This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer File: DHxNa-htVb5Ey0rZZmbBU1GT93I.cer (raw, json) Hash identifier: bBZV6OOJQr+/bLJz6CqM6XZ9IHRMZtmeL45D9GDw/Jw= Subject key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283A2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft caRepository: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 02:33:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152114 IP: 180.94.24.0/23 IP: 2001:df3:2dc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164770 (0x283a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 5 02:33:18 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:00:c5:4e:c7:cd:94:3f:1a:51:bb:e7:d0: 54:09:be:a2:27:da:0c:de:f1:aa:fa:62:9e:6f:d6: 37:06:4a:73:68:9f:9d:39:71:7f:52:09:57:7c:86: 8e:98:28:62:84:f8:59:40:ce:b3:55:4c:0a:a7:c2: 8a:fa:6b:7b:fc:12:8c:d4:00:b5:3a:a8:52:e2:12: b9:8d:79:70:54:ab:ef:9a:5f:35:33:f6:db:18:cc: 01:f3:46:17:90:1c:56:01:0d:56:fb:66:3d:71:9c: 08:1b:04:34:76:8f:e9:74:f5:2d:83:66:82:4e:5f: 02:3d:a2:c1:c1:dc:fb:63:29:bf:64:11:9e:3d:5a: 9e:86:7e:6d:56:a1:6f:6a:29:d3:51:7d:97:7a:83: 05:b3:64:19:7d:d3:7d:00:a1:d4:bd:39:84:3f:a4: a5:24:4f:06:a9:1a:41:7e:d8:c4:b2:99:76:62:9c: 0e:7a:cf:b2:1e:8c:8a:f4:2d:71:b4:4c:1e:72:be: 45:28:03:01:35:e7:33:65:74:95:6f:3c:3d:60:4d: 35:fd:90:d8:17:01:93:37:25:75:3f:2f:05:8f:d6: 49:8e:8f:fc:fd:57:2b:70:f5:99:b9:68:23:ca:00: 23:1a:ad:e2:6b:9a:7c:97:08:d2:bf:e4:26:a9:24: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152114 sbgp-ipAddrBlock: critical IPv4: 180.94.24.0/23 IPv6: 2001:df3:2dc0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:d1:53:6c:b1:eb:bf:29:eb:b9:cf:29:fc:92:0d:69:bd:b2: 9b:cc:d5:c6:c4:24:5e:7e:d0:e5:95:03:7b:5b:aa:37:fb:b4: 51:48:f8:93:27:df:64:46:28:8a:15:87:4a:96:8e:a6:f5:de: 09:33:ab:e6:85:57:e3:ae:4d:5a:a8:0d:7d:d8:7a:d7:8e:ae: 87:96:ca:c4:b3:da:e5:45:c9:42:87:c1:cd:7d:d9:72:de:e9: d0:8d:25:3d:e9:32:8e:7b:93:b5:fb:c6:06:93:19:a3:07:a9: 10:fe:10:f0:13:42:56:23:6a:d6:9b:5a:28:f0:81:73:34:4d: 2b:ce:6d:1d:bc:ad:f3:b0:aa:60:5a:19:63:9c:1a:f1:32:1b: 8e:a2:c8:21:03:33:0b:1c:9c:19:6b:3a:68:4a:e0:05:d4:57: 90:5e:85:96:bb:a0:1c:72:e9:f3:5d:fc:bb:d9:18:00:bc:c0: c2:e7:a9:77:0a:bc:c9:63:8e:10:10:49:15:3d:47:34:22:7c: b4:58:f0:6e:b6:51:4b:a4:3e:6f:05:df:3b:39:a0:e0:56:b7: 1c:43:1b:13:64:ac:f3:60:d6:24:1b:14:0c:01:cc:84:0d:9a: 76:10:4f:a3:d3:95:f5:36:f9:0f:2d:56:80:bb:4b:52:0c:c2: 24:b4:be:b8 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoOiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNTAyMzMxOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFE OTY2NjZDMTUzNTE5M0Y3NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnJQDFTsfNlD8aUbvn0FQJvqIn2gze8ar6Yp5v1jcGSnNon505cX9SCVd8ho6Y KGKE+FlAzrNVTAqnwor6a3v8EozUALU6qFLiErmNeXBUq++aXzUz9tsYzAHzRheQ HFYBDVb7Zj1xnAgbBDR2j+l09S2DZoJOXwI9osHB3PtjKb9kEZ49Wp6Gfm1WoW9q KdNRfZd6gwWzZBl9030AodS9OYQ/pKUkTwapGkF+2MSymXZinA56z7IejIr0LXG0 TB5yvkUoAwE15zNldJVvPD1gTTX9kNgXAZM3JXU/LwWP1kmOj/z9Vytw9Zm5aCPK ACMareJrmnyXCNK/5CapJDnRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUDHxNa+ht Vb5Ey0rZZmbBU1GT93IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIzQ0E0L0I3NTE2QjEwODlCNjExRUU5OTUxMkE2REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyM0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1o dFZiNUV5MHJaWm1iQlUxR1Q5M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlIyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBtF4YMA8EAgAC MAkDBwAgAQ3zLcAwDQYJKoZIhvcNAQELBQADggEBADvRU2yx678p67nPKfySDWm9 spvM1cbEJF5+0OWVA3tbqjf7tFFI+JMn32RGKIoVh0qWjqb13gkzq+aFV+OuTVqo DX3YeteOroeWysSz2uVFyUKHwc192XLe6dCNJT3pMo57k7X7xgaTGaMHqRD+EPAT QlYjatabWijwgXM0TSvObR28rfOwqmBaGWOcGvEyG46iyCEDMwscnBlrOmhK4AXU V5BehZa7oBxy6fNd/LvZGAC8wMLnqXcKvMljjhAQSRU9RzQifLRY8G62UUukPm8F 3zs5oOBWtxxDGxNkrPNg1iQbFAwBzIQNmnYQT6PTlfU2+Q8tVoC7S1IMwiS0vrg= -----END CERTIFICATE-----Generated at Sun Jan 25 01:16:16 2026 by rpki-client