This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer File: ETYYsNQQaCrAapAdZbuayVXtieA.cer (raw, json) Hash identifier: lvp7mOVrm0/eruyp+ZWG8MuqsyIEWpCY1KVo/yUoVWM= Subject key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028627 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 14 Jan 2026 13:04:15 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38199 AS: 134809 IP: 43.230.96.0/22 IP: 103.7.68.0/22 IP: 103.13.74.0/24 IP: 120.138.80.0/20 IP: 163.47.88.0/22 IP: 221.133.32.0/20 IP: 223.27.128.0/20 IP: 2001:df7:6400::/48 IP: 2402:9a00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165415 (0x28627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 14 13:04:15 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:62:20:7f:1a:b1:b1:7c:5c:01:1f:00:38: 65:5b:c4:c6:09:ba:fa:f9:12:10:80:d9:c9:0d:70: 6d:0b:85:ba:f7:3b:58:25:b6:84:b8:aa:70:e9:0f: 70:ae:e6:83:7d:49:1c:ba:7b:c4:7a:41:c0:70:df: 98:05:80:96:0a:b6:e8:f2:b2:82:34:20:60:33:95: a6:6b:3a:41:40:4e:62:6c:b5:b5:cc:de:7f:1a:b8: 9b:cb:ae:e2:9f:9c:1b:9c:14:86:de:8c:28:ad:78: 47:f8:d4:ab:a5:b9:05:8f:a9:82:30:22:05:c9:b9: ee:7d:43:8d:ee:0a:d2:df:30:5b:4d:50:52:0e:f8: dd:4d:83:a8:17:fd:2e:b9:7c:2a:0c:c1:29:86:67: 62:bb:ad:e5:36:e2:cc:f2:62:4d:47:de:e2:93:53: 85:46:f0:a4:c8:82:0a:e1:93:b5:7c:27:59:1d:eb: c1:8e:b0:22:a6:ff:c2:13:e0:54:b6:c0:29:f1:02: c5:fc:68:91:08:48:e4:4b:e9:f9:79:48:d9:46:c0: fb:3c:fb:be:bd:6a:3f:84:0f:07:67:48:c7:4a:48: 44:14:2d:90:d3:e5:b4:d4:c9:38:86:8c:ca:7a:74: 7a:ab:74:46:ad:97:56:ec:ac:3e:a0:1f:ce:3c:77: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38199 134809 sbgp-ipAddrBlock: critical IPv4: 43.230.96.0/22 103.7.68.0/22 103.13.74.0/24 120.138.80.0/20 163.47.88.0/22 221.133.32.0/20 223.27.128.0/20 IPv6: 2001:df7:6400::/48 2402:9a00::/32 Signature Algorithm: sha256WithRSAEncryption 7c:f5:10:54:b7:25:1e:b8:1a:85:3a:e0:02:8b:b3:27:10:d2: c5:b4:74:87:50:a5:9a:94:27:6b:69:29:34:67:d7:ac:b4:b5: 4a:95:79:6a:a0:65:a0:36:ac:41:ba:c9:42:47:46:4e:9c:7b: 06:8c:9a:27:17:e7:3d:0b:09:66:75:80:c4:4e:ca:75:63:17: 6f:2a:01:0c:25:80:6f:c7:14:8d:17:fa:42:4f:b2:9e:30:24: 63:72:fe:69:30:ea:df:eb:57:ac:8b:13:45:29:b1:f0:1d:75: b5:e2:97:72:4a:71:21:00:d1:d3:3e:c8:c9:34:24:01:bb:bd: 55:7c:ab:15:17:b7:f3:f0:ae:3a:5e:fe:5f:33:c3:74:83:0c: 00:cc:f8:0c:1e:c7:94:9c:aa:2e:b0:96:62:29:21:73:95:8a: db:a4:e6:0d:ed:a1:5a:74:f4:62:9b:45:d6:b7:c1:32:61:ee: 91:8b:3a:72:d9:15:ee:df:41:ba:3b:58:30:19:c8:d5:f6:64: 19:cf:32:72:fa:fe:10:b7:5b:68:cd:44:5e:53:31:32:89:d6: 97:1f:6d:f5:df:54:fc:fe:63:d1:b1:c3:3a:7a:ab:bb:5f:19: 04:19:42:cd:58:56:01:9a:96:38:17:11:04:1c:ac:d1:62:6f: d4:87:b4:8d -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIDAoYnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNDEzMDQxNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAx RDY1QkI5QUM5NTVFRDg5RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+omIgfxqxsXxcAR8AOGVbxMYJuvr5EhCA2ckNcG0Lhbr3O1gltoS4qnDpD3Cu 5oN9SRy6e8R6QcBw35gFgJYKtujysoI0IGAzlaZrOkFATmJstbXM3n8auJvLruKf nBucFIbejCiteEf41KuluQWPqYIwIgXJue59Q43uCtLfMFtNUFIO+N1Ng6gX/S65 fCoMwSmGZ2K7reU24szyYk1H3uKTU4VG8KTIggrhk7V8J1kd68GOsCKm/8IT4FS2 wCnxAsX8aJEISORL6fl5SNlGwPs8+769aj+EDwdnSMdKSEQULZDT5bTUyTiGjMp6 dHqrdEatl1bsrD6gH848d3FlAgMBAAGjggNQMIIDTDAdBgNVHQ4EFgQUETYYsNQQ aCrAapAdZbuayVXtieAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU1MUQ3LzY4RjA5MjkyOUUyRjExRTlCMkU1MjgwQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1NTFENy82OEYwOTI5MjlFMkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05R UWFDckFhcEFkWmJ1YXlWWHRpZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJU3AgMCDpkwWwYIKwYBBQUHAQcBAf8ETDBKMDAEAgABMCoDBAIr5mAD BAJnB0QDBABnDUoDBAR4ilADBAKjL1gDBATdhSADBATfG4AwFgQCAAIwEAMHACAB DfdkAAMFACQCmgAwDQYJKoZIhvcNAQELBQADggEBAHz1EFS3JR64GoU64AKLsycQ 0sW0dIdQpZqUJ2tpKTRn16y0tUqVeWqgZaA2rEG6yUJHRk6cewaMmicX5z0LCWZ1 gMROynVjF28qAQwlgG/HFI0X+kJPsp4wJGNy/mkw6t/rV6yLE0UpsfAddbXil3JK cSEA0dM+yMk0JAG7vVV8qxUXt/Pwrjpe/l8zw3SDDADM+Awex5Scqi6wlmIpIXOV ituk5g3toVp09GKbRda3wTJh7pGLOnLZFe7fQbo7WDAZyNX2ZBnPMnL6/hC3W2jN RF5TMTKJ1pcfbfXfVPz+Y9Gxwzp6q7tfGQQZQs1YVgGaljgXEQQcrNFib9SHtI0= -----END CERTIFICATE-----Generated at Sun Jan 25 01:16:13 2026 by rpki-client