This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer File: Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer (raw, json) Hash identifier: pmf6Xtcwygrqcr+6h6PGjcZ+5iFDVZrxi87otFXDojA= Subject key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02856F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft caRepository: rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 10:17:57 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 38486 IP: 103.131.34.0/24 IP: 203.90.6.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165231 (0x2856f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 12 10:17:57 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:16:f6:23:66:8c:a2:2c:c1:1f:4f:a1:5b: 7f:d9:3a:e2:da:5e:ce:68:86:a5:43:d0:f7:97:a2: 8a:e4:a3:fa:9a:db:80:03:ef:ca:3a:72:84:29:89: 98:17:fe:69:5e:e9:fc:5f:91:16:59:d9:92:65:36: 35:94:c2:b6:dd:68:c2:ec:8f:ce:29:ed:8f:83:48: 64:6b:0f:b0:f6:c5:61:5a:f4:75:44:c0:b8:03:e7: e3:eb:b7:ff:c4:9a:99:73:c2:92:72:5b:b2:a6:b5: e0:82:be:cc:41:3b:6b:2b:0d:1f:71:01:f8:52:be: 8a:47:6d:f2:3f:e8:76:45:52:c8:70:91:aa:c3:75: a1:de:0b:1b:35:ba:93:64:27:99:d5:dd:f8:3d:44: 78:40:53:50:1a:1e:e8:52:a4:72:42:04:15:0c:22: bf:44:45:01:15:14:5e:d6:6f:27:57:00:62:da:a7: 41:05:90:f0:98:9c:bf:44:60:5b:da:e9:64:5f:1a: c1:91:45:8a:7f:d8:4b:2f:4d:01:aa:d1:fe:63:fc: 0d:b2:a6:c6:b6:a0:26:be:50:10:33:a4:9b:e1:fe: 1d:7a:ed:34:2e:99:11:83:27:53:2b:16:5a:fd:ae: e6:e0:e7:c1:6c:0d:2b:24:c4:b3:90:9f:48:d2:0c: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38486 sbgp-ipAddrBlock: critical IPv4: 103.131.34.0/24 203.90.6.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:bd:fe:37:90:77:d0:4c:ca:89:b0:df:e1:63:3a:a9:49:bc: fd:fa:6c:b1:64:49:95:80:d2:47:c4:16:30:a6:ae:01:5e:11: c7:b9:7b:89:30:c9:98:2e:54:d6:fa:ba:d4:7e:1a:98:06:f1: f7:e7:62:bb:a6:14:4f:85:b8:bc:71:50:ac:83:0b:6a:14:7c: 04:44:6b:1b:88:fb:85:44:6c:f8:95:aa:4c:63:18:3a:89:4c: 70:63:28:bb:e5:0e:d5:4d:7f:42:ad:bf:48:7d:6d:55:f8:02: 70:6a:6c:ca:b8:6e:3f:43:b1:1e:b9:6b:fc:7c:48:d4:ff:0a: 22:61:4d:a0:41:63:b4:d0:3b:f5:c6:6f:22:84:9c:43:3b:e8: ba:32:67:6d:8c:d9:01:76:46:bd:3d:2c:22:95:5f:33:22:62: 44:cf:2c:4c:8e:3d:35:f1:e4:a8:f3:e6:14:d9:53:2c:00:ca: de:3e:bb:78:41:b5:59:f6:22:35:07:42:27:aa:8a:1a:be:0c: ad:98:c6:09:8a:36:1b:77:0d:4f:62:56:81:22:00:12:ef:fb: 73:8b:e1:1b:4b:21:ab:68:82:d5:5e:2f:39:de:c6:35:72:c9: 4e:8e:8f:53:03:ae:f3:7f:25:70:83:65:90:09:62:80:36:11: 55:19:c8:51 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoVvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMjEwMTc1N1oXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMzI3MEYxMTAvBgNVBAUTKDMxQkZDMTM3M0ZCMzdDMTM5QTJFRTdD M0E5NkRGRUM0RTdFMzc5MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLSxb2I2aMoizBH0+hW3/ZOuLaXs5ohqVD0PeXoorko/qa24AD78o6coQpiZgX /mle6fxfkRZZ2ZJlNjWUwrbdaMLsj84p7Y+DSGRrD7D2xWFa9HVEwLgD5+Prt//E mplzwpJyW7KmteCCvsxBO2srDR9xAfhSvopHbfI/6HZFUshwkarDdaHeCxs1upNk J5nV3fg9RHhAU1AaHuhSpHJCBBUMIr9ERQEVFF7WbydXAGLap0EFkPCYnL9EYFva 6WRfGsGRRYp/2EsvTQGq0f5j/A2ypsa2oCa+UBAzpJvh/h167TQumRGDJ1MrFlr9 rubg58FsDSskxLOQn0jSDJlhAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUMb/BNz+z fBOaLufDqW3+xOfjeR0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMyNzBGL0Y0QTM2RjYyRUY5RjExRjBCOEQ1QjNFRjY4NkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMjcwRi9GNEEzNkY2MkVGOUYxMUYwQjhENUIzRUY2ODZGNTZCQy9NYl9CTnot emZCT2FMdWZEcVczLXhPZmplUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJZWMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ4MiAwQBy1oG MA0GCSqGSIb3DQEBCwUAA4IBAQBdvf43kHfQTMqJsN/hYzqpSbz9+myxZEmVgNJH xBYwpq4BXhHHuXuJMMmYLlTW+rrUfhqYBvH352K7phRPhbi8cVCsgwtqFHwERGsb iPuFRGz4lapMYxg6iUxwYyi75Q7VTX9Crb9IfW1V+AJwamzKuG4/Q7EeuWv8fEjU /woiYU2gQWO00Dv1xm8ihJxDO+i6MmdtjNkBdka9PSwilV8zImJEzyxMjj018eSo 8+YU2VMsAMrePrt4QbVZ9iI1B0InqooavgytmMYJijYbdw1PYlaBIgAS7/tzi+Eb SyGraILVXi853sY1cslOjo9TA67zfyVwg2WQCWKANhFVGchR -----END CERTIFICATE-----Generated at Sun Jan 25 01:11:47 2026 by rpki-client