This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer File: DKMWISTuZGKWQ_8p6zEQctkShTM.cer (raw, json) Hash identifier: bLPCj/6VyDi4iE/0D8spy3hoZsnexct7gDpCwV/67DQ= Subject key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028560 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 04:05:13 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 154173 IP: 203.174.22.0/23 IP: 2001:df6:90c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165216 (0x28560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 12 04:05:13 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:eb:5b:3f:b6:29:de:ba:48:3b:0c:7c:c3: da:48:63:39:6b:ce:bd:ad:28:8c:62:3b:1e:8d:db: d2:16:c1:c5:1a:5a:30:10:40:46:e3:b0:5f:81:36: d4:79:b3:c3:28:6e:c0:e6:5b:8a:eb:91:e6:56:9a: a8:62:1c:5b:ee:36:d6:b7:2d:4b:a8:32:4f:e7:40: e6:37:99:a1:59:3d:84:6e:7d:7b:87:5f:8a:e8:03: 17:0b:6a:46:1e:43:c3:1f:f1:89:cc:ae:2c:df:c3: fd:67:4f:35:bb:92:a1:8f:c4:47:5d:bd:aa:47:71: ff:2e:67:47:f9:f2:fa:f8:fc:81:b5:3c:39:13:94: 03:22:01:b9:6e:3c:ce:75:11:23:f4:e1:21:1b:2b: e1:76:ab:16:34:c9:25:ad:80:5b:84:e4:d2:d5:bb: 4d:37:cd:96:f7:ad:78:a3:d4:bf:1a:a6:40:80:9f: 43:92:bd:ba:ba:33:c2:0a:6c:65:63:a3:51:8d:d8: ff:92:5c:db:32:0a:af:a6:d1:f2:e6:02:a7:f5:cf: df:7a:04:df:d0:9b:d5:1d:a1:85:01:56:80:70:49: d9:b9:97:11:eb:0e:45:39:65:1a:0d:da:c5:3e:14: cb:17:c6:35:cb:05:1a:6e:be:44:cf:51:f2:43:e0: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154173 sbgp-ipAddrBlock: critical IPv4: 203.174.22.0/23 IPv6: 2001:df6:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:99:63:5b:71:48:e7:22:41:12:79:f3:15:4a:b0:be:7b:3f: 90:db:42:30:89:3d:67:71:47:5d:c3:8f:ad:d8:07:75:a5:9e: 4f:76:38:18:15:c9:d6:b8:2d:e0:56:e9:6d:c7:20:53:19:50: 00:7f:49:46:63:15:d5:09:e5:7f:56:fb:56:d6:10:90:bf:b5: a2:11:be:3f:e4:50:98:a3:fd:29:89:df:4e:34:e7:86:18:6b: 7c:46:7a:92:69:96:98:5c:94:87:ca:17:8a:d8:2d:5d:9e:75: 1a:71:d2:37:00:a1:10:0d:fe:80:27:48:fa:0c:28:96:b9:bc: a4:97:ca:ec:38:5a:ee:2b:68:49:00:ed:dd:4d:ec:ee:93:81: e4:6b:2f:b4:d5:f4:c9:d1:59:be:e0:54:27:b3:60:da:0a:e7: 42:de:5e:f0:ef:ca:13:25:78:61:5c:c7:35:04:79:f0:d5:ef: cd:ad:01:83:25:9f:75:8a:6d:56:a3:bf:93:ab:9d:d8:4a:37: 06:c0:ab:09:ae:bf:21:85:0b:d8:3a:e8:b0:43:7d:a5:47:d3: f8:12:eb:56:22:c7:e0:74:d1:7d:dc:5e:a7:a6:6e:50:b4:e2: 84:fc:9d:91:83:7e:94:29:9d:5c:70:78:fa:f8:b7:d6:06:e5: 3a:3e:30:25 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoVgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMjA0MDUxM1oXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQTREQkYxMTAvBgNVBAUTKDBDQTMxNjIxMjRFRTY0NjI5NjQzRkYy OUVCMzExMDcyRDkxMjg1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Z+tbP7Yp3rpIOwx8w9pIYzlrzr2tKIxiOx6N29IWwcUaWjAQQEbjsF+BNtR5 s8MobsDmW4rrkeZWmqhiHFvuNta3LUuoMk/nQOY3maFZPYRufXuHX4roAxcLakYe Q8Mf8YnMrizfw/1nTzW7kqGPxEddvapHcf8uZ0f58vr4/IG1PDkTlAMiAbluPM51 ESP04SEbK+F2qxY0ySWtgFuE5NLVu003zZb3rXij1L8apkCAn0OSvbq6M8IKbGVj o1GN2P+SXNsyCq+m0fLmAqf1z996BN/Qm9UdoYUBVoBwSdm5lxHrDkU5ZRoN2sU+ FMsXxjXLBRpuvkTPUfJD4JvhAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUDKMWISTu ZGKWQ/8p6zEQctkShTMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE0REJGL0MxNDU2MDUwODQ0MDExRjBBNTcwQkM0OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNERCRi9DMTQ1NjA1MDg0NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi9ES01XSVNU dVpHS1dRXzhwNnpFUWN0a1NoVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlo9MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBy64WMA8EAgAC MAkDBwAgAQ32kMAwDQYJKoZIhvcNAQELBQADggEBAFuZY1txSOciQRJ58xVKsL57 P5DbQjCJPWdxR13Dj63YB3Wlnk92OBgVyda4LeBW6W3HIFMZUAB/SUZjFdUJ5X9W +1bWEJC/taIRvj/kUJij/SmJ304054YYa3xGepJplphclIfKF4rYLV2edRpx0jcA oRAN/oAnSPoMKJa5vKSXyuw4Wu4raEkA7d1N7O6TgeRrL7TV9MnRWb7gVCezYNoK 50LeXvDvyhMleGFcxzUEefDV782tAYMln3WKbVajv5OrndhKNwbAqwmuvyGFC9g6 6LBDfaVH0/gS61Yix+B00X3cXqemblC04oT8nZGDfpQpnVxwePr4t9YG5To+MCU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:09 2026 by rpki-client