This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer (raw, json) Hash identifier: iRvrjXrQvsmPtWqdNd1+TIvz76QZlUktFFPuTOxuAfk= Subject key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0287E1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 22 Jan 2026 10:31:59 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 9313 IP: 110.36.232.0/23 IP: 120.29.0.0/19 IP: 121.50.192.0 -- 121.50.215.255 IP: 203.10.89.0/24 IP: 203.13.68.0/24 IP: 203.13.70.0/24 IP: 203.22.124.0/22 IP: 203.30.137.0/24 IP: 203.144.4.0 -- 203.144.31.255 IP: 2403:b000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165857 (0x287e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 22 10:31:59 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:b9:f8:a2:be:45:61:85:b7:26:55:9e:de: cc:78:b2:68:05:3a:f7:66:5a:c3:68:0e:06:9b:07: b5:85:13:f0:31:92:2f:be:de:98:e2:4d:72:25:57: ea:d3:a7:b5:a9:67:05:38:ed:d8:e0:78:a5:59:e0: c7:d9:75:97:58:21:b0:5d:b1:86:a7:43:e3:87:89: 9e:38:de:0c:a7:09:d1:20:65:40:95:37:da:76:51: 84:df:7a:e2:54:03:aa:07:29:d0:ac:bd:28:55:32: 3f:2f:4a:d8:32:6a:61:e8:c3:2c:f8:14:00:87:28: 90:b6:fb:b6:db:b2:8e:8b:a2:a3:26:2b:d7:39:de: 98:bb:e5:8d:1f:cb:06:fa:d0:1a:5a:1f:e3:4d:13: b9:e4:f4:6c:fe:f6:74:4f:cd:ce:6a:b2:3d:a3:fe: c8:e1:7c:8e:3c:d0:56:0f:f6:c5:29:1e:70:d5:b7: d2:a2:bd:b6:60:f4:98:4d:85:70:18:99:cd:aa:a3: a8:64:f2:7a:f7:5b:c4:ef:d3:e4:be:1f:77:32:72: ff:da:4a:6d:5a:aa:97:1d:01:fb:09:50:4e:27:6e: 29:38:02:9d:14:03:48:42:3b:3b:66:60:26:20:63: 38:ed:85:5f:25:ed:f8:9b:94:05:81:b9:d3:cf:0e: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9313 sbgp-ipAddrBlock: critical IPv4: 110.36.232.0/23 120.29.0.0/19 121.50.192.0-121.50.215.255 203.10.89.0/24 203.13.68.0/24 203.13.70.0/24 203.22.124.0/22 203.30.137.0/24 203.144.4.0-203.144.31.255 IPv6: 2403:b000::/32 Signature Algorithm: sha256WithRSAEncryption 02:e1:06:4f:ae:00:15:ab:6c:17:68:34:a6:99:51:66:36:02: 46:99:ec:c1:7e:be:ec:e0:c0:fd:88:f6:9b:98:cc:10:7b:f0: 60:04:7b:ce:53:7b:59:cc:57:8c:fd:31:80:2a:f4:50:c9:92: 53:6e:35:6f:e5:7e:fb:aa:f3:3e:75:26:5a:05:30:86:61:b7: 9a:f3:09:bb:47:01:ad:9f:be:66:bf:36:dd:4b:5a:ee:e1:2f: 8d:90:e5:e2:eb:d4:7c:9b:d7:21:80:e6:eb:8b:22:51:69:e7: d0:cf:d1:3a:22:aa:1f:e8:90:bc:85:1c:2c:f1:ff:22:86:70: 8d:af:70:c4:59:68:6d:a1:f2:3c:ba:91:35:3e:9a:c2:88:a5: 7a:6a:46:ae:32:61:9a:a4:cd:b1:a4:51:07:cd:07:be:4d:68: c5:c2:a5:9a:d8:92:91:11:58:25:4b:b5:85:82:7e:89:ca:b7: 36:0d:05:92:b1:68:2a:a0:fa:60:59:5b:ce:41:17:a7:b8:bd: cb:23:e9:74:eb:1c:24:a5:dc:c3:87:86:93:d2:1a:74:0d:9d: f9:ea:15:e6:c0:0a:c6:4d:69:23:5a:2f:a7:e1:01:5c:e2:97: d6:68:83:ec:01:0d:41:04:e0:1d:85:9f:87:50:a6:ae:60:9a: a1:fd:52:57 -----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgIDAofhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMjEwMzE1OVoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3 NTY4MTk3NjA4ODFCN0NEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDATbn4or5FYYW3JlWe3sx4smgFOvdmWsNoDgabB7WFE/Axki++3pjiTXIlV+rT p7WpZwU47djgeKVZ4MfZdZdYIbBdsYanQ+OHiZ443gynCdEgZUCVN9p2UYTfeuJU A6oHKdCsvShVMj8vStgyamHowyz4FACHKJC2+7bbso6LoqMmK9c53pi75Y0fywb6 0BpaH+NNE7nk9Gz+9nRPzc5qsj2j/sjhfI480FYP9sUpHnDVt9KivbZg9JhNhXAY mc2qo6hk8nr3W8Tv0+S+H3cycv/aSm1aqpcdAfsJUE4nbik4Ap0UA0hCOztmYCYg YzjthV8l7fiblAWBudPPDnZLAgMBAAGjggNdMIIDWTAdBgNVHQ4EFgQUMmNx45mC T4AE7ZZ1aBl2CIG3zZYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNCRjQ3LzM3MENBMkMwMUQ4QTExRTJCNzlCMTNFNDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVt Q1Q0QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJGEwbgYIKwYBBQUHAQcBAf8EXzBdMEwEAgABMEYDBAFuJOgDBAV4HQAw DAMEBnkywAMEA3ky0AMEAMsKWQMEAMsNRAMEAMsNRgMEAssWfAMEAMseiTAMAwQC y5AEAwQFy5AAMA0EAgACMAcDBQAkA7AAMA0GCSqGSIb3DQEBCwUAA4IBAQAC4QZP rgAVq2wXaDSmmVFmNgJGmezBfr7s4MD9iPabmMwQe/BgBHvOU3tZzFeM/TGAKvRQ yZJTbjVv5X77qvM+dSZaBTCGYbea8wm7RwGtn75mvzbdS1ru4S+NkOXi69R8m9ch gObriyJRaefQz9E6Iqof6JC8hRws8f8ihnCNr3DEWWhtofI8upE1PprCiKV6akau MmGapM2xpFEHzQe+TWjFwqWa2JKREVglS7WFgn6Jyrc2DQWSsWgqoPpgWVvOQRen uL3LI+l06xwkpdzDh4aT0hp0DZ356hXmwArGTWkjWi+n4QFc4pfWaIPsAQ1BBOAd hZ+HUKauYJqh/VJX -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:16 2026 by rpki-client