This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer File: QJ0BHok_2Mjws-isFGkqp7udAlk.cer (raw, json) Hash identifier: oIwYENDTst64qTCxU+1BTcc7A0Bxke56rOVQqP9Shl4= Subject key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02850E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 13:27:34 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 202.83.248.0/22 IP: 202.130.56.0/22 IP: 2001:df0:75::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165134 (0x2850e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 13:27:34 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:88:9f:07:e5:b8:72:3a:08:f4:69:64:f4: 37:14:3d:03:9f:3c:7e:ef:e3:b5:db:68:7a:87:99: ad:20:b5:ea:11:60:e7:23:8e:c7:9f:f6:a7:6f:b0: 4e:3f:77:b3:2c:2e:13:ec:af:2b:72:45:50:dd:9f: d5:e8:48:33:13:9c:ed:3b:4a:81:20:97:d5:51:a8: 10:53:66:5f:42:c3:b0:76:d0:98:8b:7f:1c:f2:cc: e3:93:e4:7b:d4:e2:79:41:68:1c:ec:50:7f:1c:73: 20:56:cf:41:1e:a3:b8:ae:82:01:89:e6:a3:1a:f6: 8c:2d:5d:90:d7:70:51:93:8f:a9:22:f0:55:27:7d: 92:a5:fb:dd:06:a3:e8:78:f7:06:54:92:71:4f:22: 44:c3:83:24:0e:70:a9:14:4c:9c:ff:06:55:ec:4d: 85:3b:5b:3c:6f:c7:b8:ef:c2:aa:b1:4e:0e:55:58: a1:5f:53:44:31:a6:3a:50:1f:2e:a6:56:ef:0d:e5: 7c:4e:a6:3b:98:87:d2:bd:e5:07:1b:20:f0:2f:ad: 92:5d:a0:1f:f5:55:a7:6e:79:c3:97:52:b1:df:e8: 5c:10:dc:4f:64:71:09:be:af:8e:89:c5:af:f3:01: fa:1e:e3:71:0d:fe:50:5d:4f:50:11:89:ec:26:90: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.83.248.0/22 202.130.56.0/22 IPv6: 2001:df0:75::/48 Signature Algorithm: sha256WithRSAEncryption 3f:ae:61:1c:e8:70:40:2b:f7:0c:da:b9:83:e1:14:a8:ff:6d: 49:29:c7:4e:4a:f9:4b:4a:99:7b:18:2e:9b:04:8b:9f:a8:f8: bf:95:b8:b9:04:b1:40:b8:e6:5f:24:e5:b9:58:3c:ee:6f:6a: 8f:cd:18:81:31:7a:7f:d8:63:98:89:4c:e3:eb:c0:62:a2:66: 9c:bc:81:8c:d5:06:dc:ea:bc:c0:da:16:2a:7a:dd:06:13:80: 05:70:88:2f:5a:f8:00:24:12:b0:6b:45:a4:77:b4:62:27:c6: a3:b3:8d:e9:ca:1b:14:c2:ae:ab:2f:ef:57:38:6a:a8:c2:a2: eb:a2:9b:ea:c6:6f:66:d6:27:8e:6c:8f:dd:40:e8:13:dd:53: 31:ef:bf:0f:34:52:63:7f:38:9d:0e:92:09:5d:04:d7:18:26: 30:05:fd:be:d5:51:76:3e:32:38:7d:67:4d:56:64:f7:f2:a1: 0e:fc:39:24:16:70:5d:ae:3a:11:81:9a:8d:d5:0b:d9:b6:59: 48:b6:38:80:ea:6e:97:d8:24:ae:a4:b7:03:40:f6:86:a7:19: 8c:ae:a6:5b:c8:42:9a:be:c6:2d:af:1c:d9:8e:82:b9:86:7c: b8:6b:6c:a3:27:a3:e7:84:e9:61:7b:94:08:36:1e:c6:64:89: 87:04:7b:ec -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIDAoUOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTEzMjczNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxODA4RTExMTAvBgNVBAUTKDQwOUQwMTFFODkzRkQ4QzhGMEIzRThB QzE0NjkyQUE3QkI5RDAyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFt4ifB+W4cjoI9Glk9DcUPQOfPH7v47XbaHqHma0gteoRYOcjjsef9qdvsE4/ d7MsLhPsrytyRVDdn9XoSDMTnO07SoEgl9VRqBBTZl9Cw7B20JiLfxzyzOOT5HvU 4nlBaBzsUH8ccyBWz0Eeo7iuggGJ5qMa9owtXZDXcFGTj6ki8FUnfZKl+90Go+h4 9wZUknFPIkTDgyQOcKkUTJz/BlXsTYU7Wzxvx7jvwqqxTg5VWKFfU0QxpjpQHy6m Vu8N5XxOpjuYh9K95QcbIPAvrZJdoB/1VaduecOXUrHf6FwQ3E9kcQm+r46Jxa/z Afoe43EN/lBdT1ARiewmkORFAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUQJ0BHok/ 2Mjws+isFGkqp7udAlkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgwOEUxL0Y5MEY5RTg4N0U4MTExRUNCODg3M0E3RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MDhFMS9GOTBGOUU4ODdFODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9r XzJNandzLWlzRkdrcXA3dWRBbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl MBIEAgABMAwDBALKU/gDBALKgjgwDwQCAAIwCQMHACABDfAAdTANBgkqhkiG9w0B AQsFAAOCAQEAP65hHOhwQCv3DNq5g+EUqP9tSSnHTkr5S0qZexgumwSLn6j4v5W4 uQSxQLjmXyTluVg87m9qj80YgTF6f9hjmIlM4+vAYqJmnLyBjNUG3Oq8wNoWKnrd BhOABXCIL1r4ACQSsGtFpHe0YifGo7ON6cobFMKuqy/vVzhqqMKi66Kb6sZvZtYn jmyP3UDoE91TMe+/DzRSY384nQ6SCV0E1xgmMAX9vtVRdj4yOH1nTVZk9/KhDvw5 JBZwXa46EYGajdUL2bZZSLY4gOpul9gkrqS3A0D2hqcZjK6mW8hCmr7GLa8c2Y6C uYZ8uGtsoyej54TpYXuUCDYexmSJhwR77A== -----END CERTIFICATE-----Generated at Sun Jan 25 01:13:06 2026 by rpki-client