This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer (raw, json) Hash identifier: QS/j37XyUmVTzSV0odgXcVQLxXCAaYSmSymfX7RI5I8= Subject key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028725 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 04:06:38 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: AS: 138619 AS: 139779 IP: 103.134.202.0/23 IP: 2001:df6:7bc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165669 (0x28725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 04:06:38 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:70:24:de:33:0c:9c:8b:12:e1:87:59:12: cf:e7:55:23:f6:e3:45:0a:22:7a:14:e5:0b:ac:9d: 07:18:4e:98:e2:04:dd:7b:80:36:60:33:2f:84:23: ff:07:97:99:a8:86:7f:d1:de:a6:80:9d:b1:2c:1f: 46:17:af:6c:91:ce:1f:d0:05:95:8a:0e:a6:c3:3f: f7:fd:2a:4d:8b:99:b9:a7:7f:6b:7f:2f:d2:14:fe: 05:91:01:07:69:c2:3e:4e:a2:0c:75:b7:b6:18:09: 90:6f:ea:d4:87:91:3d:cf:e0:53:c6:9d:80:d3:6e: e1:ea:57:4f:7c:b9:c0:22:4d:b7:f3:84:cd:d5:66: 54:31:63:91:29:f3:27:80:50:97:47:7e:76:d5:96: df:8d:75:0a:41:e4:e2:2c:b1:e4:94:13:68:53:3a: ef:4d:e5:23:75:28:8a:e9:f8:0c:ae:43:93:9b:b2: 57:ce:fa:b4:44:62:da:ca:68:e9:a8:b1:0a:9e:c3: 21:e0:fc:cd:c5:e2:e9:d2:c8:cd:9d:02:57:28:57: 41:16:33:d3:db:fc:17:96:b3:28:5b:7f:cb:d5:cd: e0:a3:c3:79:92:c5:34:1d:e2:b9:03:6c:46:f4:1d: 50:79:92:24:76:3f:13:49:69:04:3d:db:6c:de:8a: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138619 139779 sbgp-ipAddrBlock: critical IPv4: 103.134.202.0/23 IPv6: 2001:df6:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 04:8c:0e:b2:4b:fd:58:12:15:73:52:60:d2:29:84:74:f7:45: e0:b1:0e:73:fe:5a:52:1d:84:d8:f2:3a:cd:26:ee:f3:c9:ff: f6:fc:ea:c7:89:51:32:01:a0:79:d4:65:65:fd:82:5f:3a:6b: 92:bb:c3:85:e0:13:60:65:39:3d:1b:53:99:ec:5f:82:ce:a7: d2:ef:c9:2b:af:92:93:f5:c6:83:c6:bd:c2:f5:e0:94:8f:5f: d6:9e:7c:3f:1d:35:00:87:b7:f6:99:ca:f8:26:23:47:44:36: 88:6e:69:e1:f6:fc:89:de:98:a7:16:1f:42:f0:0e:80:19:82: d0:35:a5:6e:86:d7:4a:13:4e:4f:af:ae:ff:65:52:13:ac:37: b8:e4:bc:95:25:42:40:f8:75:34:2b:60:1b:47:65:88:bc:7e: b6:31:f2:a8:64:64:30:8a:08:45:b6:66:98:af:da:92:d1:79: 62:d0:db:44:00:ae:03:a9:7e:e0:84:f6:d1:31:2f:6b:a6:fb: 6f:ea:ea:ff:0f:c5:0e:3d:22:5f:12:57:59:10:c6:0e:16:0e: 3c:36:47:f1:db:d9:27:05:14:44:1c:3f:ac:f5:79:25:0c:8e: a1:a6:a8:7e:09:74:e4:b6:c7:a0:e2:e6:3e:04:e8:6c:be:04: b4:19:ce:ed -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIDAoclMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTA0MDYzOFoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1 QjQwNkQ1OEFGRjc5RDFFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw0nAk3jMMnIsS4YdZEs/nVSP240UKInoU5QusnQcYTpjiBN17gDZgMy+EI/8H l5mohn/R3qaAnbEsH0YXr2yRzh/QBZWKDqbDP/f9Kk2Lmbmnf2t/L9IU/gWRAQdp wj5Oogx1t7YYCZBv6tSHkT3P4FPGnYDTbuHqV098ucAiTbfzhM3VZlQxY5Ep8yeA UJdHfnbVlt+NdQpB5OIsseSUE2hTOu9N5SN1KIrp+AyuQ5ObslfO+rREYtrKaOmo sQqewyHg/M3F4unSyM2dAlcoV0EWM9Pb/BeWsyhbf8vVzeCjw3mSxTQd4rkDbEb0 HVB5kiR2PxNJaQQ922zeimExAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUF4F8uCiS MbRwfp1bQG1Yr/edHgEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI1MDczLzQzRjE2MjY0MzM5NTExRTlCRkIxQzIxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNp U01iUndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAh17AgMCIgMwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnhsow DwQCAAIwCQMHACABDfZ7wDANBgkqhkiG9w0BAQsFAAOCAQEABIwOskv9WBIVc1Jg 0imEdPdF4LEOc/5aUh2E2PI6zSbu88n/9vzqx4lRMgGgedRlZf2CXzprkrvDheAT YGU5PRtTmexfgs6n0u/JK6+Sk/XGg8a9wvXglI9f1p58Px01AIe39pnK+CYjR0Q2 iG5p4fb8id6YpxYfQvAOgBmC0DWlbobXShNOT6+u/2VSE6w3uOS8lSVCQPh1NCtg G0dliLx+tjHyqGRkMIoIRbZmmK/aktF5YtDbRACuA6l+4IT20TEva6b7b+rq/w/F Dj0iXxJXWRDGDhYOPDZH8dvZJwUURBw/rPV5JQyOoaaofgl05LbHoOLmPgTobL4E tBnO7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:57 2026 by rpki-client