This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.cer (raw, json) Hash identifier: 7UUsqukrIt2nF5zcRo5p9rc+4Ou4hQ0Lg43prAqAEoQ= Subject key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286C4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft caRepository: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 12:46:48 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.57.81.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 09:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165572 (0x286c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 16 12:46:48 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:49:29:f7:00:6c:70:21:f7:42:1a:5e:db:60: 6f:d8:82:31:83:41:c6:89:7d:47:fc:f8:25:e7:05: f4:09:e7:59:06:c5:1e:f3:65:62:f2:68:00:8b:de: cc:98:ab:8e:0b:d7:43:3e:fc:1e:ae:16:38:f1:3e: dc:c3:cd:23:63:4a:3e:45:86:69:0f:67:62:61:33: 49:97:c5:55:2d:66:bc:7a:17:2b:ad:ac:ac:95:c3: 9f:05:2c:60:7c:57:d1:98:eb:bd:89:69:5d:9a:fe: ed:f8:f2:be:dc:a2:c5:6c:df:82:96:4f:bb:e7:83: 8c:f9:3f:a7:4d:7c:39:d8:b9:a9:de:34:70:13:78: e6:3c:1b:9b:15:5f:92:3a:f2:70:1d:28:2e:bd:1d: 6d:8c:52:db:25:02:04:c9:d7:a1:37:a0:3f:aa:39: f6:0e:b1:15:84:51:7b:cd:0f:84:3f:98:58:e3:d5: 7c:fa:a0:bd:7a:46:2d:4a:4c:a4:f9:16:79:9d:eb: 78:3d:19:01:a3:65:a0:32:79:34:39:79:01:85:41: e6:bc:4a:0d:10:41:0f:29:df:aa:26:de:24:d4:ec: 61:ec:71:c5:4d:5b:2d:b4:b0:6f:37:72:bc:56:db: 24:33:0f:cf:82:bc:20:63:08:37:f5:b6:89:b9:19: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.57.81.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ea:6e:37:b6:ef:98:00:f4:cc:dd:bd:f4:c6:1e:ca:6a:8d: 06:dd:ec:b1:8c:9b:ff:92:b0:f0:8b:65:37:e6:86:e0:46:00: 92:f3:24:b8:0d:76:51:da:84:2d:d8:89:0c:2e:2b:f5:c6:13: 6b:55:60:6c:57:bf:93:54:3b:ee:83:30:0e:71:fb:a8:0b:81: 55:9c:be:82:14:60:d1:85:e9:49:03:75:be:ce:5a:00:b1:71: 23:e0:0c:f9:09:0e:e2:45:03:f6:66:c2:42:34:43:90:57:90: 47:c4:8f:62:4e:51:84:91:82:c8:b6:ef:33:48:0f:3c:fd:66: af:f0:a3:51:29:88:29:9d:7c:0b:48:07:14:fa:27:06:63:92: c3:11:23:38:ba:5a:aa:33:99:7f:b8:0d:55:4f:51:a3:49:a2: b7:b9:a7:8e:f5:79:45:f5:fd:6b:67:e5:16:4b:c8:2f:a1:df: 27:c8:8b:68:6c:d7:1d:5a:7f:b3:07:03:8f:92:d5:64:92:38: d4:4f:f0:0b:33:3c:12:c2:89:cc:e4:7f:46:cd:de:af:cf:2c: 5e:e0:10:fd:e5:7e:b8:30:8b:ee:6f:d6:68:fe:e5:11:70:d6: 35:5c:0d:38:46:2b:22:b2:e5:fb:df:f0:0d:fd:2e:f9:cc:40: d9:c8:16:18 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAobEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNjEyNDY0OFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxM0I1QzcxMTAvBgNVBAUTKEU0MUVENzU2MDc0QjM3QUREQzc5NEY5 NDBCRDFGNTNFM0Y2NzZCOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7SSn3AGxwIfdCGl7bYG/YgjGDQcaJfUf8+CXnBfQJ51kGxR7zZWLyaACL3syY q44L10M+/B6uFjjxPtzDzSNjSj5FhmkPZ2JhM0mXxVUtZrx6FyutrKyVw58FLGB8 V9GY672JaV2a/u348r7cosVs34KWT7vng4z5P6dNfDnYuaneNHATeOY8G5sVX5I6 8nAdKC69HW2MUtslAgTJ16E3oD+qOfYOsRWEUXvND4Q/mFjj1Xz6oL16Ri1KTKT5 Fnmd63g9GQGjZaAyeTQ5eQGFQea8Sg0QQQ8p36om3iTU7GHsccVNWy20sG83crxW 2yQzD8+CvCBjCDf1tom5GcLhAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU5B7XVgdL N63ceU+UC9H1Pj9na5MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNCNUM3LzY3RDI0Mzk2RTgwOTExRUVCRTQ4OTU2M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQjVDNy82N0QyNDM5NkU4MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdk TE42M2NlVS1VQzlIMVBqOW5hNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLOVEwDQYJKoZIhvcNAQELBQADggEBAKrqbje275gA9MzdvfTG HspqjQbd7LGMm/+SsPCLZTfmhuBGAJLzJLgNdlHahC3YiQwuK/XGE2tVYGxXv5NU O+6DMA5x+6gLgVWcvoIUYNGF6UkDdb7OWgCxcSPgDPkJDuJFA/ZmwkI0Q5BXkEfE j2JOUYSRgsi27zNIDzz9Zq/wo1EpiCmdfAtIBxT6JwZjksMRIzi6WqozmX+4DVVP UaNJore5p471eUX1/Wtn5RZLyC+h3yfIi2hs1x1af7MHA4+S1WSSONRP8AszPBLC iczkf0bN3q/PLF7gEP3lfrgwi+5v1mj+5RFw1jVcDThGKyKy5fvf8A39LvnMQNnI Fhg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:20:34 2026 by rpki-client