQGdWYAAwQEy1HgMA0EAgACMAcDBQAkBnAAMA0GCSqGSIb3DQEBCwUA A4IBAQAReMEndGZZ7vnZuhOZ9HiV8pQkRkBGw5lsUmWNLaMMGETDDjKeVk9yEErB 1uJQ31X9TNrLNI2WxyFC5RNafaIFwwVnb3dv9+WToCvXUQfWJqAf8cH8ZlQrvhgF WMPPi8C+tRHgggnAFNTo/qZZbgxtI083BDAbQ669jy/dR4DePBvvnD/rVwf2IyqV OP36lmOpoeOI4+BApqNM/EoJgxFZMGFhd0p7/SmYXExY5AZoRdIqyJRbecF4SLOv wxfEro0fR9J2d4puoLcy/PVi4rUs/yRxY9uqv3fvTc8gMc989SmMzWyS1C7TPe48 Ex0PgKZW0lIA7BBDuT3FOPQaZ7fD -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:44 2026 by rpki-client