This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer File: DWjbrWAPi9kLNVuY9LI4-56aV_o.cer (raw, json) Hash identifier: sQtakG0p8H2EVyl8jGGK4owH/bMfOWvIwDjyVN3jl+8= Subject key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286A0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:18:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 63920 -- 63921 AS: 135079 IP: 43.225.48.0/22 IP: 103.44.32.0/22 IP: 103.65.252.0/22 IP: 103.208.164.0/22 IP: 137.59.168.0/22 IP: 2401:cd80::/31 IP: 2404:4180::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165536 (0x286a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 14:18:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:8d:1e:64:94:1e:30:94:6e:5c:79:48:92: 62:fb:ff:b6:a2:31:01:87:99:a7:1e:88:85:0e:35: 8d:23:39:40:d5:f9:46:9c:58:fb:1a:b9:fc:c5:de: c3:17:2d:c2:c1:e0:11:db:ee:fa:5a:13:fe:c8:c1: 7e:65:dc:24:18:44:b2:36:62:44:94:85:4e:51:e8: fb:21:28:ea:6c:df:3b:fc:32:5a:0b:11:0b:bb:90: 2d:38:a2:d1:99:a4:e2:bf:19:bc:25:da:54:2a:f5: 99:f2:9a:06:1c:be:cd:7a:74:6f:f3:67:e6:c0:2e: 31:c0:69:b1:b6:c5:ee:9b:5a:b8:93:99:1a:1e:5c: c0:09:8f:2d:58:c4:ca:02:d6:6e:d9:a2:79:ee:d2: b5:bd:bd:98:be:c7:a9:c4:b3:72:d0:7a:62:ab:5f: c8:2c:89:09:9a:ce:3a:d7:8a:fd:46:80:af:2f:02: 66:07:38:23:28:56:da:59:36:1d:5d:f9:81:8c:10: 30:d0:6f:dd:e4:c2:8d:4a:23:1e:c3:1c:8d:4e:2b: 70:ad:fc:c4:c3:a6:3a:0f:c2:a7:c4:63:56:d7:db: ef:ed:86:dd:74:9d:c6:e7:60:6a:00:d7:5a:55:1a: 88:e6:de:80:ce:09:81:86:3d:0d:83:90:c9:4e:65: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63920-63921 135079 sbgp-ipAddrBlock: critical IPv4: 43.225.48.0/22 103.44.32.0/22 103.65.252.0/22 103.208.164.0/22 137.59.168.0/22 IPv6: 2401:cd80::/31 2404:4180::/32 Signature Algorithm: sha256WithRSAEncryption 5d:be:95:30:b7:06:1c:96:c2:d4:a4:4e:d4:bf:f1:64:85:4c: 12:c2:a3:a5:be:02:53:34:c6:f1:1d:f4:ee:12:94:f9:d1:2e: d6:44:ef:84:3a:02:7e:c6:ef:8f:50:0d:e0:ce:ec:61:ff:fe: eb:72:a2:b0:c3:54:34:76:8b:ef:0d:4f:d6:2c:cf:c7:6e:f1: 39:f0:20:2f:03:88:f2:a2:5e:f0:d5:ae:cf:13:de:02:d1:e1: ff:7a:20:81:74:bf:e4:7d:79:1c:98:40:4f:10:f3:a3:07:bd: 23:b3:a2:e1:f3:de:bd:85:8b:57:14:77:e1:1c:c7:1e:7b:67: 2b:af:f2:b5:33:c2:fe:4a:77:5f:88:fa:b0:19:a9:7c:c6:8d: 9e:d6:35:d1:64:ba:5b:fc:bb:2c:eb:f0:47:e2:89:fa:15:02: 75:b0:96:09:ac:da:47:07:ef:d7:36:15:c6:1e:c4:b6:f1:e4: 0d:d9:96:10:b5:27:e6:e4:fe:6b:4c:e6:ce:42:bc:e4:69:2c: bc:a8:17:67:35:70:e1:4f:cb:24:01:60:57:91:96:0f:0e:f5: 62:eb:25:8a:70:b8:00:03:63:73:ea:17:48:7e:20:af:3a:9f: d7:6f:e7:7d:f0:5a:c1:fd:2a:35:35:d6:7d:c3:89:44:d6:e6: 50:cd:dc:71 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIDAoagMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTE0MTgyOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxREJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5 OEY0QjIzOEZCOUU5QTU3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxg40eZJQeMJRuXHlIkmL7/7aiMQGHmaceiIUONY0jOUDV+UacWPsaufzF3sMX LcLB4BHb7vpaE/7IwX5l3CQYRLI2YkSUhU5R6PshKOps3zv8MloLEQu7kC04otGZ pOK/Gbwl2lQq9ZnymgYcvs16dG/zZ+bALjHAabG2xe6bWriTmRoeXMAJjy1YxMoC 1m7Zonnu0rW9vZi+x6nEs3LQemKrX8gsiQmazjrXiv1GgK8vAmYHOCMoVtpZNh1d +YGMEDDQb93kwo1KIx7DHI1OK3Ct/MTDpjoPwqfEY1bX2+/tht10ncbnYGoA11pV Gojm3oDOCYGGPQ2DkMlOZaENAgMBAAGjggNJMIIDRTAdBgNVHQ4EFgQUDWjbrWAP i9kLNVuY9LI4+56aV/owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURCRjBELzU3OTY0RDRBQ0IwRTExRUFBMTBGMzMxREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldB UGk5a0xOVnVZOUxJNC01NmFWX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQgBAf8EFzAV oBMwETAKAgMA+bACAwD5sQIDAg+nME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAe AwQCK+EwAwQCZywgAwQCZ0H8AwQCZ9CkAwQCiTuoMBQEAgACMA4DBQEkAc2AAwUA JARBgDANBgkqhkiG9w0BAQsFAAOCAQEAXb6VMLcGHJbC1KRO1L/xZIVMEsKjpb4C UzTG8R307hKU+dEu1kTvhDoCfsbvj1AN4M7sYf/+63KisMNUNHaL7w1P1izPx27x OfAgLwOI8qJe8NWuzxPeAtHh/3oggXS/5H15HJhATxDzowe9I7Oi4fPevYWLVxR3 4RzHHntnK6/ytTPC/kp3X4j6sBmpfMaNntY10WS6W/y7LOvwR+KJ+hUCdbCWCaza Rwfv1zYVxh7EtvHkDdmWELUn5uT+a0zmzkK85GksvKgXZzVw4U/LJAFgV5GWDw71 YuslinC4AANjc+oXSH4grzqf12/nffBawf0qNTXWfcOJRNbmUM3ccQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:04 2026 by rpki-client