This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer File: KncXIyWXseQO6_FQ58uUIvRdim0.cer (raw, json) Hash identifier: xM1Y7amIUweRDfGvrRhZTgmxcYkE8YICnVX6/M18fG4= Subject key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0287AC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft caRepository: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 06:18:33 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 142194 IP: 2001:df6:9440::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165804 (0x287ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 21 06:18:33 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:8f:4a:08:6f:87:df:9b:db:14:b2:ed:aa: 2f:d8:9a:19:18:ea:3d:ea:a8:56:93:58:e4:84:96: 73:d8:ca:f6:0d:b4:c7:17:57:3f:a2:da:7c:a0:69: a6:5d:b0:39:20:d4:0e:c2:24:24:de:a0:f4:80:2f: 45:5b:ab:c4:64:1f:2c:20:da:52:bf:af:04:43:ed: 3b:a5:15:a3:b8:f2:50:b5:ef:5c:d9:76:8e:27:71: 5d:21:5a:17:67:45:1c:83:13:0d:3b:d8:d7:1a:34: f2:59:d0:78:6b:82:05:86:6d:5e:0c:ff:21:ab:77: f2:10:a7:fc:9a:4e:6c:ba:6c:0b:2b:59:5e:bb:81: f0:83:21:fc:7b:35:f1:a1:69:d1:c1:6f:1d:da:0c: a5:e6:c2:70:11:4f:62:47:cd:1c:2b:9d:4f:85:85: 55:b0:2a:54:e1:a0:2d:d1:24:65:1f:8a:e4:a9:83: 52:3c:59:02:14:75:da:22:f9:a6:6e:ba:5d:fd:26: b2:33:15:4a:70:87:7f:bd:b9:97:ef:96:d7:53:bd: 6a:8f:af:62:d9:00:21:b6:83:d1:ef:de:16:f9:f8: bc:75:c1:8e:ee:29:10:e4:03:1e:6e:6f:e7:f5:fa: 18:e8:99:a4:e2:03:de:03:f5:f7:ed:77:fb:80:dc: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142194 sbgp-ipAddrBlock: critical IPv6: 2001:df6:9440::/48 Signature Algorithm: sha256WithRSAEncryption 0a:72:f4:d4:ef:49:ae:cd:1d:07:23:a9:fd:43:67:63:c1:a0: b0:16:79:f3:52:99:f4:25:fa:0f:11:67:75:47:03:0a:f2:f2: f2:aa:e7:b2:dd:5a:7f:de:11:36:f0:7b:7c:58:2d:bf:cb:46: e1:54:1e:c0:41:d9:09:11:60:05:9f:cf:75:98:7e:51:c9:b4: 32:13:62:31:88:42:fd:6a:d7:6e:fc:e6:2e:c1:e7:b3:88:3b: 03:17:d3:e5:08:1f:50:65:77:30:63:a1:a4:93:cb:9b:34:a3: db:36:73:01:da:8b:11:cb:c4:8b:cd:e8:82:4a:60:f9:52:86: 89:94:c7:2e:4d:09:47:de:8d:dc:7f:55:c3:41:51:81:e2:31: c4:09:35:3d:9b:ec:31:2e:ae:b5:b0:f3:d0:ba:50:67:9b:23: 25:1a:3d:0f:0e:88:91:00:54:f1:7e:24:e2:36:94:08:69:a7: e4:8d:99:bf:84:20:6c:b7:b2:f0:73:7a:db:57:81:fc:06:c1: c2:d2:2e:60:c3:5e:b8:9f:0d:d4:42:5c:de:c3:92:cb:3d:bb: 84:5f:73:12:4a:ad:a8:2f:60:52:04:82:99:fe:12:80:c0:19: 1c:da:7f:18:ce:75:dd:a1:33:a0:43:41:51:c4:9a:44:25:06: c3:98:9e:81 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoesMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMTA2MTgzM1oXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxM0U1RjkxMTAvBgNVBAUTKDJBNzcxNzIzMjU5N0IxRTQwRUVCRjE1 MEU3Q0I5NDIyRjQ1RDhBNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsrI9KCG+H35vbFLLtqi/YmhkY6j3qqFaTWOSElnPYyvYNtMcXVz+i2nygaaZd sDkg1A7CJCTeoPSAL0Vbq8RkHywg2lK/rwRD7TulFaO48lC171zZdo4ncV0hWhdn RRyDEw072NcaNPJZ0HhrggWGbV4M/yGrd/IQp/yaTmy6bAsrWV67gfCDIfx7NfGh adHBbx3aDKXmwnART2JHzRwrnU+FhVWwKlThoC3RJGUfiuSpg1I8WQIUddoi+aZu ul39JrIzFUpwh3+9uZfvltdTvWqPr2LZACG2g9Hv3hb5+Lx1wY7uKRDkAx5ub+f1 +hjomaTiA94D9fftd/uA3DSXAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUKncXIyWX seQO6/FQ58uUIvRdim0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNFNUY5LzAwNkJBMzQ0RjY5MTExRjBBRTI3ODg1MjNBNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzRTVGOS8wMDZCQTM0NEY2OTExMUYwQUUyNzg4NTIzQTZGNTZCQy9LbmNYSXlX WHNlUU82X0ZRNTh1VUl2UmRpbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAityMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9pRAMA0G CSqGSIb3DQEBCwUAA4IBAQAKcvTU70muzR0HI6n9Q2djwaCwFnnzUpn0JfoPEWd1 RwMK8vLyquey3Vp/3hE28Ht8WC2/y0bhVB7AQdkJEWAFn891mH5RybQyE2IxiEL9 atdu/OYuweeziDsDF9PlCB9QZXcwY6Gkk8ubNKPbNnMB2osRy8SLzeiCSmD5UoaJ lMcuTQlH3o3cf1XDQVGB4jHECTU9m+wxLq61sPPQulBnmyMlGj0PDoiRAFTxfiTi NpQIaafkjZm/hCBst7Lwc3rbV4H8BsHC0i5gw164nw3UQlzew5LLPbuEX3MSSq2o L2BSBIKZ/hKAwBkc2n8YznXdoTOgQ0FRxJpEJQbDmJ6B -----END CERTIFICATE-----Generated at Sun Jan 25 04:15:40 2026 by rpki-client