This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer (raw, json) Hash identifier: A3mlVRIE1XF0g8zmwMalAtkyk1XxVAgame/I0kabzow= Subject key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0280E1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 25 Dec 2025 13:09:25 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150452 IP: 103.46.184.0/23 IP: 2400:c620::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164065 (0x280e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 25 13:09:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:90:86:f0:ff:9f:e4:51:c4:89:a4:e4:9c: 40:7a:8a:b3:6a:ad:52:d3:66:6f:35:10:9b:ec:4a: 6a:aa:b0:14:92:ef:4f:4a:da:d9:0e:04:6b:85:34: e6:60:55:2b:a8:04:f4:02:f5:2e:ce:90:85:24:ff: 04:88:70:b9:f8:06:bc:98:5a:b1:eb:94:fe:3a:87: be:97:4a:ac:f1:53:07:4e:cb:32:b4:e1:35:bb:7c: a1:f5:4c:f1:93:1b:ce:56:25:cc:27:cd:bf:bd:30: 73:5a:1d:99:bf:67:a2:c3:f1:82:04:09:b7:9e:fb: f6:a9:6b:0c:ee:5b:ce:21:63:3b:5d:9c:0b:18:f2: bc:fa:e2:41:52:64:60:08:b4:74:16:58:00:f8:25: 40:a6:13:70:ce:e8:ed:80:56:86:2e:3d:c3:ff:bc: aa:39:b2:e5:8e:b2:00:65:dd:58:ea:e9:3c:ef:92: 7c:69:67:ac:eb:62:ce:58:ae:6e:f7:6f:5a:d7:76: e9:5f:3b:06:8b:37:d3:1c:95:5e:ce:b3:cb:c4:a6: 96:2c:13:57:e5:38:e2:f8:5a:fa:13:4d:85:ee:4d: 55:3e:35:66:4b:d3:d7:3f:7a:b9:d8:08:40:3d:c4: 8d:a5:7f:ab:fd:3a:40:46:e7:61:50:32:63:d6:2f: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150452 sbgp-ipAddrBlock: critical IPv4: 103.46.184.0/23 IPv6: 2400:c620::/32 Signature Algorithm: sha256WithRSAEncryption cf:47:c2:f8:5d:2c:06:88:85:d8:00:79:c0:92:fe:6d:39:2e: a2:f2:da:f8:55:06:c1:a1:9e:4f:ac:bb:21:ba:ce:62:a4:e1: 20:aa:49:8c:fc:74:3d:a0:44:d6:d1:b9:3d:4e:90:e7:21:94: f1:63:5f:47:ff:d4:2b:e9:db:27:3a:0b:68:d8:8a:d0:81:f1: 20:a8:f3:6e:9a:91:1a:a9:5a:a8:cb:43:5f:16:b6:2a:8e:3d: cd:95:40:e2:07:b7:6d:61:12:ff:ef:7d:64:a0:ab:c5:a3:09: 1b:c8:e7:cc:29:90:a8:9e:82:b1:3c:13:2c:2f:11:56:19:a6: 44:54:43:7e:f1:8b:d2:a6:60:37:54:03:f4:c1:eb:f7:65:55: 56:43:16:fe:72:08:f4:a6:5a:64:8a:dd:3b:13:20:cb:97:47: 55:2d:3e:d5:5a:de:5e:b8:f4:64:7b:3f:51:a4:d2:fa:6e:d1: 93:c3:17:92:4b:c0:fe:9e:b3:54:62:65:41:51:83:80:61:c4: c6:65:d5:5c:09:e1:7f:8d:e6:49:ab:cb:a4:30:93:64:16:b1: 68:79:70:6b:4b:d2:7a:7d:95:74:de:f8:49:6e:79:ed:9b:9b: 59:b9:f8:22:54:58:28:3e:57:77:69:b2:5b:7d:43:a0:33:63: 13:b8:fc:a1 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoDhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNTEzMDkyNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjEzQUIxMTAvBgNVBAUTKDM5MDFBRjRBOTNGRUZBQUVCODc5Q0M5 RjU5OTRFNEU3RjAxQUY4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+lJCG8P+f5FHEiaTknEB6irNqrVLTZm81EJvsSmqqsBSS709K2tkOBGuFNOZg VSuoBPQC9S7OkIUk/wSIcLn4BryYWrHrlP46h76XSqzxUwdOyzK04TW7fKH1TPGT G85WJcwnzb+9MHNaHZm/Z6LD8YIECbee+/apawzuW84hYztdnAsY8rz64kFSZGAI tHQWWAD4JUCmE3DO6O2AVoYuPcP/vKo5suWOsgBl3Vjq6TzvknxpZ6zrYs5Yrm73 b1rXdulfOwaLN9MclV7Os8vEppYsE1flOOL4WvoTTYXuTVU+NWZL09c/ernYCEA9 xI2lf6v9OkBG52FQMmPWL23PAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUOQGvSpP+ +q64ecyfWZTk5/Aa+DgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYxM0FCLzlDRjdFQ0RBNkY4QjExRUQ4RkFFM0MxMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MTNBQi85Q0Y3RUNEQTZGOEIxMUVEOEZBRTNDMTFDNEY5QUUwMi9PUUd2U3BQ LS1xNjRlY3lmV1pUazVfQWEtRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAku0MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZy64MA0EAgAC MAcDBQAkAMYgMA0GCSqGSIb3DQEBCwUAA4IBAQDPR8L4XSwGiIXYAHnAkv5tOS6i 8tr4VQbBoZ5PrLshus5ipOEgqkmM/HQ9oETW0bk9TpDnIZTxY19H/9Qr6dsnOgto 2IrQgfEgqPNumpEaqVqoy0NfFrYqjj3NlUDiB7dtYRL/731koKvFowkbyOfMKZCo noKxPBMsLxFWGaZEVEN+8YvSpmA3VAP0wev3ZVVWQxb+cgj0plpkit07EyDLl0dV LT7VWt5euPRkez9RpNL6btGTwxeSS8D+nrNUYmVBUYOAYcTGZdVcCeF/jeZJq8uk MJNkFrFoeXBrS9J6fZV03vhJbnntm5tZufgiVFgoPld3abJbfUOgM2MTuPyh -----END CERTIFICATE-----Generated at Sun Jan 25 04:32:44 2026 by rpki-client