This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer (raw, json) Hash identifier: vdaZMDPUqKHpUcPN0tEwEKa/HDRo0kUQPuXAuYkcaqE= Subject key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281EF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 14:12:51 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137029 IP: 103.102.136.0/22 IP: 2401:e3c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164335 (0x281ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 14:12:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:61:c7:ae:34:73:e5:50:0a:c8:87:65:5e: 6f:c2:ca:a8:70:65:90:15:79:94:26:2a:68:80:7f: c5:2d:ce:7f:1f:34:29:8d:a5:dc:66:b1:ec:66:4b: 53:af:04:60:bc:97:16:83:5d:09:f6:47:66:99:ac: 81:33:6a:3a:48:d0:a3:e2:b8:6d:5c:13:3e:a5:ae: 6f:59:87:84:73:5b:04:19:2d:4d:68:f7:df:1b:55: fe:aa:9c:43:5b:97:57:8b:bc:26:36:42:b3:89:e9: 00:7e:e7:d1:90:df:cb:bd:e1:f7:c8:1a:98:b1:c7: a0:73:a4:1b:5d:c5:c9:c9:df:2b:d9:04:9e:94:18: 13:1e:b1:6c:bc:c8:79:e6:cd:41:5d:3b:1d:79:d6: bd:42:2e:a3:4a:ab:41:29:7e:92:f5:7d:1c:95:c6: f4:5e:8a:11:ce:24:49:d6:7e:fc:2f:5b:08:40:12: 06:2b:6c:c2:5b:71:cc:97:64:19:77:63:9f:39:92: 29:ac:08:29:61:41:a4:c0:32:aa:0e:05:04:27:2c: d8:45:d6:ed:53:70:1b:0a:c9:03:e1:3d:77:96:4a: 00:bf:78:1a:71:62:de:d8:05:22:9b:1e:a7:75:c4: 5d:f3:a7:5f:3f:96:f1:a3:7f:4a:5a:0c:ab:88:57: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137029 sbgp-ipAddrBlock: critical IPv4: 103.102.136.0/22 IPv6: 2401:e3c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:61:c7:b0:6f:f2:1e:a5:08:b3:ae:f7:d1:88:9f:a2:52:d6: 90:57:27:14:72:b3:b2:92:12:09:b3:27:13:af:88:e7:6c:59: 55:af:de:f1:54:40:78:88:14:a8:d0:0c:cb:ca:99:dc:f6:0b: a1:8a:31:d5:cb:84:9f:7b:b1:d1:93:97:ce:07:81:7d:50:6a: c9:82:d0:8a:32:47:5e:90:85:53:88:54:78:8f:61:ad:a9:a0: ca:db:59:92:c4:b3:f7:48:6c:30:71:3a:83:75:84:c1:b8:d5: 23:c4:c1:03:7c:d5:d6:d9:df:76:ef:0a:1a:03:29:3c:d1:eb: de:df:9b:0b:74:5c:8d:0a:c4:e7:b6:4a:8b:a3:9d:3a:ad:da: 28:2a:cc:fe:1a:9d:35:13:17:71:e4:4d:d1:d6:87:1a:e5:2b: bf:3d:f5:d7:25:e5:18:3b:02:18:18:99:73:f2:86:00:4a:54: 98:af:64:c2:77:25:4f:dc:55:d3:1f:f3:32:34:f7:87:57:17: a5:53:f0:15:43:8e:ce:f8:6b:95:46:c6:25:72:f0:67:db:d1: 61:f2:39:b2:31:82:6e:e7:4a:68:8e:33:f0:bb:87:67:57:91: 34:98:9d:eb:7e:67:b8:41:ce:05:a5:b0:0c:7d:27:5d:ed:d4: ec:16:c0:f1 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoHvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDE0MTI1MVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIy MTlGRjgyMTcyQjkwQkVFNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHQmHHrjRz5VAKyIdlXm/CyqhwZZAVeZQmKmiAf8Utzn8fNCmNpdxmsexmS1Ov BGC8lxaDXQn2R2aZrIEzajpI0KPiuG1cEz6lrm9Zh4RzWwQZLU1o998bVf6qnENb l1eLvCY2QrOJ6QB+59GQ38u94ffIGpixx6BzpBtdxcnJ3yvZBJ6UGBMesWy8yHnm zUFdOx151r1CLqNKq0EpfpL1fRyVxvReihHOJEnWfvwvWwhAEgYrbMJbccyXZBl3 Y585kimsCClhQaTAMqoOBQQnLNhF1u1TcBsKyQPhPXeWSgC/eBpxYt7YBSKbHqd1 xF3zp18/lvGjf0paDKuIVxJnAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUNy2TbjjY ucsfcBIhn/ghcrkL7lgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM5RDVEL0RENkYyODcyMEE4QjExRUFCQ0Y5Q0U1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDOUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpq WXVjc2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhdFMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2aIMA0EAgAC MAcDBQAkAePAMA0GCSqGSIb3DQEBCwUAA4IBAQACYcewb/IepQizrvfRiJ+iUtaQ VycUcrOykhIJsycTr4jnbFlVr97xVEB4iBSo0AzLypnc9guhijHVy4Sfe7HRk5fO B4F9UGrJgtCKMkdekIVTiFR4j2GtqaDK21mSxLP3SGwwcTqDdYTBuNUjxMEDfNXW 2d927woaAyk80eve35sLdFyNCsTntkqLo506rdooKsz+Gp01Exdx5E3R1oca5Su/ PfXXJeUYOwIYGJlz8oYASlSYr2TCdyVP3FXTH/MyNPeHVxelU/AVQ47O+GuVRsYl cvBn29Fh8jmyMYJu50pojjPwu4dnV5E0mJ3rfme4Qc4FpbAMfSdd7dTsFsDx -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:01 2026 by rpki-client