This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer File: UK5xbz02ub7q4n8QBo-eNqIzq5E.cer (raw, json) Hash identifier: XHp1zSLGRd1gfominUnWK5J7mLz1e3BwLL0KIXMzgdQ= Subject key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02869A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:09:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 202.49.204.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165530 (0x2869a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 14:09:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:46:74:28:19:14:df:de:fd:22:a1:a2:ee: cb:63:c3:d1:ea:79:de:07:73:9c:82:79:3e:27:88: 8f:45:57:b8:8d:ef:39:2b:a0:1c:fb:df:d5:1d:b1: ee:23:e2:af:e0:b5:b3:0c:47:81:3a:0f:37:c9:ec: f5:1b:26:b6:57:89:3b:20:b8:2d:7c:2f:2e:e6:9b: 67:2a:c5:f4:f6:82:49:49:3c:b5:1f:29:a6:e0:22: 3d:e4:8d:eb:05:71:67:35:86:5c:bd:ca:8e:25:be: aa:76:04:8b:5c:a6:24:03:c3:03:e0:42:f6:e5:0a: 36:49:5f:c4:15:84:77:4c:f6:1c:83:b0:05:40:10: 96:ba:1a:82:42:d6:bb:ac:8a:3f:4b:ba:5a:b6:34: 54:9d:61:fd:df:a1:65:03:22:f8:dd:ec:d1:eb:b8: 0b:40:b4:af:ad:b2:d2:77:82:af:8c:3f:cd:72:05: bb:18:c0:2a:98:20:cd:a2:8b:30:88:02:f8:74:75: f1:af:38:5d:db:ad:ec:f3:1a:b6:10:35:9c:d0:96: d2:8a:0b:42:03:07:bc:62:48:24:87:b7:b2:70:1d: d7:ad:e5:75:82:06:7d:6e:81:1e:c1:7d:25:60:96: 1e:45:00:cc:2c:6a:6b:01:76:db:7d:8b:4d:af:d9: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.49.204.0/23 Signature Algorithm: sha256WithRSAEncryption c0:1c:c2:59:99:60:93:8d:ad:f3:f2:67:de:e9:b7:fb:a7:73: d0:e4:c0:9e:84:07:7d:c9:46:0d:54:35:14:ea:fb:67:30:90: a3:67:bb:c4:02:96:26:18:5f:10:fe:1a:99:bf:21:fe:93:a7: a9:18:10:aa:9a:70:a2:5c:db:0b:c3:fc:c1:04:4a:d6:8c:d6: 33:d7:80:4f:47:00:98:55:13:af:a5:5c:c3:86:66:61:99:d3: 5a:e6:a9:c1:b5:17:61:2e:12:0d:ca:2b:91:00:2e:80:21:93: ee:25:56:bd:29:ab:41:82:35:31:02:7f:25:30:08:d5:8c:23: ac:b5:8e:28:e4:77:27:ba:2b:44:aa:ff:1c:ff:b3:e2:54:3b: f8:fa:8f:70:53:61:11:d5:e6:87:f1:e3:91:a9:05:45:43:0f: 05:2a:78:ec:fd:80:26:4a:c7:94:b5:5a:84:c2:25:cc:80:da: 0d:83:6b:d6:be:a7:68:c3:e2:90:f0:dc:a5:52:39:04:79:d2: c5:a8:72:63:b3:12:2d:ec:c7:07:fa:f3:36:c7:84:38:c4:f5: 7e:fa:56:3d:d7:0f:8d:28:90:d1:f4:17:f8:79:de:78:55:60: fe:5d:ab:19:e1:20:c0:63:40:2b:a3:fc:3b:cd:23:a2:8f:2e: 6a:3f:85:f6 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAoaaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTE0MDk0MFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0I0RTkxMTAvBgNVBAUTKDUwQUU3MTZGM0QzNkI5QkVFQUUyN0Yx MDA2OEY5RTM2QTIzM0FCOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvAkZ0KBkU3979IqGi7stjw9Hqed4Hc5yCeT4niI9FV7iN7zkroBz739Udse4j 4q/gtbMMR4E6DzfJ7PUbJrZXiTsguC18Ly7mm2cqxfT2gklJPLUfKabgIj3kjesF cWc1hly9yo4lvqp2BItcpiQDwwPgQvblCjZJX8QVhHdM9hyDsAVAEJa6GoJC1rus ij9Lulq2NFSdYf3foWUDIvjd7NHruAtAtK+tstJ3gq+MP81yBbsYwCqYIM2iizCI Avh0dfGvOF3brezzGrYQNZzQltKKC0IDB7xiSCSHt7JwHdet5XWCBn1ugR7BfSVg lh5FAMwsamsBdtt9i02v2RcDAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUUK5xbz02 ub7q4n8QBo+eNqIzq5EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNCNEU5L0QzODYxMzQ0NDBFRTExRjA5RTkzMzUxQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQjRFOS9EMzg2MTM0NDQwRUUxMUYwOUU5MzM1MUNDNEY5QUUwMi9VSzV4Ynow MnViN3E0bjhRQm8tZU5xSXpxNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAHKMcwwDQYJKoZIhvcNAQELBQADggEBAMAcwlmZYJONrfPyZ97p t/unc9DkwJ6EB33JRg1UNRTq+2cwkKNnu8QCliYYXxD+Gpm/If6Tp6kYEKqacKJc 2wvD/MEEStaM1jPXgE9HAJhVE6+lXMOGZmGZ01rmqcG1F2EuEg3KK5EALoAhk+4l Vr0pq0GCNTECfyUwCNWMI6y1jijkdye6K0Sq/xz/s+JUO/j6j3BTYRHV5ofx45Gp BUVDDwUqeOz9gCZKx5S1WoTCJcyA2g2Da9a+p2jD4pDw3KVSOQR50sWocmOzEi3s xwf68zbHhDjE9X76Vj3XD40okNH0F/h53nhVYP5dqxnhIMBjQCuj/DvNI6KPLmo/ hfY= -----END CERTIFICATE-----Generated at Sun Jan 25 01:19:23 2026 by rpki-client