This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer File: 72Nt-xWS8CIgFrAPrKJwNXP00oI.cer (raw, json) Hash identifier: eVNngLyi6xfrlmZPUe2f6bqUV4+hnuf1vvQx8YHrpJc= Subject key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028351 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:29:14 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153833 IP: 103.103.152.0/22 IP: 203.79.32.0/20 IP: 2407:1880::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164689 (0x28351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 14:29:14 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:90:e0:41:da:74:ac:15:33:88:43:ab:a8: 67:97:6b:b2:7b:1b:6b:6b:84:b9:39:67:5d:83:78: 9e:76:39:a8:98:ad:6a:49:a5:74:5d:ea:04:70:a2: 84:ed:02:1b:16:0b:14:d4:c1:59:13:8a:78:c0:94: c2:03:11:e3:4b:05:d4:88:9c:00:b1:94:ec:30:aa: 31:e2:67:7c:4d:aa:4b:08:4c:27:60:4a:75:da:fe: 98:04:fd:c7:9e:16:e4:69:e0:22:fb:ea:7a:c0:3d: de:af:77:f1:40:9a:33:50:a2:ce:08:56:be:8c:e0: 0d:45:ea:e6:1a:be:50:59:34:7d:4f:6c:94:9a:ee: 3b:e3:50:92:4f:c4:b3:97:47:32:19:7d:96:e3:3d: da:32:64:24:ec:c0:dd:3f:71:d6:1c:1c:da:a3:9b: 45:60:42:95:c2:fb:c5:45:7f:78:b7:a6:37:fc:0e: 7c:fb:72:d3:1e:88:eb:0f:5f:47:b8:19:13:d8:d9: 43:3c:25:e8:a6:81:77:df:72:25:29:f2:59:39:ab: f4:de:30:a0:ad:08:82:be:e8:3a:9c:b1:3a:b8:e3: b1:e3:61:2f:55:2b:32:ec:ca:99:0f:de:83:36:29: 3a:d8:27:71:b4:d9:7b:db:80:6e:ae:8b:af:5f:d0: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153833 sbgp-ipAddrBlock: critical IPv4: 103.103.152.0/22 203.79.32.0/20 IPv6: 2407:1880::/32 Signature Algorithm: sha256WithRSAEncryption c3:a5:f9:fe:08:af:af:a7:81:70:b0:fc:d7:e7:66:9b:a6:21: 2f:61:5d:c4:b8:56:73:b0:78:27:95:a5:c4:16:95:79:5e:93: 41:77:49:ff:49:86:4b:70:f4:36:e9:c8:f5:c2:32:2b:e6:39: 9c:f1:0d:d4:3c:9d:93:78:dc:79:21:20:4c:9f:78:90:6a:91: 77:7e:16:e7:d5:c2:62:1d:51:e9:3a:34:93:9e:7e:32:f8:09: 07:23:cb:83:29:f2:8c:c3:92:b9:92:28:03:f3:36:26:73:32: 07:3f:11:ce:e8:90:24:ca:38:b7:2b:67:5d:9b:50:be:32:65: 22:07:1e:6a:f3:43:f8:a0:a3:8e:17:84:d4:3c:d3:e0:53:a7: a8:4b:46:16:de:f1:07:c4:c2:bd:f7:96:b3:1a:75:77:aa:0a: f4:64:37:65:94:c3:94:75:a6:c9:8b:34:66:83:6c:a8:b2:e9: 2b:63:72:37:29:15:00:ac:41:c4:75:96:2f:59:36:79:42:97: 5b:10:de:dc:b3:7b:b6:ce:cc:a3:6e:ab:4e:39:da:ce:5e:f8: cb:7e:8f:b8:d7:0f:f1:c0:fa:be:4f:25:76:92:49:16:74:a9: f3:57:fb:27:ce:1f:c7:fc:fa:78:42:19:98:cf:de:0d:05:fe: a4:a1:91:75 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoNRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE0MjkxNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxREM4QkQxMTAvBgNVBAUTKEVGNjM2REZCMTU5MkYwMjIyMDE2QjAw RkFDQTI3MDM1NzNGNEQyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2mZDgQdp0rBUziEOrqGeXa7J7G2trhLk5Z12DeJ52OaiYrWpJpXRd6gRwooTt AhsWCxTUwVkTinjAlMIDEeNLBdSInACxlOwwqjHiZ3xNqksITCdgSnXa/pgE/cee FuRp4CL76nrAPd6vd/FAmjNQos4IVr6M4A1F6uYavlBZNH1PbJSa7jvjUJJPxLOX RzIZfZbjPdoyZCTswN0/cdYcHNqjm0VgQpXC+8VFf3i3pjf8Dnz7ctMeiOsPX0e4 GRPY2UM8JeimgXffciUp8lk5q/TeMKCtCIK+6DqcsTq447HjYS9VKzLsypkP3oM2 KTrYJ3G02XvbgG6ui69f0FvLAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU72Nt+xWS 8CIgFrAPrKJwNXP00oIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURDOEJELzExOUNDMjIwNDBGRDExRUVBNkFEMjkzNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQzhCRC8xMTlDQzIyMDQwRkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhX UzhDSWdGckFQcktKd05YUDAwb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAljpMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ2eYAwQEy08g MA0EAgACMAcDBQAkBxiAMA0GCSqGSIb3DQEBCwUAA4IBAQDDpfn+CK+vp4FwsPzX 52abpiEvYV3EuFZzsHgnlaXEFpV5XpNBd0n/SYZLcPQ26cj1wjIr5jmc8Q3UPJ2T eNx5ISBMn3iQapF3fhbn1cJiHVHpOjSTnn4y+AkHI8uDKfKMw5K5kigD8zYmczIH PxHO6JAkyji3K2ddm1C+MmUiBx5q80P4oKOOF4TUPNPgU6eoS0YW3vEHxMK995az GnV3qgr0ZDdllMOUdabJizRmg2yosukrY3I3KRUArEHEdZYvWTZ5QpdbEN7cs3u2 zsyjbqtOOdrOXvjLfo+41w/xwPq+TyV2kkkWdKnzV/snzh/H/Pp4QhmYz94NBf6k oZF1 -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:22 2026 by rpki-client