This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer File: 5wYdsiKDjeaKk84h7ykbBVQthyY.cer (raw, json) Hash identifier: rRXa5RK5dVcpnhamlOINA7xM000ISXQ6UXcyEAGC8Cc= Subject key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283D9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft caRepository: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:50:49 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38826 IP: 103.243.84.0/22 IP: 119.15.96.0/20 IP: 175.106.4.0/22 IP: 2400:5000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164825 (0x283d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 5 13:50:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:f2:b6:9c:7a:7e:9e:dd:fa:06:83:86:7a: 71:d2:36:ac:ee:40:1e:00:47:97:a5:ab:9b:21:6c: af:a9:cd:36:5b:69:46:ea:02:55:bc:dd:97:54:88: 0e:a7:5b:bb:64:46:50:73:fe:cc:9e:ac:fa:a8:52: 39:49:ae:3a:bb:3b:f3:d6:ee:79:3e:a4:a2:f6:5e: a4:3e:94:bf:33:61:d1:97:35:31:57:1f:e6:48:25: 72:19:c1:f7:68:e9:9c:65:d4:86:4b:da:84:8d:3a: 55:a9:e8:95:6c:6b:a0:d6:81:0b:a1:78:1c:c3:48: 33:0a:52:88:7f:00:d3:f7:3d:29:62:84:d5:b6:57: 3c:a6:44:74:7f:de:4b:2c:b9:28:18:9a:52:b6:0f: 15:f9:89:38:bc:ac:9f:db:ba:5f:10:8c:4e:73:3a: 1e:65:a9:64:d9:2f:f3:ed:5c:a2:a9:7c:dc:31:2a: 35:c3:32:8b:4e:e4:ce:d6:60:c6:c8:e2:64:d0:22: 55:27:a2:72:3e:b7:6f:79:d2:c3:e5:e5:79:1e:3f: 4d:18:a6:04:ab:de:7a:0c:ea:c9:47:71:7e:af:1b: 65:a6:08:bc:dc:56:c0:8a:4d:23:14:e7:82:47:02: e6:14:5e:e6:9b:76:5f:9c:4c:df:f9:ff:e7:53:ae: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38826 sbgp-ipAddrBlock: critical IPv4: 103.243.84.0/22 119.15.96.0/20 175.106.4.0/22 IPv6: 2400:5000::/32 Signature Algorithm: sha256WithRSAEncryption b3:b8:cb:22:d2:d7:13:f3:55:d6:a4:51:5d:ab:33:c2:6c:27: 8e:9e:06:3b:07:a7:58:b7:8f:4a:e7:1d:4e:c6:54:3f:d1:3a: aa:9a:82:d8:11:d9:bd:29:9d:6b:83:62:63:59:b7:8e:6a:53: 3e:6e:31:c9:dd:ea:b0:ff:ae:50:99:11:24:d1:f9:eb:1b:20: d4:65:1a:1d:07:53:01:fa:b3:8f:c0:f8:93:cb:1a:4e:31:9c: 81:84:58:bb:18:d7:9a:f3:6e:50:f1:2f:3a:fa:4a:dd:bc:12: 1b:e4:02:43:64:39:fd:01:7a:65:09:ae:cd:4d:26:f8:59:68: f9:65:8d:72:40:4e:6b:be:b8:a8:2c:1e:06:5e:86:bf:d9:9b: 99:f1:45:41:14:3d:04:cb:29:84:f9:27:3b:0c:ee:bf:7a:6c: 5f:83:2d:80:b3:59:8e:85:14:2b:d1:52:f9:a9:b7:c9:d2:85: 85:69:e3:cb:3d:52:8f:64:c4:b6:51:81:cd:3e:f6:0e:69:9b: 4f:89:fc:d7:1c:8d:ad:a0:22:7e:d1:d5:e1:01:0e:7f:9e:a1: 94:1d:68:2c:da:fc:7b:25:dc:35:a9:39:d0:4a:7d:e0:5b:b2: 5a:87:d7:59:04:5d:34:aa:eb:36:a2:37:3d:75:bd:c5:93:81: f1:93:35:2e -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAoPZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNTEzNTA0OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxOUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0Uy MUVGMjkxQjA1NTQyRDg3MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS4vK2nHp+nt36BoOGenHSNqzuQB4AR5elq5shbK+pzTZbaUbqAlW83ZdUiA6n W7tkRlBz/syerPqoUjlJrjq7O/PW7nk+pKL2XqQ+lL8zYdGXNTFXH+ZIJXIZwfdo 6Zxl1IZL2oSNOlWp6JVsa6DWgQuheBzDSDMKUoh/ANP3PSlihNW2VzymRHR/3kss uSgYmlK2DxX5iTi8rJ/bul8QjE5zOh5lqWTZL/PtXKKpfNwxKjXDMotO5M7WYMbI 4mTQIlUnonI+t2950sPl5XkeP00YpgSr3noM6slHcX6vG2WmCLzcVsCKTSMU54JH AuYUXuabdl+cTN/5/+dTroovAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQU5wYdsiKD jeaKk84h7ykbBVQthyYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlEM0MyLzcyRDdDRkQ2MjNGODExRTc5NTg5RDc1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RDNDMi83MkQ3Q0ZENjIzRjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lL RGplYUtrODRoN3lrYkJWUXRoeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJeqMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZ/NUAwQEdw9g AwQCr2oEMA0EAgACMAcDBQAkAFAAMA0GCSqGSIb3DQEBCwUAA4IBAQCzuMsi0tcT 81XWpFFdqzPCbCeOngY7B6dYt49K5x1OxlQ/0TqqmoLYEdm9KZ1rg2JjWbeOalM+ bjHJ3eqw/65QmREk0fnrGyDUZRodB1MB+rOPwPiTyxpOMZyBhFi7GNea825Q8S86 +krdvBIb5AJDZDn9AXplCa7NTSb4WWj5ZY1yQE5rvrioLB4GXoa/2ZuZ8UVBFD0E yymE+Sc7DO6/emxfgy2As1mOhRQr0VL5qbfJ0oWFaePLPVKPZMS2UYHNPvYOaZtP ifzXHI2toCJ+0dXhAQ5/nqGUHWgs2vx7Jdw1qTnQSn3gW7Jah9dZBF00qus2ojc9 db3Fk4HxkzUu -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:37 2026 by rpki-client