This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer (raw, json) Hash identifier: p+YREKPe8mG3IT7vPeBuPmQ/ViaxewH2UHLaW8RMuLg= Subject key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028192 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 13:42:45 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 45326 IP: 103.30.28.0/22 IP: 119.18.144.0/21 IP: 202.5.32.0/19 IP: 2401:8a40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164242 (0x28192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 13:42:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:e3:fd:4c:9e:09:2e:67:6f:18:2e:92:60: 48:89:90:f3:31:71:10:9d:9b:93:af:85:24:f0:c9: 87:29:00:8c:51:4a:1d:4b:ec:e8:3f:49:db:9b:2e: 48:b6:95:bb:2f:9b:da:44:3b:be:4a:75:67:20:00: 1c:f4:2c:44:e8:f8:02:cb:0b:67:c8:68:d3:a6:c6: d4:5a:67:4e:9d:1c:2b:3c:8f:84:6f:0e:38:92:18: 29:ad:0d:18:d7:8e:d3:ee:83:32:13:90:17:0d:12: f5:e9:a7:cc:aa:a5:41:40:64:cb:e1:2e:9a:ef:38: 4c:e3:d8:b3:e2:16:44:52:a7:8f:6c:26:ad:e0:19: e7:1f:ac:6b:fd:30:e6:88:69:81:51:85:2e:20:4c: 4e:77:61:54:e9:4f:e4:0a:84:b8:08:e7:44:9c:98: 08:b4:46:e0:f5:93:66:4f:08:e8:ac:05:81:e7:06: 19:a4:aa:c2:17:4f:bb:68:88:b6:ee:d3:af:77:a3: c4:8a:6d:21:2f:32:f7:08:27:dd:76:73:7f:20:e5: c5:fd:40:38:09:b4:b3:b6:cd:79:b3:85:dd:6a:7f: 52:cc:c4:fa:32:8e:1a:7b:a7:e2:2b:9f:96:d7:08: 14:78:e1:54:4e:65:c3:0f:a2:44:76:03:79:79:d8: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45326 sbgp-ipAddrBlock: critical IPv4: 103.30.28.0/22 119.18.144.0/21 202.5.32.0/19 IPv6: 2401:8a40::/32 Signature Algorithm: sha256WithRSAEncryption 77:17:ef:ef:5b:41:11:2a:82:ef:7a:b7:d3:12:8f:e5:71:8d: 4e:c7:ec:db:77:be:60:53:5b:92:a5:98:d8:80:67:a3:22:1c: 76:0f:fe:98:cc:3a:a4:ff:3e:cb:70:54:14:d3:e3:f0:5e:37: a2:94:77:92:0e:36:df:38:b8:dd:ec:69:23:95:a4:58:a2:dc: 92:8b:62:26:7e:7f:c6:e0:16:0d:3f:22:8e:7b:5e:e3:c9:5a: 4b:d1:7e:ab:45:c1:46:31:a8:d2:25:48:49:3e:da:af:76:8d: 11:b2:28:40:03:e7:ee:78:7f:d0:1b:09:8b:ac:96:cb:7c:97: 8b:e0:7c:59:d4:0b:e6:27:db:0a:e5:68:68:ca:d5:a6:c5:72: 68:3d:f9:fa:4d:96:ee:38:4e:65:35:fc:1d:b4:53:36:00:d3: ee:a5:0a:61:14:ae:1b:e7:aa:39:75:32:0a:fe:2d:00:87:a0: 53:3b:74:06:b6:66:68:08:3b:f7:e4:5c:7f:d0:25:da:8c:d2: 07:7b:47:c3:45:05:51:69:ee:95:b3:27:f3:ef:7d:34:e8:4d: a0:77:ba:c8:3b:86:bb:9e:38:30:30:22:d6:57:05:f4:1c:78: 75:2b:e3:df:86:00:49:fc:ca:76:56:66:5e:de:6b:8c:66:54: 56:27:69:ff -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAoGSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTEzNDI0NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5 NTk0MTRCQzcwOTQ2RUFCQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn7eP9TJ4JLmdvGC6SYEiJkPMxcRCdm5OvhSTwyYcpAIxRSh1L7Og/SdubLki2 lbsvm9pEO75KdWcgABz0LETo+ALLC2fIaNOmxtRaZ06dHCs8j4RvDjiSGCmtDRjX jtPugzITkBcNEvXpp8yqpUFAZMvhLprvOEzj2LPiFkRSp49sJq3gGecfrGv9MOaI aYFRhS4gTE53YVTpT+QKhLgI50ScmAi0RuD1k2ZPCOisBYHnBhmkqsIXT7toiLbu 0693o8SKbSEvMvcIJ912c38g5cX9QDgJtLO2zXmzhd1qf1LMxPoyjhp7p+Irn5bX CBR44VROZcMPokR2A3l52BmfAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQU9iXWv81C G9Pbl8aVlBS8cJRuq8QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk4MzRBLzJDMDQ3NDc0NkUzNTExRTc4MkRFRkU1NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgx Q0c5UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALEOMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZx4cAwQDdxKQ AwQFygUgMA0EAgACMAcDBQAkAYpAMA0GCSqGSIb3DQEBCwUAA4IBAQB3F+/vW0ER KoLverfTEo/lcY1Ox+zbd75gU1uSpZjYgGejIhx2D/6YzDqk/z7LcFQU0+PwXjei lHeSDjbfOLjd7GkjlaRYotySi2Imfn/G4BYNPyKOe17jyVpL0X6rRcFGMajSJUhJ Ptqvdo0RsihAA+fueH/QGwmLrJbLfJeL4HxZ1AvmJ9sK5WhoytWmxXJoPfn6TZbu OE5lNfwdtFM2ANPupQphFK4b56o5dTIK/i0Ah6BTO3QGtmZoCDv35Fx/0CXajNIH e0fDRQVRae6Vsyfz73006E2gd7rIO4a7njgwMCLWVwX0HHh1K+PfhgBJ/Mp2VmZe 3muMZlRWJ2n/ -----END CERTIFICATE-----Generated at Sun Jan 25 01:13:59 2026 by rpki-client