This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer File: PR_LclXFJQPhCuWEsRiaFc9WB04.cer (raw, json) Hash identifier: OLOz1lItQGgmeEINDKHHsPP2ZczS6qpV0avbLXub+s4= Subject key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028727 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft caRepository: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 04:28:59 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 137443 AS: 152450 IP: 43.231.184.0/22 IP: 103.50.252.0/22 IP: 103.161.138.0/23 IP: 2401:7b20::/32 IP: 2404:de80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165671 (0x28727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 04:28:59 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:b4:92:6a:45:2a:5c:c9:6f:09:bf:48:08: d0:89:fd:20:31:8b:de:87:1e:fc:3c:9a:ae:9b:60: c0:97:7e:b0:13:04:fd:13:b6:0d:82:0d:b5:dd:dc: 4c:27:d6:99:53:9e:51:60:28:33:60:ff:be:f7:48: 6c:a9:07:fe:5a:80:98:54:b2:28:64:70:00:16:89: 54:97:10:d3:26:c0:6a:3c:16:66:2a:dc:32:8d:be: ff:20:fb:bf:9d:33:2c:bd:94:6f:b8:5d:29:b1:27: ff:5d:84:eb:c6:72:a9:7b:66:5e:e4:c1:6c:ea:9b: 0b:0d:ca:ee:b0:df:18:72:e4:af:25:f3:9c:c9:fb: 5b:0a:a8:4a:c6:2c:20:d3:ba:6c:e3:23:51:fd:31: 48:cb:9a:cc:e3:06:82:c4:6a:90:55:b6:4c:32:98: 86:78:22:d8:1c:08:88:59:64:bc:7b:4f:25:7a:64: 00:69:86:f3:0d:ee:aa:8e:02:56:17:84:bd:ea:95: f8:b8:04:f4:ee:a5:d9:11:7f:ab:8f:a1:6b:95:af: 60:19:ef:f6:73:2e:c0:58:45:48:54:25:91:2a:01: 79:b3:c0:02:28:e7:0a:5c:87:d0:a5:92:2e:3f:de: 3a:c7:4f:1e:23:04:a6:0d:85:47:45:f9:ac:ca:b7: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137443 152450 sbgp-ipAddrBlock: critical IPv4: 43.231.184.0/22 103.50.252.0/22 103.161.138.0/23 IPv6: 2401:7b20::/32 2404:de80::/32 Signature Algorithm: sha256WithRSAEncryption cd:e1:f9:85:3e:bc:b3:8c:91:da:ca:d0:a7:9d:d3:30:93:af: cb:71:e7:22:12:53:97:a9:95:c8:c8:68:bf:07:ac:88:87:5e: b5:43:0e:a3:ae:53:47:5c:8c:19:f6:02:03:49:a9:1a:dd:10: d9:33:6d:69:4d:8c:23:2e:8b:fa:37:1b:79:ba:fe:fc:6d:e1: b3:9b:5e:69:2f:86:4b:dd:c4:6a:ee:7e:3a:a5:6a:06:d2:b3: 88:eb:6d:25:40:cf:b9:72:dd:89:70:47:9c:71:d1:f9:ee:fb: 52:d4:79:83:af:b6:4f:61:43:04:20:37:f0:10:ca:86:f6:e5: 48:73:65:9e:7c:62:91:7c:23:1f:76:c4:93:dc:93:61:3a:9c: 2e:5c:d1:07:dc:e7:34:89:ea:36:e9:4d:4d:92:4e:c4:ee:ca: a1:00:4e:81:66:53:d1:22:95:42:db:08:39:9b:1e:61:30:15: 2b:b1:51:59:a2:94:7b:e9:71:84:fc:37:0b:fc:63:98:7c:00: 0f:41:65:a3:36:a1:19:c5:1e:b2:3e:ef:89:f7:a6:01:91:b4: 56:b4:69:1b:67:10:3e:19:35:5f:36:28:d3:74:0e:df:94:04: 64:57:94:0c:a9:46:74:e4:ae:28:7d:97:fd:fa:13:a3:6d:1b: 85:d2:ab:5c -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIDAocnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTA0Mjg1OVoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4 NEIxMTg5QTE1Q0Y1NjA3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqHLSSakUqXMlvCb9ICNCJ/SAxi96HHvw8mq6bYMCXfrATBP0Ttg2CDbXd3Ewn 1plTnlFgKDNg/773SGypB/5agJhUsihkcAAWiVSXENMmwGo8FmYq3DKNvv8g+7+d Myy9lG+4XSmxJ/9dhOvGcql7Zl7kwWzqmwsNyu6w3xhy5K8l85zJ+1sKqErGLCDT umzjI1H9MUjLmszjBoLEapBVtkwymIZ4ItgcCIhZZLx7TyV6ZABphvMN7qqOAlYX hL3qlfi4BPTupdkRf6uPoWuVr2AZ7/ZzLsBYRUhUJZEqAXmzwAIo5wpch9Clki4/ 3jrHTx4jBKYNhUdF+azKt2MxAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUPR/LclXF JQPhCuWEsRiaFc9WB04wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEyRkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xY RkpRUGhDdVdFc1JpYUZjOVdCMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAhjjAgMCU4IwQQYIKwYBBQUHAQcBAf8EMjAwMBgEAgABMBIDBAIr57gD BAJnMvwDBAFnoYowFAQCAAIwDgMFACQBeyADBQAkBN6AMA0GCSqGSIb3DQEBCwUA A4IBAQDN4fmFPryzjJHaytCnndMwk6/LceciElOXqZXIyGi/B6yIh161Qw6jrlNH XIwZ9gIDSaka3RDZM21pTYwjLov6Nxt5uv78beGzm15pL4ZL3cRq7n46pWoG0rOI 620lQM+5ct2JcEeccdH57vtS1HmDr7ZPYUMEIDfwEMqG9uVIc2WefGKRfCMfdsST 3JNhOpwuXNEH3Oc0ieo26U1Nkk7E7sqhAE6BZlPRIpVC2wg5mx5hMBUrsVFZopR7 6XGE/DcL/GOYfAAPQWWjNqEZxR6yPu+J96YBkbRWtGkbZxA+GTVfNijTdA7flARk V5QMqUZ05K4ofZf9+hOjbRuF0qtc -----END CERTIFICATE-----Generated at Sun Jan 25 04:21:15 2026 by rpki-client