This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer (raw, json) Hash identifier: P4VZpKiZfwC/rO78pjnLBuHLEsOJrkTRsVI/uisCdAY= Subject key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02834F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:26:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134498 IP: 103.161.58.0/24 IP: 2001:df5:b980::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164687 (0x2834f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 14:26:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:30:14:54:0d:61:ba:cd:a6:6f:c8:f1:b8: ee:fe:a1:44:5a:d4:7b:0d:31:0d:c9:74:f1:e9:d1: f1:27:6e:dd:97:68:fe:0b:32:28:6c:30:39:5b:3e: 1e:c5:56:73:05:d4:57:98:46:1a:65:64:dc:5b:6f: ab:8f:b5:84:4e:87:3b:a6:43:bd:31:39:21:d1:88: 8e:7f:6d:f7:35:3b:11:f6:7a:a3:15:31:4d:65:bf: b1:9f:f0:b9:aa:c3:57:bf:b8:cc:f0:28:3f:7d:b8: 74:ef:4c:c0:bf:08:9d:a5:23:1f:cd:ae:37:3c:92: f4:99:67:8a:98:e6:04:4d:9f:d4:4b:8f:83:74:52: 0b:90:47:4b:1f:e3:19:2a:3a:0f:04:69:2b:b6:8e: a7:cd:95:7d:e1:9c:86:b5:3b:56:76:07:16:0c:ef: ee:cb:f1:c8:d1:95:f7:c9:d2:1c:b4:ad:38:89:1e: dc:cd:20:6c:cd:f4:f9:33:6f:5f:c0:95:bf:9c:b2: e1:cd:89:f3:d5:72:68:a6:1d:03:d3:96:31:49:b9: 6c:63:61:f1:7c:83:be:32:6b:4d:7b:e1:df:36:7e: b5:37:44:b0:99:b3:64:4d:88:eb:ba:1b:76:f1:56: 0c:cd:01:b4:56:fc:25:48:25:2a:ef:70:8e:32:38: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134498 sbgp-ipAddrBlock: critical IPv4: 103.161.58.0/24 IPv6: 2001:df5:b980::/48 Signature Algorithm: sha256WithRSAEncryption c1:34:02:b9:7b:e0:01:8e:47:d6:a5:3c:6c:84:bd:61:29:6f: 26:6a:cc:56:a0:31:d9:3f:e5:6d:73:bc:bc:14:54:a0:25:03: f3:eb:03:1b:46:f1:60:91:ca:68:49:ec:72:76:1c:a6:29:10: fa:e3:9b:a5:60:10:8d:a8:bd:0e:30:04:13:1f:04:7f:a5:21: 2c:e0:2d:a4:07:bc:38:ce:75:69:1a:e8:b0:9d:2e:2d:5b:91: b3:79:7d:fc:9d:0e:26:9d:ef:6b:4a:3c:7a:35:ba:2b:b9:94: a5:8e:0e:dd:9d:1c:f5:ef:1f:c6:95:99:99:a7:3c:4d:9d:26: 77:cd:16:1c:ea:8c:31:68:9e:7f:e9:e0:37:f0:86:f9:cb:47: a6:73:bd:fe:19:f2:33:e8:83:79:ab:27:33:05:a3:93:41:b2: db:c3:b8:94:f6:38:54:19:89:93:4a:9e:14:f2:5b:19:c5:ca: d3:05:49:27:b2:0c:40:80:34:66:0f:70:a3:a8:1a:29:d2:e4: ef:b9:69:48:8c:49:fc:7e:61:99:a6:da:44:05:f2:8a:80:a2: 1d:52:fc:d3:36:f0:78:be:73:5c:54:a0:bf:35:fa:10:6c:5c: 82:d7:67:82:c2:b6:13:cb:a2:c1:06:22:fa:a7:d8:88:ce:b4: e2:a9:e5:a8 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoNPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE0MjY0MloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODcz NzFCMDQxM0ZGNUY4MkU4MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe6zAUVA1hus2mb8jxuO7+oURa1HsNMQ3JdPHp0fEnbt2XaP4LMihsMDlbPh7F VnMF1FeYRhplZNxbb6uPtYROhzumQ70xOSHRiI5/bfc1OxH2eqMVMU1lv7Gf8Lmq w1e/uMzwKD99uHTvTMC/CJ2lIx/Nrjc8kvSZZ4qY5gRNn9RLj4N0UguQR0sf4xkq Og8EaSu2jqfNlX3hnIa1O1Z2BxYM7+7L8cjRlffJ0hy0rTiJHtzNIGzN9Pkzb1/A lb+csuHNifPVcmimHQPTljFJuWxjYfF8g74ya0174d82frU3RLCZs2RNiOu6G3bx VgzNAbRW/CVIJSrvcI4yOJ9bAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJFIYHLEI rxH0Yoc3GwQT/1+C6C4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4MzkyLzE0RDlFMzhBOTI4ODExRUJCQkQ0NTY3MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExF SXJ4SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg1iMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ6E6MA8EAgAC MAkDBwAgAQ31uYAwDQYJKoZIhvcNAQELBQADggEBAME0Arl74AGOR9alPGyEvWEp byZqzFagMdk/5W1zvLwUVKAlA/PrAxtG8WCRymhJ7HJ2HKYpEPrjm6VgEI2ovQ4w BBMfBH+lISzgLaQHvDjOdWka6LCdLi1bkbN5ffydDiad72tKPHo1uiu5lKWODt2d HPXvH8aVmZmnPE2dJnfNFhzqjDFonn/p4DfwhvnLR6Zzvf4Z8jPog3mrJzMFo5NB stvDuJT2OFQZiZNKnhTyWxnFytMFSSeyDECANGYPcKOoGinS5O+5aUiMSfx+YZmm 2kQF8oqAoh1S/NM28Hi+c1xUoL81+hBsXILXZ4LCthPLosEGIvqn2IjOtOKp5ag= -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:12 2026 by rpki-client