This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer File: C4E-K7qEBp60NNZWZn_s4fYbSUs.cer (raw, json) Hash identifier: NRKB4Di3mV3q9fQvcgy5onWg2FxgRX3EnsRZ/XtpIoE= Subject key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284E6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 02:49:32 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.34.235.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165094 (0x284e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 02:49:32 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:6e:e2:f3:5c:4d:86:a9:1e:fb:bd:70:d0: 6c:f8:8d:42:36:52:a0:ec:ba:ee:92:ea:88:32:b6: 20:ce:9a:3b:33:c0:09:59:6f:10:1c:b5:93:2f:04: 9f:b3:1c:9c:c1:f0:60:64:39:4d:cc:74:5e:c2:68: 64:e3:e1:b0:09:71:42:14:3a:69:39:63:d3:7f:b9: a8:3b:17:a9:df:67:bc:a8:cc:eb:92:73:3e:83:9e: 54:85:f9:a8:ae:e6:8c:bd:2e:5f:c7:2f:d6:c2:e9: 19:27:36:f8:ed:a9:1c:b2:13:7b:ad:64:15:54:e1: 57:21:22:ec:84:fc:54:4c:79:db:f9:df:46:60:34: 83:08:10:48:d0:98:0c:f3:44:18:7a:cd:36:1e:09: 51:20:42:21:d2:90:a0:ab:d1:22:f2:e0:8a:c6:1e: 55:f5:07:de:de:a8:3b:3b:e1:11:e3:91:9e:50:5a: 4d:07:37:84:4a:af:48:c5:26:ff:23:9f:fb:85:d5: 33:cf:02:b8:9f:9e:56:8d:e9:82:fb:b2:07:72:98: 71:54:71:8a:de:db:b6:ab:54:e5:f0:52:7d:31:b6: 2f:46:42:f2:ef:a3:e7:06:22:17:4a:5d:be:b0:08: 02:f4:24:8b:c9:d3:8e:7b:d9:a3:bc:1e:bb:ee:fc: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.235.0/24 Signature Algorithm: sha256WithRSAEncryption ad:c3:43:fc:27:73:05:f5:c8:77:72:f3:ca:76:64:3e:a5:ad: 8b:00:5b:9c:e6:fc:e8:63:d1:5f:70:98:42:f6:67:07:22:0c: 66:9a:24:a0:3b:4a:31:eb:38:a1:a9:c5:e5:60:b7:ac:18:e8: 8a:16:58:0c:f5:82:e2:c3:2d:91:f3:12:36:0d:36:fb:f2:b5: 2e:e1:59:b3:57:2c:7c:bf:00:37:05:67:46:cf:db:da:f2:be: 75:36:bf:ae:db:14:b5:ab:57:b2:7b:2f:bf:11:ae:e6:e4:96: 71:48:25:1c:a1:fe:2b:fe:67:a7:7d:a4:f5:c1:86:54:d5:0e: fa:50:39:f7:bf:e3:26:20:39:bc:e1:d7:c5:8d:e6:fe:7c:b3: 0e:90:ad:af:0e:e5:02:d8:21:60:f7:a4:ac:41:15:e6:f9:40: 99:e8:26:70:9c:4f:11:04:26:21:35:f6:38:3f:52:a0:d8:c8: 2d:c9:4b:80:cc:fe:1d:3a:10:82:4c:ca:c9:0e:7e:4a:75:09: 14:e9:b6:75:8a:28:94:e6:a8:1b:bd:a5:b8:0f:5e:02:c1:62: a0:9e:29:34:c9:b5:54:b0:a0:9b:11:34:48:f7:b0:38:25:cf: a7:5d:da:9d:f2:d3:0a:07:fb:d8:c1:30:38:ac:76:35:67:ef: 28:a2:cb:37 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAoTmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTAyNDkzMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1 NjY2N0ZFQ0UxRjYxQjQ5NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO6m7i81xNhqke+71w0Gz4jUI2UqDsuu6S6ogytiDOmjszwAlZbxActZMvBJ+z HJzB8GBkOU3MdF7CaGTj4bAJcUIUOmk5Y9N/uag7F6nfZ7yozOuScz6DnlSF+aiu 5oy9Ll/HL9bC6RknNvjtqRyyE3utZBVU4VchIuyE/FRMedv530ZgNIMIEEjQmAzz RBh6zTYeCVEgQiHSkKCr0SLy4IrGHlX1B97eqDs74RHjkZ5QWk0HN4RKr0jFJv8j n/uF1TPPArifnlaN6YL7sgdymHFUcYre27arVOXwUn0xti9GQvLvo+cGIhdKXb6w CAL0JIvJ04572aO8Hrvu/M5tAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUC4E+K7qE Bp60NNZWZn/s4fYbSUswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU3QThFL0EwNTE1NkE2ODM1QzExRUU4OEVBQjg0RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFN0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdx RUJwNjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLIuswDQYJKoZIhvcNAQELBQADggEBAK3DQ/wncwX1yHdy88p2 ZD6lrYsAW5zm/Ohj0V9wmEL2ZwciDGaaJKA7SjHrOKGpxeVgt6wY6IoWWAz1guLD LZHzEjYNNvvytS7hWbNXLHy/ADcFZ0bP29ryvnU2v67bFLWrV7J7L78RrubklnFI JRyh/iv+Z6d9pPXBhlTVDvpQOfe/4yYgObzh18WN5v58sw6Qra8O5QLYIWD3pKxB Feb5QJnoJnCcTxEEJiE19jg/UqDYyC3JS4DM/h06EIJMyskOfkp1CRTptnWKKJTm qBu9pbgPXgLBYqCeKTTJtVSwoJsRNEj3sDglz6dd2p3y0woH+9jBMDisdjVn7yii yzc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:25 2026 by rpki-client