This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer (raw, json) Hash identifier: nsyS+0XbvwXEqns4UJU3wDzdgdjj4MxxIwklGmRWzKw= Subject key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028691 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 13:58:00 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138505 IP: 103.127.68.0/22 IP: 2404:19c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165521 (0x28691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 13:58:00 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:1f:1e:56:27:2f:6a:8f:a5:16:fa:e0:b5: 18:cb:b9:56:48:b8:a5:fd:b1:82:fd:c5:ac:ad:73: ba:5a:ad:c1:32:72:6d:fd:a4:19:3d:fd:aa:5e:ed: c7:dc:45:da:5f:d2:65:32:5e:66:d6:65:91:3c:d1: f2:de:1e:d8:95:41:f1:85:2b:95:b8:81:cb:1e:5e: 74:45:ef:68:6d:e4:b6:e2:7d:89:99:18:6b:9e:ce: 00:ed:2e:22:90:1c:4d:f5:4f:a7:2b:78:06:b3:6a: 5d:f8:38:8f:7f:4a:b7:4b:2d:1f:15:47:15:bf:62: 95:a8:14:af:81:d3:70:4f:81:28:22:13:f1:47:06: 96:28:5e:84:95:d8:39:23:94:95:9a:34:1b:03:6b: 24:70:52:14:3c:06:2e:55:4e:cd:cd:29:51:42:02: 9a:89:c8:e7:b6:d5:26:e3:46:c9:b3:c2:72:89:83: 8b:49:b2:b9:c1:39:dc:62:98:ee:9e:56:d0:8c:af: 90:4f:ff:88:51:b8:5e:89:94:29:41:20:fb:c2:f5: 1d:f1:c1:2e:70:10:ca:87:bb:44:e7:03:0a:87:54: 6a:89:93:ef:02:38:85:08:65:24:3e:4d:a9:16:a8: f5:15:f1:51:af:61:90:6f:d5:b0:24:28:3f:84:d4: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138505 sbgp-ipAddrBlock: critical IPv4: 103.127.68.0/22 IPv6: 2404:19c0::/32 Signature Algorithm: sha256WithRSAEncryption ba:ef:d3:a8:d8:23:03:d9:c9:57:b8:03:01:47:de:a4:38:ab: a3:8c:f9:e3:ab:37:94:d4:e4:16:21:5a:59:df:36:fe:23:7a: 8a:a5:27:8a:af:c0:f2:4a:93:1f:42:13:a1:17:90:2f:a3:0c: 52:de:b3:e0:1a:b6:6e:34:68:c5:40:47:59:d9:d5:3b:73:0a: a7:ff:48:93:73:e0:42:78:ee:3c:f7:8a:c7:00:fb:b2:0c:e4: 33:dd:c5:4b:b7:9b:94:19:75:8e:c0:d6:26:be:a0:84:63:0b: 63:b9:ce:1c:cb:90:c9:4d:4e:a4:c6:e3:13:99:96:0b:60:e5: dc:43:e0:0a:eb:9e:44:13:da:9d:09:12:2b:e9:b6:f9:a9:fc: e8:16:ee:bf:5b:7f:50:b1:b4:60:3b:93:20:c4:fa:bd:c8:87: 61:91:74:28:22:40:89:0c:a6:b3:36:ea:38:7f:2b:c2:78:d2: b1:62:4f:b2:98:c0:55:54:9e:8a:ea:99:36:94:ae:9f:32:b8: b1:70:5d:1b:f7:fd:ac:92:af:8f:23:3c:f2:c1:c6:34:01:41: 58:76:66:35:3b:8b:ff:97:19:f2:8d:5c:f6:36:09:0b:35:91: bc:a1:53:5c:04:27:72:d1:ce:31:cd:6e:18:18:27:2a:a1:1c: 3b:3b:2e:43 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoaRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTEzNTgwMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkx OTFEQzJDNjk4MjkyNkU4QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEzh8eVicvao+lFvrgtRjLuVZIuKX9sYL9xaytc7parcEycm39pBk9/ape7cfc Rdpf0mUyXmbWZZE80fLeHtiVQfGFK5W4gcseXnRF72ht5LbifYmZGGuezgDtLiKQ HE31T6creAazal34OI9/SrdLLR8VRxW/YpWoFK+B03BPgSgiE/FHBpYoXoSV2Dkj lJWaNBsDayRwUhQ8Bi5VTs3NKVFCApqJyOe21SbjRsmzwnKJg4tJsrnBOdximO6e VtCMr5BP/4hRuF6JlClBIPvC9R3xwS5wEMqHu0TnAwqHVGqJk+8COIUIZSQ+TakW qPUV8VGvYZBv1bAkKD+E1EkNAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUHYgsjPJD TMm7/XkZHcLGmCkm6KswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3MjdDLzlENzdDNkQ0MDI4RjExRTk5RDgxRjY0MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBK RFRNbTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh0JMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ39EMA0EAgAC MAcDBQAkBBnAMA0GCSqGSIb3DQEBCwUAA4IBAQC679Oo2CMD2clXuAMBR96kOKuj jPnjqzeU1OQWIVpZ3zb+I3qKpSeKr8DySpMfQhOhF5AvowxS3rPgGrZuNGjFQEdZ 2dU7cwqn/0iTc+BCeO4894rHAPuyDOQz3cVLt5uUGXWOwNYmvqCEYwtjuc4cy5DJ TU6kxuMTmZYLYOXcQ+AK655EE9qdCRIr6bb5qfzoFu6/W39QsbRgO5MgxPq9yIdh kXQoIkCJDKazNuo4fyvCeNKxYk+ymMBVVJ6K6pk2lK6fMrixcF0b9/2skq+PIzzy wcY0AUFYdmY1O4v/lxnyjVz2NgkLNZG8oVNcBCdy0c4xzW4YGCcqoRw7Oy5D -----END CERTIFICATE-----Generated at Sun Jan 25 06:07:54 2026 by rpki-client