This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer File: DprNgHEUtY9xipwrhZUmJebbK9E.cer (raw, json) Hash identifier: Y2pd5Eh/QdwPD5KYQEjW57y0xaNJXIAHI29btC1kDTQ= Subject key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02857A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft caRepository: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 12:55:10 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 202.47.180.0/23 IP: 2001:df3:67c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165242 (0x2857a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 12 12:55:10 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:c2:31:20:4f:74:86:c3:ed:3a:b4:88:14: 73:11:cc:ad:c0:b7:1c:bf:ff:2a:5b:80:13:7f:12: 53:90:02:5e:62:87:4b:d8:8c:48:13:0c:55:4c:b4: 8a:13:12:b8:e8:41:16:51:ca:fb:e3:8e:0a:68:4d: 07:90:a9:0a:44:8f:a3:dd:52:58:76:a7:d7:74:c7: 12:25:67:da:cc:3a:53:a2:5c:80:9a:73:26:b2:51: fa:bb:6f:d1:0d:99:a2:3b:40:a2:99:da:08:72:0e: 06:0b:a8:d2:be:86:4f:66:b7:eb:55:88:ea:e6:67: 67:27:e5:7b:5d:b2:66:59:6a:2d:ca:64:d4:e3:16: 1f:33:91:01:88:21:b5:0f:9e:d3:82:66:61:d2:a3: 60:1d:11:e8:03:27:71:b7:97:21:3e:74:a7:d1:27: 71:52:e6:d4:a4:6e:5d:4c:bb:24:fc:e4:76:c3:29: 3e:35:b5:95:10:ec:6a:d1:ae:39:7d:19:64:ff:00: bd:88:88:71:67:7b:7f:6e:5b:4e:8c:bc:4f:a0:7d: 41:b2:16:49:d7:e0:8f:4e:6c:44:ac:66:59:d5:8d: 05:28:7d:2e:83:69:a3:56:7b:39:13:0f:d0:e8:b2: a4:b4:a2:f4:37:6f:c6:92:44:ba:83:ca:f1:61:11: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.180.0/23 IPv6: 2001:df3:67c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:76:00:37:07:6f:bf:e9:3f:9c:f1:df:81:6f:30:e3:3f:83: 2f:30:68:5b:5b:70:95:b0:cd:5d:70:21:6a:eb:ef:34:6e:da: f9:c0:d6:93:5b:00:7c:08:79:e3:79:a9:69:72:2e:d1:b3:c2: a9:07:97:2e:fd:d5:53:52:c3:12:35:68:1f:9a:fa:59:b4:50: 37:b2:42:42:a7:8a:11:b4:f7:04:6f:8b:d1:25:92:00:3f:8f: 26:3d:0d:9f:fe:c9:c6:e7:23:0c:cb:31:fb:b5:18:f6:f2:e4: fb:a2:2c:f7:ab:1c:46:80:4a:a5:f9:f0:9c:15:84:7e:d9:09: 23:da:73:3b:65:4e:86:61:5b:e1:08:94:12:dc:7b:10:e4:27: 43:b5:29:3a:5e:a3:61:86:e4:1e:5f:e5:21:12:48:3d:7c:da: 5d:55:e2:17:62:a5:f1:de:ad:36:1f:f7:3c:76:29:c3:c0:1f: b9:e2:53:ee:cb:c6:8c:de:6f:31:f1:c9:19:95:fa:cd:18:68: 50:b7:38:99:e5:22:b0:21:e6:01:11:2f:23:bb:46:b9:74:b1: 5e:10:73:98:00:c9:ab:bd:ad:bb:1d:0a:77:76:ce:e4:25:34: ce:a9:b9:ab:a3:93:83:17:2a:e5:b2:a7:cc:cd:ba:c8:e5:84: e1:b9:a5:65 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAoV6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMjEyNTUxMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMy Qjg1OTUyNjI1RTZEQjJCRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCOMIxIE90hsPtOrSIFHMRzK3Atxy//ypbgBN/ElOQAl5ih0vYjEgTDFVMtIoT ErjoQRZRyvvjjgpoTQeQqQpEj6PdUlh2p9d0xxIlZ9rMOlOiXICacyayUfq7b9EN maI7QKKZ2ghyDgYLqNK+hk9mt+tViOrmZ2cn5XtdsmZZai3KZNTjFh8zkQGIIbUP ntOCZmHSo2AdEegDJ3G3lyE+dKfRJ3FS5tSkbl1MuyT85HbDKT41tZUQ7GrRrjl9 GWT/AL2IiHFne39uW06MvE+gfUGyFknX4I9ObESsZlnVjQUofS6DaaNWezkTD9Do sqS0ovQ3b8aSRLqDyvFhEdbDAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUDprNgHEU tY9xipwrhZUmJebbK9EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ2RDdBLzkzRDI0RjRBQjVDODExRUVCNEEyNEE2RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hF VXRZOXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAHKL7QwDwQCAAIwCQMHACABDfNnwDANBgkqhkiG9w0BAQsFAAOC AQEAZHYANwdvv+k/nPHfgW8w4z+DLzBoW1twlbDNXXAhauvvNG7a+cDWk1sAfAh5 43mpaXIu0bPCqQeXLv3VU1LDEjVoH5r6WbRQN7JCQqeKEbT3BG+L0SWSAD+PJj0N n/7JxucjDMsx+7UY9vLk+6Is96scRoBKpfnwnBWEftkJI9pzO2VOhmFb4QiUEtx7 EOQnQ7UpOl6jYYbkHl/lIRJIPXzaXVXiF2Kl8d6tNh/3PHYpw8AfueJT7svGjN5v MfHJGZX6zRhoULc4meUisCHmAREvI7tGuXSxXhBzmADJq72tux0Kd3bO5CU0zqm5 q6OTgxcq5bKnzM26yOWE4bmlZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:29 2026 by rpki-client