This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.cer (raw, json) Hash identifier: lasgPqhXiBg/2HooYXcK8msoCTHeOm9KQ9/l0nPEXtk= Subject key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0287B7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:24:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 58434 IP: 203.96.252.0/22 IP: 203.147.92.0/22 IP: 2402:2f00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165815 (0x287b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 21 13:24:30 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:cb:e2:90:4f:ed:64:aa:6b:33:05:ee:d4: 83:42:f5:3a:a0:50:f5:e0:26:aa:71:19:dd:59:eb: 2a:15:7a:5f:e9:da:48:a9:66:b5:bd:b7:f3:a7:03: 5d:c7:6c:53:74:8d:1b:3b:14:b9:15:11:2f:13:5b: 91:27:fc:1e:a8:b7:9f:4c:53:2c:2f:a2:76:90:fa: 0b:24:91:b4:b6:97:b8:ec:39:f5:38:20:4c:a1:71: 43:f5:21:1a:18:50:2e:25:86:72:5a:05:3d:4b:c4: 36:e1:6b:5a:37:d0:2b:d0:2c:a5:3d:5e:46:dd:34: 82:13:3d:5d:91:27:c8:e3:4d:45:77:c6:c9:17:00: 93:5e:15:84:0c:b9:cc:bb:fd:02:29:81:f3:13:60: fc:de:9a:9e:96:e4:ce:48:00:d5:86:76:dc:ee:a2: 82:79:e0:7f:1b:17:0b:29:5d:f0:d1:96:87:25:b9: f9:fa:bb:ac:6d:d0:a8:5d:a8:89:fc:9b:b2:d2:dd: c3:72:ca:a1:37:83:4e:df:72:4b:f0:9b:3b:d4:84: b7:c6:ea:17:c7:26:97:e5:6f:3d:4e:a2:46:67:c0: 54:4a:99:17:c2:51:7e:3a:b3:e0:1b:42:24:d2:e5: 0f:05:ad:1a:a1:e7:70:cd:fb:7a:0a:44:aa:68:8b: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58434 sbgp-ipAddrBlock: critical IPv4: 203.96.252.0/22 203.147.92.0/22 IPv6: 2402:2f00::/32 Signature Algorithm: sha256WithRSAEncryption cd:9f:6a:51:f8:2d:89:e5:30:e3:bc:7f:cb:03:e5:20:3d:8e: 5b:d1:55:be:df:2b:c4:12:a7:a2:a5:c1:e4:b7:88:0c:e3:9a: 9f:6d:4f:1e:28:50:a4:fb:43:69:3d:2e:c4:49:d8:d3:b1:ed: 30:aa:9a:15:0e:a0:50:d6:18:06:dc:72:44:9e:7f:be:36:ee: 7c:5f:19:28:84:64:65:de:ea:1e:8d:f0:98:d8:d3:45:2a:31: 88:76:d0:f6:4e:54:33:ec:25:2f:ae:22:47:f8:85:60:da:fa: a9:60:36:24:d9:2b:01:2d:95:3c:6b:03:83:31:80:f7:9a:3b: e9:f8:64:03:87:11:5a:37:76:11:db:b2:80:47:d8:e9:16:c6: 49:49:f3:05:0d:e3:46:cb:a1:7a:ee:29:ca:d7:ed:9d:a5:ca: f1:37:d9:1e:7a:a8:09:d7:05:9a:78:46:db:b2:99:20:7d:ea: bf:32:06:59:0b:f4:a4:57:dc:88:a8:23:ca:b5:b8:81:c5:9a: 3e:a4:b5:4e:ff:f0:eb:9e:4e:0e:89:91:c6:6e:63:ba:25:65: d9:b2:7e:fe:37:35:e9:17:15:7a:22:3b:26:63:c9:51:8b:dc: a9:b2:4f:f1:5c:ed:06:9d:2d:eb:af:44:05:97:d8:37:3a:d9: 60:06:6a:58 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoe3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMTEzMjQzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlG RDIwNDEzNTY3REJCN0ZDMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqksvikE/tZKprMwXu1INC9TqgUPXgJqpxGd1Z6yoVel/p2kipZrW9t/OnA13H bFN0jRs7FLkVES8TW5En/B6ot59MUywvonaQ+gskkbS2l7jsOfU4IEyhcUP1IRoY UC4lhnJaBT1LxDbha1o30CvQLKU9XkbdNIITPV2RJ8jjTUV3xskXAJNeFYQMucy7 /QIpgfMTYPzemp6W5M5IANWGdtzuooJ54H8bFwspXfDRloclufn6u6xt0KhdqIn8 m7LS3cNyyqE3g07fckvwmzvUhLfG6hfHJpflbz1OokZnwFRKmRfCUX46s+AbQiTS 5Q8FrRqh53DN+3oKRKpoiyilAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU7ErjVswC MimNPNn9IEE1Z9u3/CUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgzMEE1L0Q4MjQxOEZFNTE2NjExRUNBRDU2NTg2N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3 Q01pbU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAORCMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCy2D8AwQCy5Nc MA0EAgACMAcDBQAkAi8AMA0GCSqGSIb3DQEBCwUAA4IBAQDNn2pR+C2J5TDjvH/L A+UgPY5b0VW+3yvEEqeipcHkt4gM45qfbU8eKFCk+0NpPS7ESdjTse0wqpoVDqBQ 1hgG3HJEnn++Nu58XxkohGRl3uoejfCY2NNFKjGIdtD2TlQz7CUvriJH+IVg2vqp YDYk2SsBLZU8awODMYD3mjvp+GQDhxFaN3YR27KAR9jpFsZJSfMFDeNGy6F67inK 1+2dpcrxN9keeqgJ1wWaeEbbspkgfeq/MgZZC/SkV9yIqCPKtbiBxZo+pLVO//Dr nk4OiZHGbmO6JWXZsn7+NzXpFxV6IjsmY8lRi9ypsk/xXO0GnS3rr0QFl9g3Otlg BmpY -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:32 2026 by rpki-client