This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer File: 8dIEca4xiTbXk7RttEgiB9lyRYs.cer (raw, json) Hash identifier: vIMZmwYzrKxjHbu3Sf0PI8qVtG3Bh8D8iWwATkhkio4= Subject key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0280B9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 24 Dec 2025 14:15:37 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 17473 AS: 139360 IP: 103.10.82.0/24 IP: 103.53.115.0/24 IP: 103.87.254.0/24 IP: 103.199.119.0/24 IP: 144.48.16.0/22 IP: 202.47.124.0/24 IP: 203.30.65.0/24 IP: 203.56.181.0/24 IP: 203.96.232.0/23 IP: 2405:5940::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164025 (0x280b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 24 14:15:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:c0:00:85:5e:b0:31:71:9d:e3:3c:bb:49: d4:51:58:f2:c0:88:b1:4b:23:af:71:c6:e1:9a:d8: 4a:9e:43:e6:97:68:20:3b:6c:8d:a7:18:3f:68:0d: 07:eb:27:87:2d:4a:d8:ad:57:25:bf:a8:07:a2:35: 7d:f7:d2:77:11:35:56:e2:c2:54:b1:81:5e:7b:98: bf:3a:e5:f0:e2:d7:26:ca:13:42:b3:67:94:2b:5d: 72:10:0c:62:26:a3:db:5f:d4:e0:6f:ec:fa:41:d5: 55:87:da:53:d1:88:96:a0:43:82:53:e5:5f:5d:dd: 91:e0:75:a9:4b:52:14:f1:60:48:f1:d6:21:b1:fc: 16:dd:31:74:d3:be:31:b8:c0:39:a2:27:f5:a1:a5: 1b:32:03:d5:29:35:9b:69:ba:77:ef:30:ed:31:69: a4:e0:6a:51:ca:d9:6e:2a:2f:2f:af:43:69:8d:ef: 1c:c2:92:f8:ab:73:1b:91:f4:69:83:83:bb:2b:7e: 2b:5b:98:bf:1c:cf:26:66:8a:02:ef:59:37:11:9d: ee:9c:90:79:7f:9a:b7:46:8f:ca:17:11:b4:35:05: 29:8a:92:c4:bb:ce:d0:6a:dd:61:c9:d8:26:c3:a1: c2:27:4e:c5:b4:bc:89:e7:2a:7f:ae:79:35:48:be: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17473 139360 sbgp-ipAddrBlock: critical IPv4: 103.10.82.0/24 103.53.115.0/24 103.87.254.0/24 103.199.119.0/24 144.48.16.0/22 202.47.124.0/24 203.30.65.0/24 203.56.181.0/24 203.96.232.0/23 IPv6: 2405:5940::/32 Signature Algorithm: sha256WithRSAEncryption 06:7d:38:f8:1d:31:78:14:ba:66:60:d9:e2:c5:da:89:ae:df: 5f:2f:2f:62:79:c8:94:b6:5b:29:e1:12:5a:a6:ee:f0:52:62: a7:e4:12:9c:2e:bd:f7:37:9f:ed:60:45:7a:b0:4c:5f:e9:e8: 8f:cb:de:2c:80:0e:8e:4d:4d:09:0f:9e:a0:d1:b4:56:32:46: a3:8a:fe:30:5c:cc:13:e5:31:aa:82:36:5f:95:6e:72:18:fe: 81:c8:35:e7:db:90:9b:2f:0c:31:9a:45:30:88:fa:2f:19:d4: 50:a4:ea:dc:7a:ce:ca:77:da:1a:84:73:15:4e:c7:c3:40:5d: be:1b:e6:bd:7c:83:e4:92:f0:d6:13:cd:8f:91:14:4f:8c:20: 93:ec:6b:03:f8:87:59:0d:8b:24:bb:44:5f:1b:e7:aa:f9:c8: 8a:b3:ef:1f:31:54:c4:eb:21:a0:83:be:9a:5f:98:6c:da:30: 20:9f:f1:57:f9:c9:90:5f:d8:d5:d3:fc:78:b0:dc:b2:4f:1a: 77:99:91:e2:4d:1e:d4:e6:e2:4e:79:ce:53:53:4d:a4:61:9e: c7:6c:4c:ec:e4:f0:d9:0c:6b:27:84:94:5b:d3:a9:bb:7e:fe: f2:c5:53:3d:11:05:23:db:8e:92:e4:95:b1:97:b6:44:f9:04: 2c:4b:be:7d -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIDAoC5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNDE0MTUzN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2 REI0NDgyMjA3RDk3MjQ1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsEcAAhV6wMXGd4zy7SdRRWPLAiLFLI69xxuGa2EqeQ+aXaCA7bI2nGD9oDQfr J4ctStitVyW/qAeiNX330ncRNVbiwlSxgV57mL865fDi1ybKE0KzZ5QrXXIQDGIm o9tf1OBv7PpB1VWH2lPRiJagQ4JT5V9d3ZHgdalLUhTxYEjx1iGx/BbdMXTTvjG4 wDmiJ/WhpRsyA9UpNZtpunfvMO0xaaTgalHK2W4qLy+vQ2mN7xzCkvircxuR9GmD g7srfitbmL8czyZmigLvWTcRne6ckHl/mrdGj8oXEbQ1BSmKksS7ztBq3WHJ2CbD ocInTsW0vInnKn+ueTVIvqHjAgMBAAGjggNSMIIDTjAdBgNVHQ4EFgQU8dIEca4x iTbXk7RttEgiB9lyRYswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4RUFGLzEwQjBFM0QwMDRFQTExRUFCRURDODE2MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEOEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0 eGlUYlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICREECAwIgYDBeBggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAGcKUgME AGc1cwMEAGdX/gMEAGfHdwMEApAwEAMEAMovfAMEAMseQQMEAMs4tQMEActg6DAN BAIAAjAHAwUAJAVZQDANBgkqhkiG9w0BAQsFAAOCAQEABn04+B0xeBS6ZmDZ4sXa ia7fXy8vYnnIlLZbKeESWqbu8FJip+QSnC699zef7WBFerBMX+noj8veLIAOjk1N CQ+eoNG0VjJGo4r+MFzME+UxqoI2X5Vuchj+gcg159uQmy8MMZpFMIj6LxnUUKTq 3HrOynfaGoRzFU7Hw0BdvhvmvXyD5JLw1hPNj5EUT4wgk+xrA/iHWQ2LJLtEXxvn qvnIirPvHzFUxOshoIO+ml+YbNowIJ/xV/nJkF/Y1dP8eLDcsk8ad5mR4k0e1Obi TnnOU1NNpGGex2xM7OTw2QxrJ4SUW9Opu37+8sVTPREFI9uOkuSVsZe2RPkELEu+ fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:02:07 2026 by rpki-client