This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer File: MfW8lHJxAkr0efYTZGbay_FDhsI.cer (raw, json) Hash identifier: QBLv1U8taqm34oxc7DucmzuV7bt35EcLHPlIGtDF/XY= Subject key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028741 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft caRepository: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 13:01:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 9519 IP: 103.215.88.0/22 IP: 144.48.244.0/22 IP: 203.82.96.0/20 IP: 203.188.216.0/21 IP: 2400:1900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165697 (0x28741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 13:01:18 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:24:14:9f:74:e5:62:9f:36:1f:b6:c1:32:15: 31:b1:9b:f7:4b:0f:18:2d:c8:a7:46:ab:9d:a9:e4: 3f:0f:15:03:6c:b3:84:b8:bc:ba:ee:5f:41:e3:c1: 96:5c:fc:b0:1f:90:f3:38:93:61:9a:64:d0:e8:2d: db:c4:e5:9b:3f:ba:99:5a:c8:ea:ee:8e:bb:9e:d3: 13:c9:0d:3d:e4:fe:c0:38:2d:91:27:9e:ab:18:05: ad:7f:79:61:57:16:20:e4:c6:fc:c7:13:b8:ba:f5: 68:7f:ef:cd:6a:eb:04:2a:9b:1a:50:de:be:7a:e1: 38:75:33:db:54:71:5f:2c:2a:26:c9:a8:aa:dc:a2: 6f:2d:a0:df:dd:9c:be:d5:26:7c:b2:1e:6c:29:fb: 76:4a:a3:c4:a2:fc:5c:cd:37:56:87:a9:f7:80:e3: 94:be:c9:cf:50:d3:2b:9e:a8:10:98:ff:f1:7d:22: d9:9f:5c:56:e7:34:7a:ab:8b:0b:d4:36:06:aa:b4: 50:ad:6e:0c:29:65:19:1e:81:26:13:93:0f:37:c8: 98:50:99:98:36:4f:39:9d:d8:2e:2f:06:a2:a9:04: 06:e6:e2:18:fb:4a:0d:8a:a4:b1:3b:53:9c:1c:28: e9:33:25:cf:9f:42:0e:3d:2f:e6:ec:2c:a1:a0:b6: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9519 sbgp-ipAddrBlock: critical IPv4: 103.215.88.0/22 144.48.244.0/22 203.82.96.0/20 203.188.216.0/21 IPv6: 2400:1900::/32 Signature Algorithm: sha256WithRSAEncryption 98:f4:1b:80:c5:1c:c9:bd:93:67:d4:bb:86:71:d6:fd:d7:77: 5c:d2:bf:ff:24:d1:d5:2c:a1:9c:07:80:d1:2d:7d:00:02:e8: 4f:8b:8f:ee:3f:3b:a1:f2:02:31:c4:a0:6e:da:1e:ec:b9:93: fb:1b:e3:1c:94:ad:58:66:c8:5f:2a:ea:ab:ba:a4:34:76:6e: 65:7d:d0:0c:25:b0:2b:1e:1f:28:4c:0c:14:8e:b7:5d:39:02: e7:a9:9b:d1:0c:bd:bc:24:fe:c6:8b:5c:e1:7f:6f:17:fd:39: cd:bc:9a:dd:60:8c:4f:aa:d9:e9:2d:e1:18:28:89:f0:ff:52: a0:45:fd:00:c6:19:dd:0b:dd:66:00:49:f7:a3:9f:99:36:b4: 8f:8e:80:1e:39:cd:91:17:e4:6a:e9:64:26:b3:fb:bc:28:36: 59:9c:fa:02:a0:2e:93:39:3e:b7:2e:ab:79:3c:d5:1a:92:a9: bf:8b:76:46:29:fe:54:7d:b2:99:81:82:a7:e0:68:93:ed:00: 72:08:ad:ce:00:e7:78:4b:9b:e6:58:44:15:32:fa:3a:ac:93: 66:a9:f2:00:61:24:49:64:15:0d:79:06:96:33:a1:de:46:23: 41:84:28:a0:7e:4c:04:1f:97:79:d9:a1:0a:d6:08:4e:36:dd: 93:6b:85:99 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAodBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTEzMDExOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYx MzY0NjZEQUNCRjE0Mzg2QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoJBSfdOVinzYftsEyFTGxm/dLDxgtyKdGq52p5D8PFQNss4S4vLruX0HjwZZc /LAfkPM4k2GaZNDoLdvE5Zs/uplayOrujrue0xPJDT3k/sA4LZEnnqsYBa1/eWFX FiDkxvzHE7i69Wh/781q6wQqmxpQ3r564Th1M9tUcV8sKibJqKrcom8toN/dnL7V JnyyHmwp+3ZKo8Si/FzNN1aHqfeA45S+yc9Q0yueqBCY//F9ItmfXFbnNHqriwvU NgaqtFCtbgwpZRkegSYTkw83yJhQmZg2Tzmd2C4vBqKpBAbm4hj7Sg2KpLE7U5wc KOkzJc+fQg49L+bsLKGgtnfdAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUMfW8lHJx Akr0efYTZGbay/FDhsIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRGNEFBL0U5RjJDQTQwMUQ4QTExRTI4MzREM0VFNTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhK eEFrcjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJS8wQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJn11gDBAKQMPQD BATLUmADBAPLvNgwDQQCAAIwBwMFACQAGQAwDQYJKoZIhvcNAQELBQADggEBAJj0 G4DFHMm9k2fUu4Zx1v3Xd1zSv/8k0dUsoZwHgNEtfQAC6E+Lj+4/O6HyAjHEoG7a Huy5k/sb4xyUrVhmyF8q6qu6pDR2bmV90AwlsCseHyhMDBSOt105Auepm9EMvbwk /saLXOF/bxf9Oc28mt1gjE+q2ekt4RgoifD/UqBF/QDGGd0L3WYASfejn5k2tI+O gB45zZEX5GrpZCaz+7woNlmc+gKgLpM5Prcuq3k81RqSqb+LdkYp/lR9spmBgqfg aJPtAHIIrc4A53hLm+ZYRBUy+jqsk2ap8gBhJElkFQ15BpYzod5GI0GEKKB+TAQf l3nZoQrWCE423ZNrhZk= -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:22 2026 by rpki-client