This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer (raw, json) Hash identifier: ZelF+QgABMK8m4xFRj9iHVNzryJesnZhY3dz3Tx/VIY= Subject key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028773 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft caRepository: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:09:37 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141427 IP: 103.158.248.0/23 IP: 2001:df5:6d80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165747 (0x28773) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 20 13:09:37 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:98:c8:38:91:b6:ce:ae:df:59:d8:fe:6d: d4:9e:b4:5c:43:13:74:5f:50:d0:5d:fc:96:6c:f6: 61:e1:a7:35:5f:80:cd:33:fd:ae:a0:8d:1d:eb:2e: a6:a7:bd:91:63:52:c8:c0:aa:ab:a0:29:2a:9d:d2: 07:07:ff:eb:2d:53:c6:f4:ba:d6:6a:dc:f1:55:ba: 37:06:40:ae:e1:9c:9b:f5:1a:52:5e:3e:0b:6e:14: a7:fb:39:f9:ad:3b:26:34:ee:90:66:2f:37:34:16: ce:8a:3d:4f:43:65:69:88:6e:76:6f:87:fe:06:a0: 1d:36:b4:e3:6f:5c:de:d3:1d:f9:01:e3:6e:07:c6: a1:e3:95:73:0b:77:35:3f:79:b3:82:2f:c2:3c:7f: dc:49:b7:f1:20:8c:12:dd:72:6c:47:25:0c:06:de: 64:14:5e:63:b6:01:4f:9f:2c:a6:e8:4c:6f:52:9d: 9a:77:ab:e0:f2:04:ca:3b:28:7c:80:ed:70:60:cc: c3:5e:e6:91:69:b4:3d:79:87:63:e1:b6:d5:2c:fc: d7:f6:aa:f4:47:40:35:7d:f6:1e:c9:25:a9:1b:55: 8a:5a:f5:79:a4:3e:3c:9d:ac:19:fe:1a:f0:85:6c: 10:21:0e:44:10:b6:03:df:7b:5c:23:c1:83:00:3e: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141427 sbgp-ipAddrBlock: critical IPv4: 103.158.248.0/23 IPv6: 2001:df5:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 93:78:95:a7:0c:a0:9e:a9:dc:aa:43:20:4a:45:06:2b:c7:78: e0:b3:73:9b:d9:f8:62:ea:50:19:81:c7:b8:4c:f9:e9:77:75: 08:b2:b7:e9:fd:a7:c9:36:45:08:38:ba:76:83:8b:cd:08:fc: 93:f7:fd:66:c4:29:51:bb:f2:52:ab:27:5f:31:79:85:b4:3f: bf:90:89:47:be:22:fb:c6:35:4e:98:0a:1d:58:6f:75:75:67: f4:f9:a2:98:42:fa:fb:13:f5:f7:bc:38:93:33:ce:81:8d:e7: 35:da:f1:d6:c3:01:59:ae:10:27:77:21:95:01:d1:16:b2:08: dc:0e:c1:8a:4b:b3:d2:1c:b2:a1:42:7d:bb:96:ec:94:11:e6: 71:b2:bb:a6:b3:52:df:8d:4e:bb:6e:6e:fc:76:e3:0a:2e:e7: b4:7d:38:02:1d:98:f8:36:1a:4a:60:c4:b6:aa:23:ad:ce:d5: 57:00:7f:40:2b:49:a7:92:33:26:ad:a6:66:7c:1f:24:ef:29: 5b:b6:ee:6b:6f:c5:46:41:28:45:9b:d4:66:da:38:b6:fc:25: 9d:e9:a6:21:8f:46:ea:97:e3:d3:3c:98:94:f9:6a:18:01:be: 72:71:c2:e3:38:6a:ea:f7:28:80:77:4c:c2:68:75:76:9e:7c: bf:5a:d1:13 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAodzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMDEzMDkzN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1 NkUxMEJDREZENzIzN0Q4RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+6ZjIOJG2zq7fWdj+bdSetFxDE3RfUNBd/JZs9mHhpzVfgM0z/a6gjR3rLqan vZFjUsjAqqugKSqd0gcH/+stU8b0utZq3PFVujcGQK7hnJv1GlJePgtuFKf7Ofmt OyY07pBmLzc0Fs6KPU9DZWmIbnZvh/4GoB02tONvXN7THfkB424HxqHjlXMLdzU/ ebOCL8I8f9xJt/EgjBLdcmxHJQwG3mQUXmO2AU+fLKboTG9SnZp3q+DyBMo7KHyA 7XBgzMNe5pFptD15h2PhttUs/Nf2qvRHQDV99h7JJakbVYpa9XmkPjydrBn+GvCF bBAhDkQQtgPfe1wjwYMAPjrvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUKHUp3CDK Ds6Vp6VW4QvN/XI32NgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYwMkVELzE2N0JDNjNDN0MxQjExRUI5RjNGM0M2NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NE S0RzNlZwNlZXNFF2Tl9YSTMyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAihzMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ574MA8EAgAC MAkDBwAgAQ31bYAwDQYJKoZIhvcNAQELBQADggEBAJN4lacMoJ6p3KpDIEpFBivH eOCzc5vZ+GLqUBmBx7hM+el3dQiyt+n9p8k2RQg4unaDi80I/JP3/WbEKVG78lKr J18xeYW0P7+QiUe+IvvGNU6YCh1Yb3V1Z/T5ophC+vsT9fe8OJMzzoGN5zXa8dbD AVmuECd3IZUB0RayCNwOwYpLs9IcsqFCfbuW7JQR5nGyu6azUt+NTrtubvx24wou 57R9OAIdmPg2GkpgxLaqI63O1VcAf0ArSaeSMyatpmZ8HyTvKVu27mtvxUZBKEWb 1GbaOLb8JZ3ppiGPRuqX49M8mJT5ahgBvnJxwuM4aur3KIB3TMJodXaefL9a0RM= -----END CERTIFICATE-----Generated at Sun Jan 25 04:31:57 2026 by rpki-client