This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer File: IwN4FncHnC-7R0lkDwZXociO20Q.cer (raw, json) Hash identifier: nqy+HAYLqW6QqXGZ6imR9/0UMLfM5bh6Ih/CrEWWGWY= Subject key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028735 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:29:27 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 142268 IP: 2001:df4:a740::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165685 (0x28735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 12:29:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:37:aa:5f:13:bc:6d:46:86:7c:b3:80:bb: d7:c2:7f:d2:67:6f:67:0e:55:10:fb:63:ed:ed:21: 48:f0:ab:60:2e:55:1c:d5:42:d2:5b:39:55:9d:89: 7b:3b:5b:e2:ab:0f:1a:14:ea:2f:15:2a:17:06:38: 99:7b:2a:3b:c5:7a:59:df:f2:1e:c9:0f:e1:57:4e: 2c:a7:98:36:e6:11:80:22:82:59:5a:f8:85:b7:63: 4d:7d:4f:55:65:24:c4:91:e7:8a:f8:ec:43:6f:f1: 7f:8c:82:de:cc:8d:c8:53:93:07:dd:0c:44:47:b4: c7:27:2a:be:d1:41:01:70:9b:59:cc:14:a1:e6:75: 0d:17:e1:d5:f9:e4:10:2a:81:a4:a5:e5:1a:1a:f6: 85:cc:db:44:ba:ad:9d:72:49:c5:11:d7:80:cd:64: 0a:bc:82:1b:15:1b:f0:db:9d:6b:18:56:0d:4f:65: b4:f9:ad:d8:8b:e8:cd:b9:59:31:39:c4:3b:c5:c3: 02:9a:07:6a:91:46:6a:f2:79:b5:67:b9:d9:6e:ec: 67:e0:e6:1d:79:f6:66:60:e8:38:12:49:bd:f6:92: 13:e4:00:e4:fb:bc:2c:a7:6c:61:33:52:28:69:4e: cd:52:fa:cb:0b:f4:98:10:98:a1:3b:bd:95:73:86: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142268 sbgp-ipAddrBlock: critical IPv6: 2001:df4:a740::/48 Signature Algorithm: sha256WithRSAEncryption 4b:c7:48:e4:25:3c:a4:26:f9:60:b2:45:98:73:21:41:0c:d2: ae:c5:66:88:24:b7:37:eb:e1:a7:71:20:d9:67:20:22:6d:f9: 73:ea:5e:6a:b5:c6:d8:08:99:11:a5:0d:cf:fd:4c:8f:23:0f: 1b:41:3d:08:aa:ec:47:20:51:f8:48:9a:be:d5:17:ff:a5:d9: 69:7c:f7:4d:e5:38:9c:c4:61:ec:39:f7:3b:92:73:68:b8:95: 16:10:90:16:70:0e:f5:11:9e:64:fe:a5:8c:0a:1f:35:cd:99: 8d:1f:b5:d3:fc:e1:f2:2e:54:03:80:38:3d:d6:fa:b2:7c:fc: ba:d4:2b:b6:a1:9c:e1:54:e9:f1:32:fa:55:cd:20:80:a8:f4: 97:d7:1b:1b:9a:2c:70:e9:e2:ba:b8:0c:c4:27:df:9c:d1:ee: 4a:5e:07:04:63:ae:68:2b:67:e2:cd:87:c5:85:2b:c3:17:40: 13:64:ed:b6:c4:f7:1f:86:2c:c1:d0:5e:12:67:5d:6e:19:cd: 9a:97:62:6e:f2:95:66:e5:d0:e7:f9:a3:ef:75:0d:02:0b:e2: 8e:9a:cc:5a:39:9f:ea:5f:96:3c:1d:54:a0:0f:5c:c1:ed:50: fe:7c:bf:4b:0b:2e:06:dc:62:f7:29:84:ff:f0:ae:f6:83:4b: 7d:27:75:3f -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoc1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTEyMjkyN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2 NDBGMDY1N0ExQzg4RURCNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCT+jeqXxO8bUaGfLOAu9fCf9Jnb2cOVRD7Y+3tIUjwq2AuVRzVQtJbOVWdiXs7 W+KrDxoU6i8VKhcGOJl7KjvFelnf8h7JD+FXTiynmDbmEYAiglla+IW3Y019T1Vl JMSR54r47ENv8X+Mgt7MjchTkwfdDERHtMcnKr7RQQFwm1nMFKHmdQ0X4dX55BAq gaSl5Roa9oXM20S6rZ1yScUR14DNZAq8ghsVG/DbnWsYVg1PZbT5rdiL6M25WTE5 xDvFwwKaB2qRRmryebVnudlu7Gfg5h159mZg6DgSSb32khPkAOT7vCynbGEzUihp Ts1S+ssL9JgQmKE7vZVzhmGRAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUIwN4FncH nC+7R0lkDwZXociO20QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFFMEI0L0YyMjMxREU0QUYzODExRUZBMjBERDAxM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5j SG5DLTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiu8MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9KdAMA0G CSqGSIb3DQEBCwUAA4IBAQBLx0jkJTykJvlgskWYcyFBDNKuxWaIJLc36+GncSDZ ZyAibflz6l5qtcbYCJkRpQ3P/UyPIw8bQT0IquxHIFH4SJq+1Rf/pdlpfPdN5Tic xGHsOfc7knNouJUWEJAWcA71EZ5k/qWMCh81zZmNH7XT/OHyLlQDgDg91vqyfPy6 1Cu2oZzhVOnxMvpVzSCAqPSX1xsbmixw6eK6uAzEJ9+c0e5KXgcEY65oK2fizYfF hSvDF0ATZO22xPcfhizB0F4SZ11uGc2al2Ju8pVm5dDn+aPvdQ0CC+KOmsxaOZ/q X5Y8HVSgD1zB7VD+fL9LCy4G3GL3KYT/8K72g0t9J3U/ -----END CERTIFICATE-----Generated at Sun Jan 25 01:17:43 2026 by rpki-client