This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer (raw, json) Hash identifier: 5dV7roJn8owRnoi+s9Ujix8OSLEi71zS75uPn+wQTGw= Subject key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284EB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft caRepository: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 04:38:28 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 142588 IP: 103.250.64.0/22 IP: 2401:d9a0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165099 (0x284eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 04:38:28 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:1f:8c:35:a0:7d:61:3b:ec:d9:1a:84:19: b2:79:34:c2:99:4d:66:74:55:6c:01:dd:44:e7:6b: d8:11:b7:ea:83:4d:9f:bd:b0:d7:93:01:88:26:46: d6:3c:84:8d:a5:de:b5:35:c5:93:92:ed:c1:8f:eb: c1:e1:24:76:30:74:68:66:72:09:e4:a7:24:f5:b5: 6b:4b:ff:81:ca:10:38:82:dc:74:e3:38:18:e9:4b: 79:82:bb:a9:06:48:03:49:1f:b6:a6:d6:77:01:82: fd:79:f6:a9:11:71:29:f5:50:61:d5:6c:43:1f:0b: f1:dd:d0:de:1c:e3:c1:b9:e1:89:6f:7b:46:60:26: b6:ce:e4:ce:7d:41:02:ea:01:81:dc:24:2c:a6:ca: b6:f3:30:1d:99:4b:c2:7c:62:2e:59:6f:ba:ca:fd: c6:8c:c0:6e:7d:ee:50:55:2a:0a:0f:e1:23:79:5b: 31:7a:77:1e:a7:50:6a:15:00:93:9c:4f:24:01:00: 1d:aa:d2:6f:ca:b5:3b:67:69:1c:7e:21:5d:be:c5: 9a:7c:41:94:e5:e9:5c:ce:d6:95:3a:c8:b3:34:31: e6:75:2b:0b:09:9f:15:d2:04:3b:c1:87:23:94:97: bf:f5:dc:46:7f:3f:5d:33:21:18:05:ef:cc:d1:6d: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142588 sbgp-ipAddrBlock: critical IPv4: 103.250.64.0/22 IPv6: 2401:d9a0::/32 Signature Algorithm: sha256WithRSAEncryption d5:45:63:e0:30:b0:d7:e1:f5:82:f3:14:81:93:79:3a:c7:ab: ea:57:8d:dc:8b:c4:65:08:3c:2a:4b:b4:12:00:ab:72:96:5c: 2d:97:42:85:b9:d3:84:56:b4:2a:2e:7a:56:cd:f3:38:d8:9a: 36:07:06:2b:a9:a1:9a:36:68:8f:91:22:00:e0:ad:39:16:52: 51:bd:a7:88:65:43:88:cc:96:ec:1b:94:48:34:31:cc:71:b7: b6:e5:dd:37:56:6c:bb:37:b5:77:07:6a:b4:5a:4f:4b:a6:b6: 38:be:cc:f9:3f:0b:00:50:91:34:01:dd:ec:b7:27:c0:cd:68: f1:6e:22:bb:dd:c0:52:91:9c:c9:67:b4:5d:e2:da:ed:b4:a4: e5:0e:d4:8b:08:d7:9f:89:99:13:e3:c4:90:97:6e:09:ad:22: 7f:21:7e:b9:19:df:a9:9a:d6:1a:a9:5c:08:e6:d6:c8:99:04: 38:77:7b:04:39:91:7d:fe:9f:17:a6:18:d5:69:79:11:7b:90: 7c:d1:b9:59:9c:b3:45:7f:59:91:a4:bc:3c:6a:9f:36:5a:ed: 68:b1:10:70:50:c9:ca:ae:61:e1:10:d3:1d:1e:e8:6d:f5:a0: 87:76:c4:1e:e3:82:b3:59:3a:c1:b9:0b:cc:65:57:eb:1b:33: fa:d5:c9:20 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoTrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTA0MzgyOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxODczMjUxMTAvBgNVBAUTKDUzQzA4QkRBMDRCQzA1MzIyMUVCMjcz QUEyMTVDQ0Q5NUMwMEMzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgWx+MNaB9YTvs2RqEGbJ5NMKZTWZ0VWwB3UTna9gRt+qDTZ+9sNeTAYgmRtY8 hI2l3rU1xZOS7cGP68HhJHYwdGhmcgnkpyT1tWtL/4HKEDiC3HTjOBjpS3mCu6kG SANJH7am1ncBgv159qkRcSn1UGHVbEMfC/Hd0N4c48G54Ylve0ZgJrbO5M59QQLq AYHcJCymyrbzMB2ZS8J8Yi5Zb7rK/caMwG597lBVKgoP4SN5WzF6dx6nUGoVAJOc TyQBAB2q0m/KtTtnaRx+IV2+xZp8QZTl6VzO1pU6yLM0MeZ1KwsJnxXSBDvBhyOU l7/13EZ/P10zIRgF78zRbUARAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUU8CL2gS8 BTIh6yc6ohXM2VwAw5IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3MzI1LzgzMzhDNEQ2QUFFOTExRUZCNzIxQzI1REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NzMyNS84MzM4QzRENkFBRTkxMUVGQjcyMUMyNURDNEY5QUUwMi9VOENMMmdT OEJUSWg2eWM2b2hYTTJWd0F3NUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiz8MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ/pAMA0EAgAC MAcDBQAkAdmgMA0GCSqGSIb3DQEBCwUAA4IBAQDVRWPgMLDX4fWC8xSBk3k6x6vq V43ci8RlCDwqS7QSAKtyllwtl0KFudOEVrQqLnpWzfM42Jo2BwYrqaGaNmiPkSIA 4K05FlJRvaeIZUOIzJbsG5RINDHMcbe25d03Vmy7N7V3B2q0Wk9LprY4vsz5PwsA UJE0Ad3styfAzWjxbiK73cBSkZzJZ7Rd4trttKTlDtSLCNefiZkT48SQl24JrSJ/ IX65Gd+pmtYaqVwI5tbImQQ4d3sEOZF9/p8XphjVaXkRe5B80blZnLNFf1mRpLw8 ap82Wu1osRBwUMnKrmHhENMdHuht9aCHdsQe44KzWTrBuQvMZVfrGzP61ckg -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:51 2026 by rpki-client