This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer (raw, json) Hash identifier: S+s0XG/19OLIjOFhuA4uZGShbKHAq+jojjYJIlq2Gko= Subject key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028678 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft caRepository: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 12:45:31 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138552 IP: 103.132.192.0/22 IP: 2404:3dc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165496 (0x28678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 12:45:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:a9:e9:17:30:09:14:06:eb:1d:c1:72:80: 2f:44:84:7e:69:d3:67:3d:44:ff:d7:be:15:4b:d3: 2e:f5:06:1c:d7:1c:2f:7d:99:85:b0:91:4e:0c:69: b6:3d:a7:cb:df:90:bf:88:1b:1d:bc:35:3b:80:4b: 01:59:9b:15:6b:c9:53:50:68:dd:e2:ff:0b:d8:a5: 79:7a:0b:16:f3:c9:71:e4:f1:c6:b8:b1:e5:42:d6: dd:1f:2e:9b:a2:3c:27:2c:19:f2:df:7f:07:d9:2e: 8e:45:b4:0c:e2:28:f4:cd:d1:61:48:0e:dc:b5:49: 46:1e:fc:2b:f5:91:3e:d4:91:92:fa:ef:c6:03:98: ad:4d:be:a3:d3:07:c4:98:5b:fc:8d:6d:30:f3:16: ea:d2:b6:2a:24:e8:1a:0f:eb:26:6d:aa:40:c8:21: 29:19:e1:89:7d:95:96:85:82:fb:5a:45:a8:85:6c: 3b:69:29:35:77:40:4b:02:69:f3:0c:4d:8e:3c:dd: 92:ee:f1:41:3e:9d:5a:30:8f:78:d3:1a:b0:98:e0: b9:23:bc:20:d7:71:d6:56:05:ad:48:eb:3d:73:b5: 3b:60:8b:6d:9f:52:99:54:61:eb:69:c1:44:69:09: d1:02:28:53:34:f2:7c:e1:0a:4c:8e:5a:34:4e:ec: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138552 sbgp-ipAddrBlock: critical IPv4: 103.132.192.0/22 IPv6: 2404:3dc0::/32 Signature Algorithm: sha256WithRSAEncryption 06:3a:86:69:8d:8b:df:73:3e:d8:20:6a:10:d7:06:65:2f:17: 88:b6:1e:75:73:41:04:8f:a9:1e:cf:89:11:72:93:f1:e2:3f: 88:1f:dc:fe:61:7c:a5:78:a4:76:d9:16:a8:e9:76:b6:fd:43: 37:db:16:41:af:65:b2:fb:fd:9e:35:61:e5:3f:c8:cf:1b:89: bd:0d:10:36:a7:16:92:c7:d5:18:20:23:d6:6d:d5:62:4e:38: 57:62:77:40:95:d7:60:67:09:2a:58:c9:4d:de:b5:5f:77:43: de:aa:9d:5e:b5:93:53:a8:87:fa:5b:56:15:92:0b:ec:56:99: 43:43:0c:b2:b1:16:2f:f9:80:12:99:81:27:d6:d4:5b:88:5f: 08:26:a4:a0:6f:58:9c:2e:9e:6d:e7:4d:24:ce:d6:26:6b:03: 2b:24:be:c6:f9:55:a1:b9:e0:1f:f9:c4:6a:fd:88:5d:80:66: 35:3d:a2:18:4c:08:26:53:6d:c2:9a:2e:c6:53:dd:cf:10:f1: fd:be:68:9d:f6:85:ab:2d:d1:0c:67:6e:de:ad:8f:8b:04:92: 49:9a:e4:ff:8c:82:18:44:de:c6:29:2b:46:97:60:a7:4d:39: d5:3a:eb:da:e3:d3:d2:61:b3:b3:cd:0e:71:9d:09:f5:39:7d: f6:64:54:29 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoZ4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTEyNDUzMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1 M0U0QTczNUVFQURBOEQ0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCxanpFzAJFAbrHcFygC9EhH5p02c9RP/XvhVL0y71BhzXHC99mYWwkU4MabY9 p8vfkL+IGx28NTuASwFZmxVryVNQaN3i/wvYpXl6CxbzyXHk8ca4seVC1t0fLpui PCcsGfLffwfZLo5FtAziKPTN0WFIDty1SUYe/Cv1kT7UkZL678YDmK1NvqPTB8SY W/yNbTDzFurStiok6BoP6yZtqkDIISkZ4Yl9lZaFgvtaRaiFbDtpKTV3QEsCafMM TY483ZLu8UE+nVowj3jTGrCY4LkjvCDXcdZWBa1I6z1ztTtgi22fUplUYetpwURp CdECKFM08nzhCkyOWjRO7FstAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUCYnhkVWL vORvq3tT5Kc17q2o1HcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM4MDZFLzlEQkZBQjM4MDIyRjExRUI5MzMzMTgzQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZX THZPUnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh04MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4TAMA0EAgAC MAcDBQAkBD3AMA0GCSqGSIb3DQEBCwUAA4IBAQAGOoZpjYvfcz7YIGoQ1wZlLxeI th51c0EEj6kez4kRcpPx4j+IH9z+YXyleKR22Rao6Xa2/UM32xZBr2Wy+/2eNWHl P8jPG4m9DRA2pxaSx9UYICPWbdViTjhXYndAlddgZwkqWMlN3rVfd0Peqp1etZNT qIf6W1YVkgvsVplDQwyysRYv+YASmYEn1tRbiF8IJqSgb1icLp5t500kztYmawMr JL7G+VWhueAf+cRq/YhdgGY1PaIYTAgmU23Cmi7GU93PEPH9vmid9oWrLdEMZ27e rY+LBJJJmuT/jIIYRN7GKStGl2CnTTnVOuva49PSYbOzzQ5xnQn1OX32ZFQp -----END CERTIFICATE-----Generated at Sun Jan 25 02:55:16 2026 by rpki-client