This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer File: 7qiugNcT5rItsOxgkVfwxZpS_X8.cer (raw, json) Hash identifier: ZW6eN4YzTbL2Sg5t2/rmQ3E1wqoENa6FaQzs3aHsXJk= Subject key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284B0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft caRepository: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 13:39:00 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 38196 AS: 45127 AS: 45669 AS: 58470 IP: 45.117.88.0/22 IP: 103.57.152.0/22 IP: 103.65.248.0/23 IP: 119.160.0.0/17 IP: 203.124.24.0/21 IP: 2404:3100::/32 IP: 2407:9c00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165040 (0x284b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 8 13:39:00 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:ec:86:13:08:89:bc:66:51:62:d1:97:c5: d8:a0:fb:ba:8d:0d:73:62:2a:c0:58:81:d3:ba:d3: 93:fe:4d:45:b7:75:71:d0:fd:90:bd:68:8b:cc:be: 9e:07:0f:27:48:ce:79:01:6b:b6:71:f5:9d:15:13: ff:ed:e6:3a:c2:b0:d7:d9:2f:2b:8b:e7:55:fa:d6: 99:18:f5:83:9d:25:86:f9:bc:73:ee:74:71:43:a7: a2:8d:58:25:2e:21:e1:42:da:4c:4f:1a:d1:01:f5: 4a:35:d7:db:fc:05:8a:cc:2d:87:4a:41:26:37:bb: d9:72:84:d6:ac:75:b1:12:cf:26:bb:65:f0:aa:03: 02:b2:9d:c2:c3:e3:b0:8d:91:d1:08:8b:60:4c:a8: af:c7:2f:3c:0d:d8:96:55:a7:39:5e:a0:6f:b2:cf: 5e:06:98:6e:48:f3:45:8c:fa:98:7d:06:b0:f6:d1: ee:81:62:75:58:b2:da:a2:78:94:3b:fa:d0:0b:76: 27:91:a6:16:ea:8a:82:bd:12:80:b4:30:e5:9e:6c: 9b:e1:89:30:75:4c:77:3f:be:92:da:ef:43:55:7b: 34:d5:2f:e9:c0:f4:06:ad:77:0f:6c:6d:c6:3e:c0: 36:63:ff:9f:99:5c:31:28:fc:bc:09:ae:86:79:dc: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38196 45127 45669 58470 sbgp-ipAddrBlock: critical IPv4: 45.117.88.0/22 103.57.152.0/22 103.65.248.0/23 119.160.0.0/17 203.124.24.0/21 IPv6: 2404:3100::/32 2407:9c00::/32 Signature Algorithm: sha256WithRSAEncryption d6:36:2f:7a:13:82:30:bb:5a:fb:a7:cb:8a:a9:72:84:cf:61: 99:56:b0:b8:89:17:83:3b:e2:b5:a6:4f:e6:ef:f6:fb:9d:fc: b2:c0:c6:4d:74:76:5c:46:40:6a:e0:67:93:74:48:ea:38:01: 5a:8b:23:d2:c3:fd:1a:dc:b5:e1:29:37:7f:1c:79:3c:59:64: ee:4b:87:3f:cf:9d:8d:45:32:77:17:17:e3:8a:5a:30:f4:78: 15:7c:a3:b5:45:2b:a3:cf:b8:60:08:46:d5:5e:0d:14:87:85: be:f8:ed:d0:22:43:2f:d6:cb:fa:21:87:a5:0f:71:a0:d5:6f: 1b:0f:46:77:5c:3f:5c:8d:c1:3d:c6:5f:32:3e:fc:73:2e:64: 69:ad:4e:80:3c:32:f3:13:9c:df:03:05:2c:56:28:7c:df:94: bf:a7:ed:f6:da:fb:da:1d:da:fb:78:76:d3:08:bd:1a:f0:9b: ad:b6:be:31:3b:05:bb:aa:1c:81:43:9c:94:34:25:f6:19:a9: 89:7b:62:74:f6:90:b2:4e:d3:65:fb:46:ef:6a:88:66:ff:32: 10:50:3e:79:fe:e8:b8:7f:64:cf:c5:87:6a:dc:4f:bf:30:6f: 9d:6f:f3:98:a9:7a:1b:01:fd:75:76:ae:c1:40:ff:dc:a4:ef: 96:7d:0a:d5 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIDAoSwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwODEzMzkwMFoXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2 MDkxNTdGMEM1OUE1MkZEN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4H+yGEwiJvGZRYtGXxdig+7qNDXNiKsBYgdO605P+TUW3dXHQ/ZC9aIvMvp4H DydIznkBa7Zx9Z0VE//t5jrCsNfZLyuL51X61pkY9YOdJYb5vHPudHFDp6KNWCUu IeFC2kxPGtEB9Uo119v8BYrMLYdKQSY3u9lyhNasdbESzya7ZfCqAwKyncLD47CN kdEIi2BMqK/HLzwN2JZVpzleoG+yz14GmG5I80WM+ph9BrD20e6BYnVYstqieJQ7 +tALdieRphbqioK9EoC0MOWebJvhiTB1THc/vpLa70NVezTVL+nA9Aatdw9sbcY+ wDZj/5+ZXDEo/LwJroZ53A1zAgMBAAGjggNMMIIDSDAdBgNVHQ4EFgQU7qiugNcT 5rItsOxgkVfwxZpS/X8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThENkI3LzFDMTY2NDFDMUQ5NzExRTI5NkQwMzA4MDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4RDZCNy8xQzE2NjQxQzFEOTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05j VDVySXRzT3hna1Zmd3hacFNfWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQgBAf8EGjAY oBYwFAIDAJU0AgMAsEcCAwCyZQIDAORmME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIA ATAeAwQCLXVYAwQCZzmYAwQBZ0H4AwQHd6AAAwQDy3wYMBQEAgACMA4DBQAkBDEA AwUAJAecADANBgkqhkiG9w0BAQsFAAOCAQEA1jYvehOCMLta+6fLiqlyhM9hmVaw uIkXgzvitaZP5u/2+538ssDGTXR2XEZAauBnk3RI6jgBWosj0sP9Gty14Sk3fxx5 PFlk7kuHP8+djUUydxcX44paMPR4FXyjtUUro8+4YAhG1V4NFIeFvvjt0CJDL9bL +iGHpQ9xoNVvGw9Gd1w/XI3BPcZfMj78cy5kaa1OgDwy8xOc3wMFLFYofN+Uv6ft 9tr72h3a+3h20wi9GvCbrba+MTsFu6ocgUOclDQl9hmpiXtidPaQsk7TZftG72qI Zv8yEFA+ef7ouH9kz8WHatxPvzBvnW/zmKl6GwH9dXauwUD/3KTvln0K1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:45 2026 by rpki-client