This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer File: S3Z_4wTU8n9REYZLp0O5R5zhSns.cer (raw, json) Hash identifier: GcFdFdaWK0i/fYHjzZF7SKsbEnwPVogdYKbg0jH5wnQ= Subject key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02834B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:24:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38891 IP: 103.198.84.0/22 IP: 103.242.16.0/22 IP: 202.176.12.0/24 IP: 203.99.136.0/22 IP: 223.25.248.0/22 IP: 2407:9400::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164683 (0x2834b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 14:24:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:6a:08:62:08:a9:52:84:a7:16:59:19:16: 59:db:4f:98:52:d2:33:9b:35:0c:33:16:05:e1:2f: 5b:fc:95:bf:7d:fa:64:0c:81:f8:cb:1f:10:01:b6: 35:40:bd:2a:cf:ee:1b:3c:75:a6:8f:5d:22:54:c7: 40:f8:57:25:f0:77:41:bb:61:22:51:b1:93:b8:7a: 6d:23:88:b2:5e:f7:3d:e1:12:6d:0c:94:b2:47:77: 33:72:2f:dc:1e:ac:ec:48:7a:02:09:c9:a8:64:e4: 6f:57:0f:e9:83:9b:fb:d1:4d:3d:78:14:17:e0:7a: 53:f3:46:8e:fd:04:c8:44:43:69:5a:d2:aa:4a:b9: 66:ea:a6:14:f3:92:46:97:16:ea:72:59:4a:6e:ae: 09:13:56:1a:08:c6:e2:0b:69:fc:61:a6:03:c6:82: 44:17:9a:5e:36:30:d1:a1:87:36:83:e5:e1:15:3a: 34:59:25:3a:72:a5:17:d3:bc:60:af:d5:ef:07:70: 1e:77:16:2d:7b:dc:58:49:44:22:65:f6:2f:3e:92: cb:24:4f:c6:cb:7e:d3:fe:87:73:6e:fc:8c:42:73: ba:71:bb:28:1c:63:de:dd:b5:3c:36:fb:9d:1c:32: b4:72:d3:99:32:64:9a:d1:a6:dc:21:fe:0e:9f:c5: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38891 sbgp-ipAddrBlock: critical IPv4: 103.198.84.0/22 103.242.16.0/22 202.176.12.0/24 203.99.136.0/22 223.25.248.0/22 IPv6: 2407:9400::/32 Signature Algorithm: sha256WithRSAEncryption 21:6b:17:1a:bc:74:d3:31:dd:dd:e2:34:f7:84:80:ca:fc:9a: 8f:27:18:b0:9c:40:a9:5b:8e:6b:a6:03:dc:79:16:63:54:ab: c9:62:fa:25:77:e0:c6:20:2c:dd:7c:98:eb:e4:88:d1:95:9d: 00:6d:20:05:66:cb:e1:33:7c:d6:b4:ac:6e:f2:80:c5:52:00: 42:07:58:40:d5:ad:b7:c4:c7:05:fe:bf:d3:fb:d6:ed:a1:8b: 1a:8c:8b:51:69:fa:54:67:90:1c:e9:4a:46:dc:7f:d3:46:09: b5:ee:fd:01:94:cf:24:3c:1f:34:13:31:75:61:03:68:8a:ce: 05:47:f1:91:b0:44:61:c8:14:b6:77:cb:05:16:b7:04:20:e9: 95:b2:b6:18:cb:71:81:c7:a7:88:c1:9c:53:50:8f:26:99:23: 4d:90:5f:b1:4a:44:77:07:a6:6c:94:c9:f4:da:22:82:84:2c: 1e:39:fb:75:e1:80:02:ff:e8:77:de:05:77:3a:ba:cd:d1:02: b1:e6:7d:49:9c:b5:7d:36:e2:dd:ac:4a:04:cc:a4:5b:fd:14: a8:9e:25:ab:8b:0e:c7:b2:00:2b:7b:d9:e4:5d:46:fa:b5:bd: 11:e2:3b:9c:7e:cd:a1:ce:16:ae:70:f4:db:09:8c:2b:74:82: dd:aa:c4:9a -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIDAoNLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE0MjQyMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0 QkE3NDNCOTQ3OUNFMTRBN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrf2oIYgipUoSnFlkZFlnbT5hS0jObNQwzFgXhL1v8lb99+mQMgfjLHxABtjVA vSrP7hs8daaPXSJUx0D4VyXwd0G7YSJRsZO4em0jiLJe9z3hEm0MlLJHdzNyL9we rOxIegIJyahk5G9XD+mDm/vRTT14FBfgelPzRo79BMhEQ2la0qpKuWbqphTzkkaX FupyWUpurgkTVhoIxuILafxhpgPGgkQXml42MNGhhzaD5eEVOjRZJTpypRfTvGCv 1e8HcB53Fi173FhJRCJl9i8+ksskT8bLftP+h3Nu/IxCc7pxuygcY97dtTw2+50c MrRy05kyZJrRptwh/g6fxfdrAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUS3Z/4wTU 8n9REYZLp0O5R5zhSnswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ1M0FDLzAzMTY4QzRFMUQ5NzExRTI4QjZDMDA4MDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdU VThuOVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJfrMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCZ8ZUAwQCZ/IQ AwQAyrAMAwQCy2OIAwQC3xn4MA0EAgACMAcDBQAkB5QAMA0GCSqGSIb3DQEBCwUA A4IBAQAhaxcavHTTMd3d4jT3hIDK/JqPJxiwnECpW45rpgPceRZjVKvJYvold+DG ICzdfJjr5IjRlZ0AbSAFZsvhM3zWtKxu8oDFUgBCB1hA1a23xMcF/r/T+9btoYsa jItRafpUZ5Ac6UpG3H/TRgm17v0BlM8kPB80EzF1YQNois4FR/GRsERhyBS2d8sF FrcEIOmVsrYYy3GBx6eIwZxTUI8mmSNNkF+xSkR3B6ZslMn02iKChCweOft14YAC /+h33gV3OrrN0QKx5n1JnLV9NuLdrEoEzKRb/RSoniWriw7HsgAre9nkXUb6tb0R 4jucfs2hzhaucPTbCYwrdILdqsSa -----END CERTIFICATE-----Generated at Sun Jan 25 01:17:02 2026 by rpki-client