This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer File: AShwXWnFHg4rB4rtuZiR5_GbTR8.cer (raw, json) Hash identifier: d3JHzkZ575JFFHzb8zYy/ESZBUf5V9z4R3O8DB6Q2R0= Subject key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286D9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 14:00:39 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139925 IP: 103.147.42.0/23 IP: 2001:df2:8280::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165593 (0x286d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 16 14:00:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:fe:c9:17:2f:5d:ff:b1:47:f0:23:c9:b2: 89:dc:b6:70:23:24:8d:bc:f7:cf:74:56:da:c4:b2: 7f:d2:a5:da:a8:19:fd:01:26:46:83:23:5a:0d:93: 9e:49:be:9a:8a:0d:cf:6f:ea:ab:07:2f:13:1b:44: b6:2a:81:62:c5:ed:c8:16:ac:43:1b:2d:ad:db:72: cc:79:e9:a8:af:3a:d9:7b:4c:44:40:2b:ad:3d:4d: 59:9c:67:17:79:8d:31:d6:1b:98:13:d6:9b:5c:68: ac:d6:4a:e9:54:fa:39:9a:98:4f:83:e4:dc:44:94: ff:7c:c1:a2:c4:65:a8:9a:9e:f9:48:22:c5:20:31: b4:e2:43:61:ec:8c:84:d6:1f:4f:7a:0d:bb:33:a6: a1:d0:a5:74:c9:62:d6:85:13:2f:9d:24:c5:37:d4: f2:d6:e7:62:27:bf:cf:c0:15:18:ae:0f:ff:61:2f: 09:50:69:4d:95:5e:26:94:86:ce:4e:fe:8d:30:44: f2:44:ab:fb:aa:db:07:86:6d:f9:4f:76:0b:0f:6b: f4:70:18:9e:c8:15:19:e7:62:c6:02:01:3f:5f:16: 70:18:df:76:79:c5:e2:07:68:c5:57:96:b4:4a:c7: a2:1c:21:42:c1:57:ab:3c:f0:cc:04:62:0c:6b:37: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139925 sbgp-ipAddrBlock: critical IPv4: 103.147.42.0/23 IPv6: 2001:df2:8280::/48 Signature Algorithm: sha256WithRSAEncryption b5:0a:91:a1:37:4e:33:65:a5:74:05:8a:b2:b7:18:18:6c:fa: a1:5a:d0:eb:db:b5:8f:c6:de:2a:33:8a:ec:f5:dd:08:b2:a5: a1:a5:eb:29:93:ef:26:97:b0:f3:50:18:9e:04:c2:88:c3:59: b6:9c:ee:56:c0:ae:29:bd:f5:7c:7b:e6:34:c3:d1:91:69:b8: 4e:a4:5e:ca:e9:b6:0c:97:a7:1a:fd:f8:8b:d7:7d:ea:12:48: 9b:9a:20:28:cd:ae:ff:54:dd:43:1f:d2:a7:b8:33:57:72:17: 9b:60:c5:42:b8:3b:63:92:81:4b:d9:0f:ab:51:21:4c:64:58: d0:0c:ff:0e:74:82:28:af:8c:1c:22:e4:20:d7:23:1f:f4:9b: a3:c5:b9:ad:fd:a1:18:f5:92:3b:3a:12:c9:33:a7:6b:26:a1: 06:b6:72:66:16:8e:e5:de:83:b4:f6:e7:79:dc:cd:d0:f1:8b: aa:ed:3d:b6:be:6f:7f:d2:7a:01:9c:f3:6d:7b:52:e2:cd:55: a8:b1:f8:a2:31:2b:0a:c8:2f:02:e8:d1:28:f7:b8:40:90:9b: ab:d0:bd:26:28:1c:04:90:19:96:59:f1:7a:26:76:81:dc:58: 19:b5:9a:cf:a6:d6:e2:a2:a5:47:16:ef:c8:59:44:8c:78:45: 5b:bd:64:78 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAobZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNjE0MDAzOVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFF REI5OTg5MUU3RjE5QjREMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/mP7JFy9d/7FH8CPJsonctnAjJI289890VtrEsn/SpdqoGf0BJkaDI1oNk55J vpqKDc9v6qsHLxMbRLYqgWLF7cgWrEMbLa3bcsx56aivOtl7TERAK609TVmcZxd5 jTHWG5gT1ptcaKzWSulU+jmamE+D5NxElP98waLEZaianvlIIsUgMbTiQ2HsjITW H096DbszpqHQpXTJYtaFEy+dJMU31PLW52Inv8/AFRiuD/9hLwlQaU2VXiaUhs5O /o0wRPJEq/uq2weGbflPdgsPa/RwGJ7IFRnnYsYCAT9fFnAY33Z5xeIHaMVXlrRK x6IcIULBV6s88MwEYgxrNyTZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUAShwXWnF Hg4rB4rtuZiR5/GbTR8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMwQzBCLzQ0NTk0NDhDMkM2QTExRUE5Q0VDQkY0QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFdu RkhnNHJCNHJ0dVppUjVfR2JUUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiKVMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5MqMA8EAgAC MAkDBwAgAQ3ygoAwDQYJKoZIhvcNAQELBQADggEBALUKkaE3TjNlpXQFirK3GBhs +qFa0OvbtY/G3ioziuz13QiypaGl6ymT7yaXsPNQGJ4EwojDWbac7lbArim99Xx7 5jTD0ZFpuE6kXsrptgyXpxr9+IvXfeoSSJuaICjNrv9U3UMf0qe4M1dyF5tgxUK4 O2OSgUvZD6tRIUxkWNAM/w50giivjBwi5CDXIx/0m6PFua39oRj1kjs6Eskzp2sm oQa2cmYWjuXeg7T253nczdDxi6rtPba+b3/SegGc8217UuLNVaix+KIxKwrILwLo 0Sj3uECQm6vQvSYoHASQGZZZ8XomdoHcWBm1ms+m1uKipUcW78hZRIx4RVu9ZHg= -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:02 2026 by rpki-client