This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer (raw, json) Hash identifier: czu+Vkzq2xRLOkV+9p2VT0Rg+zdCNm/+vlxf5nX9EuY= Subject key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02879D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Jan 2026 23:57:53 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 4764 AS: 136943 IP: 61.245.128.0/19 IP: 103.94.48.0/22 IP: 119.18.0.0 -- 119.18.47.255 IP: 120.88.112.0/20 IP: 121.200.0.0/19 IP: 123.253.148.0/22 IP: 180.150.0.0/17 IP: 180.181.192.0/18 IP: 202.90.240.0/21 IP: 202.142.128.0/20 IP: 203.129.16.0/20 IP: 2403:5800::/27 IP: 2407:600::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165789 (0x2879d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 20 23:57:53 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:87:94:f7:78:5b:32:e7:0d:58:da:93:48:1d: 62:8f:ad:84:47:db:36:1a:52:3c:3d:9f:18:d3:c9: 9a:ef:44:1e:bf:e7:e2:4f:3f:f2:d3:13:14:3b:08: f9:50:56:31:a2:0a:a2:c8:d1:4a:5b:74:cd:9a:c3: 3c:4d:8d:bd:08:68:b9:b7:b3:28:ff:dc:bf:ec:61: 59:eb:35:e0:65:25:4a:d2:45:38:20:8a:f6:82:16: 54:24:19:52:c6:db:11:4e:f8:af:83:32:16:73:df: 1a:3c:38:66:10:6f:b9:e2:6e:f8:c5:59:e2:4c:6d: d5:12:3c:ee:51:45:1b:84:3e:a9:4b:63:e6:01:1e: 3f:1f:36:fa:ac:9e:bf:90:dd:41:47:b2:df:fa:f1: c2:d0:d5:0a:78:eb:78:9c:31:52:5a:5d:5f:66:ab: 83:4e:2f:ff:73:26:4d:b6:11:bd:1d:a6:f9:80:20: 95:ae:16:dc:57:b8:65:55:3f:80:e2:b3:7e:e4:41: e0:8d:04:3a:b9:38:06:32:52:34:94:6e:a7:d6:c7: 82:5f:ee:b7:8e:62:53:14:5e:1d:66:08:94:2f:95: 25:94:a7:ec:a3:b5:b6:5e:d5:4f:97:7f:0d:9a:83: d7:a9:1d:f7:1c:77:ce:45:14:df:c4:30:72:29:46: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4764 136943 sbgp-ipAddrBlock: critical IPv4: 61.245.128.0/19 103.94.48.0/22 119.18.0.0-119.18.47.255 120.88.112.0/20 121.200.0.0/19 123.253.148.0/22 180.150.0.0/17 180.181.192.0/18 202.90.240.0/21 202.142.128.0/20 203.129.16.0/20 IPv6: 2403:5800::/27 2407:600::/32 Signature Algorithm: sha256WithRSAEncryption 66:97:d8:84:c4:2c:76:a1:06:0e:7f:a8:d4:8a:eb:93:be:99: 71:a4:8d:cc:32:01:f8:4a:15:f7:56:e0:5b:06:b7:f8:86:6d: 7b:c0:ab:73:93:57:2a:6d:02:1a:88:3d:a6:e3:b7:2b:db:27: 80:29:0c:9e:59:ae:75:fc:5c:3e:7f:f7:37:b1:44:a5:93:66: 81:eb:dd:89:00:62:2a:5c:d8:b1:e8:aa:95:8d:54:00:a2:df: 6e:07:6d:19:bf:c7:88:c6:3c:f6:31:53:03:59:5f:9b:82:c5: 20:08:54:9c:4c:75:be:70:16:7e:d8:43:de:10:74:3b:77:89: 05:ac:78:ef:2f:e6:19:74:00:a8:ba:9c:72:fb:36:61:0a:0b: a4:ef:12:ef:1c:4f:41:74:a8:e6:3d:55:b5:ad:43:cc:17:93: 98:79:33:2e:be:b1:ca:0c:ee:5a:bb:28:30:26:f3:82:ae:42: 0b:bf:f4:80:4a:ab:9d:98:37:3c:d3:e7:f5:e2:12:3c:c1:75: af:35:ec:00:b7:fc:54:c4:43:9e:71:04:46:8d:93:8d:e1:1c: ae:0a:87:7b:a0:47:bf:c2:7f:27:3f:12:4f:9c:62:48:cc:4e: 76:ee:eb:80:a9:37:ee:a5:df:62:6a:7c:58:2b:77:96:c6:c3: 02:5d:63:66 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIDAoedMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMDIzNTc1M1oXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVC NkMwMjA0MDVBMjJDNjRCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWh5T3eFsy5w1Y2pNIHWKPrYRH2zYaUjw9nxjTyZrvRB6/5+JPP/LTExQ7CPlQ VjGiCqLI0UpbdM2awzxNjb0IaLm3syj/3L/sYVnrNeBlJUrSRTggivaCFlQkGVLG 2xFO+K+DMhZz3xo8OGYQb7nibvjFWeJMbdUSPO5RRRuEPqlLY+YBHj8fNvqsnr+Q 3UFHst/68cLQ1Qp463icMVJaXV9mq4NOL/9zJk22Eb0dpvmAIJWuFtxXuGVVP4Di s37kQeCNBDq5OAYyUjSUbqfWx4Jf7reOYlMUXh1mCJQvlSWUp+yjtbZe1U+Xfw2a g9epHfccd85FFN/EMHIpRkVDAgMBAAGjggNsMIIDaDAdBgNVHQ4EFgQUHE6fP4AF BaQLoWW2wCBAWiLGSzswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIxRkE4L0U4NjFGRDNBQUZEOTExRThCMkVENEM3RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRB RkJhUUxvV1cyd0NCQVdpTEdTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICEpwCAwIW7zB4BggrBgEFBQcBBwEB/wRpMGcwTwQCAAEwSQMEBT31gAME AmdeMDALAwMBdxIDBAR3EiADBAR4WHADBAV5yAADBAJ7/ZQDBAe0lgADBAa0tcAD BAPKWvADBATKjoADBATLgRAwFAQCAAIwDgMFBSQDWAADBQAkBwYAMA0GCSqGSIb3 DQEBCwUAA4IBAQBml9iExCx2oQYOf6jUiuuTvplxpI3MMgH4ShX3VuBbBrf4hm17 wKtzk1cqbQIaiD2m47cr2yeAKQyeWa51/Fw+f/c3sUSlk2aB692JAGIqXNix6KqV jVQAot9uB20Zv8eIxjz2MVMDWV+bgsUgCFScTHW+cBZ+2EPeEHQ7d4kFrHjvL+YZ dACoupxy+zZhCguk7xLvHE9BdKjmPVW1rUPMF5OYeTMuvrHKDO5auygwJvOCrkIL v/SASqudmDc80+f14hI8wXWvNewAt/xUxEOecQRGjZON4RyuCod7oEe/wn8nPxJP nGJIzE527uuAqTfupd9ianxYK3eWxsMCXWNm -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:29 2026 by rpki-client