This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer File: QgHlq32GvGha8R8C3mhAUVttgFg.cer (raw, json) Hash identifier: 1fllZb/hnO9UVfyybX9dVIbDpk/w8rVmKFN8BAJ5EaY= Subject key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028356 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:36:08 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38547 IP: 2404:f400::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164694 (0x28356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 14:36:08 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:62:21:bc:3e:a5:6a:de:ba:43:0e:78:d4: 87:74:b6:69:62:da:12:d8:3c:3e:38:04:05:2a:6f: 4d:02:1d:5a:80:70:20:9c:ba:6e:bb:26:4f:8a:b2: 68:54:b3:99:40:92:6b:98:4d:ce:ea:17:fc:62:33: 6d:46:43:1a:d9:1e:9f:95:0e:74:aa:29:d3:54:84: a6:b4:80:5c:ea:54:7b:a7:2b:0a:72:2b:65:c7:f5: e3:43:cf:6f:6f:d8:bb:e8:76:7c:69:28:43:6b:fb: 3d:f8:38:8f:bc:6b:67:06:d1:04:db:44:4a:92:ca: 7e:d0:1e:ad:d7:02:24:33:b4:7a:28:6d:25:61:ed: 5f:57:37:bc:39:c1:0f:41:f2:11:7a:3a:91:4e:d5: 1e:62:1d:09:22:db:b3:3c:bb:76:bc:cc:c6:9e:d1: da:ae:84:2b:55:46:6f:3b:de:a5:68:20:22:86:55: 84:6a:29:f7:74:7c:f1:5d:dd:75:0d:6b:a2:dd:5d: f4:0b:fb:a0:68:5c:48:df:1e:ac:07:af:3a:9b:0c: 9a:6f:da:08:6d:06:86:37:00:f2:83:9e:ad:6b:98: 9d:fd:fa:51:60:20:cd:0d:87:54:de:b8:4f:e5:42: 7c:86:2b:7b:be:9c:25:da:f2:68:e6:03:7c:8a:6a: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38547 sbgp-ipAddrBlock: critical IPv6: 2404:f400::/32 Signature Algorithm: sha256WithRSAEncryption 5a:99:88:ef:e0:ff:09:d7:58:70:d6:4e:b2:df:bf:4b:f7:49: 8d:61:8f:57:62:78:32:43:d6:4b:ca:80:d0:18:c7:c1:3c:26: a6:ab:f1:26:72:a2:da:d4:da:eb:8b:d1:46:a9:e0:46:22:8f: 94:07:d4:80:8d:50:ef:42:bf:a5:a0:3e:c3:bd:04:d7:d1:26: 67:1b:20:6f:38:32:14:f1:b2:a6:1f:16:5a:18:7f:a7:ce:09: 48:ab:2c:db:af:26:8e:d0:3d:de:5a:db:80:9f:44:74:80:2c: 0d:63:0a:85:49:64:a5:97:33:ee:d9:98:14:b9:22:92:3e:4a: 19:0b:fc:8e:5e:db:d4:5c:b3:40:8b:2b:44:6d:44:9d:ef:20: 2d:98:77:e1:e8:eb:6b:bf:de:76:fd:a7:24:f3:a6:5c:f7:e4: e2:c9:2d:94:11:16:07:10:bb:9d:3f:ca:0f:72:91:e6:4e:bc: d0:18:fc:ad:bb:53:98:33:e4:96:d5:0c:01:7e:24:2f:77:47: 89:59:c8:ca:c9:1d:97:88:ca:54:59:b5:88:76:43:53:c8:44: 40:06:04:ae:ff:a2:2d:fc:a8:06:6c:b8:85:b5:e4:ea:86:67: 27:27:60:4c:d0:70:c8:17:78:b1:e0:7b:67:91:1b:8d:50:3c: 4f:3d:75:98 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAoNWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE0MzYwOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYw MkRFNjg0MDUxNUI2RDgwNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4yWIhvD6lat66Qw541Id0tmli2hLYPD44BAUqb00CHVqAcCCcum67Jk+KsmhU s5lAkmuYTc7qF/xiM21GQxrZHp+VDnSqKdNUhKa0gFzqVHunKwpyK2XH9eNDz29v 2LvodnxpKENr+z34OI+8a2cG0QTbREqSyn7QHq3XAiQztHoobSVh7V9XN7w5wQ9B 8hF6OpFO1R5iHQki27M8u3a8zMae0dquhCtVRm873qVoICKGVYRqKfd0fPFd3XUN a6LdXfQL+6BoXEjfHqwHrzqbDJpv2ghtBoY3APKDnq1rmJ39+lFgIM0Nh1TeuE/l QnyGK3u+nCXa8mjmA3yKamb9AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUQgHlq32G vGha8R8C3mhAUVttgFgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ1NEIwLzFDQzREREI2MUQ4RTExRTI5MDJFM0NFQzA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMy R3ZHaGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJaTMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAT0ADANBgkq hkiG9w0BAQsFAAOCAQEAWpmI7+D/CddYcNZOst+/S/dJjWGPV2J4MkPWS8qA0BjH wTwmpqvxJnKi2tTa64vRRqngRiKPlAfUgI1Q70K/paA+w70E19EmZxsgbzgyFPGy ph8WWhh/p84JSKss268mjtA93lrbgJ9EdIAsDWMKhUlkpZcz7tmYFLkikj5KGQv8 jl7b1FyzQIsrRG1Ene8gLZh34ejra7/edv2nJPOmXPfk4sktlBEWBxC7nT/KD3KR 5k680Bj8rbtTmDPkltUMAX4kL3dHiVnIyskdl4jKVFm1iHZDU8hEQAYErv+iLfyo Bmy4hbXk6oZnJydgTNBwyBd4seB7Z5EbjVA8Tz11mA== -----END CERTIFICATE-----Generated at Sun Jan 25 01:19:38 2026 by rpki-client