This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer (raw, json) Hash identifier: mSkAf0aEToZEX2kUQyRCk5VNVw2lNp4qiWeDi7d9QlA= Subject key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02846E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:45:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136162 IP: 103.82.128.0/22 IP: 125.62.64.0/22 IP: 2400:83c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164974 (0x2846e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 7 13:45:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:03:0b:09:5e:37:ee:a5:4f:8e:03:ac:c9: 95:f2:32:06:15:79:cf:82:5e:fa:5d:5c:8f:55:30: 57:97:d5:a8:bf:98:9a:a0:8c:17:b3:39:62:7b:d8: bc:48:5e:2b:b7:32:80:1b:55:0a:bf:06:57:18:a3: 28:18:50:68:70:a1:12:d5:09:de:0b:92:42:ce:d0: 68:92:bc:11:5b:fa:a6:17:c9:d1:ef:a9:3e:46:44: a3:dc:a5:bc:90:a2:c4:ae:76:9e:69:c0:7f:7c:22: 70:8c:ce:5f:c8:dd:80:d0:bc:1b:2c:f6:bd:99:53: 16:8e:d5:5b:20:45:ac:f2:e8:ab:3d:92:7b:aa:13: b0:75:5d:e2:77:45:e4:f7:00:65:0d:1a:98:73:05: 9d:67:44:49:3a:7e:8e:ac:24:38:2f:a8:4b:6d:55: 13:e2:d5:fb:68:16:25:37:3d:a1:12:3e:fd:e7:a1: 62:9d:7a:d8:39:43:96:37:0d:fb:10:0f:d7:2b:10: 61:f8:97:b4:3a:e1:2a:c1:31:f7:91:5a:75:cd:bb: 07:66:d0:b9:44:75:49:35:75:36:60:8d:27:ae:77: 9d:87:30:cb:d7:13:0a:0f:99:9b:fa:3a:68:d7:42: 5c:81:d2:6f:f5:48:cb:92:0d:b8:a3:1d:f0:64:ac: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136162 sbgp-ipAddrBlock: critical IPv4: 103.82.128.0/22 125.62.64.0/22 IPv6: 2400:83c0::/32 Signature Algorithm: sha256WithRSAEncryption 46:43:23:12:aa:20:bc:69:eb:09:5c:cb:e6:bf:b3:fd:2f:c2: fc:b8:9f:48:e4:e5:b9:31:0c:82:d1:4e:08:8c:86:2c:30:06: d5:c1:8c:54:14:c6:08:b9:ad:66:a3:0c:18:67:10:4e:55:1e: 31:48:03:bb:bd:26:32:24:59:c4:f5:6d:05:9e:da:68:b9:fe: c7:ab:47:e9:a5:8c:55:75:d9:60:d6:35:5e:bc:2d:86:91:f4: 46:23:d3:fb:05:0c:6c:d9:de:8c:35:c5:24:bc:44:45:1b:c0: 69:00:94:d1:4c:77:2c:f5:32:6c:0d:33:3e:49:05:a9:d3:27: 08:55:6f:c9:62:70:cb:34:a4:bb:33:b0:21:33:5a:13:a4:19: 61:a9:c9:4a:6e:a7:12:43:c0:c4:ee:7a:68:48:c3:bc:74:76: 3a:a1:52:41:f1:ee:d8:b2:88:fd:c1:29:7e:f9:46:4e:f1:e0: 02:f7:d0:d9:5e:31:d4:5c:b7:b4:3f:9b:90:f2:50:fa:0a:65: 27:ed:56:4e:b8:ae:5a:0e:e4:58:77:22:e3:a8:f9:f4:e4:e2: ca:23:0b:6f:69:7d:79:1e:24:8b:26:58:ef:a4:00:cc:bb:3e: c2:05:52:a1:4b:22:7c:aa:da:40:f1:2e:da:da:78:30:46:0c: 6c:d3:f2:86 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoRuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNzEzNDUyMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2 NTEzODFCREUxRkQwN0M1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa9QMLCV437qVPjgOsyZXyMgYVec+CXvpdXI9VMFeX1ai/mJqgjBezOWJ72LxI Xiu3MoAbVQq/BlcYoygYUGhwoRLVCd4LkkLO0GiSvBFb+qYXydHvqT5GRKPcpbyQ osSudp5pwH98InCMzl/I3YDQvBss9r2ZUxaO1VsgRazy6Ks9knuqE7B1XeJ3ReT3 AGUNGphzBZ1nREk6fo6sJDgvqEttVRPi1ftoFiU3PaESPv3noWKdetg5Q5Y3DfsQ D9crEGH4l7Q64SrBMfeRWnXNuwdm0LlEdUk1dTZgjSeud52HMMvXEwoPmZv6OmjX QlyB0m/1SMuSDbijHfBkrI4XAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUHt5cbgCA KLzSrjNlE4G94f0HxdQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlCRURCLzVEODY3RUJDMUY4MzExRTdCNTdFNjA1M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdD QUtMelNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhPiMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ1KAAwQCfT5A MA0EAgACMAcDBQAkAIPAMA0GCSqGSIb3DQEBCwUAA4IBAQBGQyMSqiC8aesJXMvm v7P9L8L8uJ9I5OW5MQyC0U4IjIYsMAbVwYxUFMYIua1mowwYZxBOVR4xSAO7vSYy JFnE9W0Fntpouf7Hq0fppYxVddlg1jVevC2GkfRGI9P7BQxs2d6MNcUkvERFG8Bp AJTRTHcs9TJsDTM+SQWp0ycIVW/JYnDLNKS7M7AhM1oTpBlhqclKbqcSQ8DE7npo SMO8dHY6oVJB8e7Ysoj9wSl++UZO8eAC99DZXjHUXLe0P5uQ8lD6CmUn7VZOuK5a DuRYdyLjqPn05OLKIwtvaX15HiSLJljvpADMuz7CBVKhSyJ8qtpA8S7a2ngwRgxs 0/KG -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:50 2026 by rpki-client