This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer File: ULpjuT-CkSle5HAxuWtFzaXCSw0.cer (raw, json) Hash identifier: iQauyInL96MiWtw6/wzF2MNUO+xe0QvFlW2lBg3X9cM= Subject key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028663 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 06:00:51 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 153523 IP: 2001:df4:e940::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 09:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165475 (0x28663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 06:00:51 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a9:fe:d9:51:22:ae:37:14:97:b4:f3:87:57: b3:e5:ad:f9:fd:ea:4b:b3:4b:8d:ce:fe:0d:12:4e: 2f:59:17:0d:b6:3a:06:d0:fb:d0:72:8e:8f:05:0d: 56:2c:e5:4e:14:5c:18:73:fd:bb:0b:0f:50:fb:06: f2:9d:11:a6:4f:1e:c4:48:a3:da:29:e1:b3:96:a1: ac:7b:00:e1:a6:de:47:19:7c:1c:5b:59:82:0d:1c: 8f:f3:33:63:6b:d6:c1:26:56:bf:05:59:ab:0e:4e: 87:22:6b:a7:db:89:17:ce:22:0f:67:be:d7:1e:5f: d4:00:18:4c:3e:c7:b4:ca:ca:63:db:4a:64:33:d5: 87:f2:83:7c:5d:be:bc:4e:5d:7b:43:c1:91:45:97: 10:aa:9c:e3:37:fa:58:8d:31:e4:75:73:ee:7d:c0: b5:b6:fb:e8:a7:6e:5f:dc:71:94:75:db:37:01:cc: 36:5f:40:a8:4b:46:96:41:a4:da:df:f9:61:8d:56: c7:31:aa:c7:fa:93:7c:af:cc:05:4d:93:dc:e1:80: 4e:0e:00:cb:d7:28:d8:d1:b4:d4:62:4a:fd:84:4e: bb:06:a2:7f:b9:45:40:f7:3c:fc:97:0f:7f:74:fb: df:a0:76:6b:47:b0:81:f6:0b:7e:19:43:88:79:35: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153523 sbgp-ipAddrBlock: critical IPv6: 2001:df4:e940::/48 Signature Algorithm: sha256WithRSAEncryption 53:ff:2e:48:7e:af:d7:2f:66:8e:ee:0f:37:4f:e1:3e:9b:ba: e8:bc:bd:40:fc:01:9e:4c:bc:ec:6a:d8:c8:94:cc:f3:b5:4e: 0a:41:42:56:a6:89:02:33:2a:2e:3d:a1:59:3f:28:95:7e:f4: 6b:b3:6e:e0:52:d5:f8:0f:ad:97:03:d4:27:7c:d6:f7:72:07: d0:20:13:36:30:2b:d6:33:71:ba:e5:84:cb:1c:f3:d3:ab:f2: 5b:74:8d:42:dd:76:8f:9c:6c:8b:89:a1:d1:fa:da:03:67:50: 7d:47:4b:76:cc:be:8e:cf:20:04:14:ea:53:b9:02:21:f0:fb: 1a:e3:9b:45:81:6f:54:7c:18:a3:c6:f2:cd:b0:fe:e6:9d:45: 16:3b:ff:7b:dd:73:63:63:fd:7b:db:19:22:c6:c8:85:f2:dd: aa:dc:e3:cd:82:35:7c:fd:d7:7e:93:c6:ae:64:05:e5:5f:7c: 08:f2:d4:33:0b:cc:3c:6a:ae:28:f8:ad:73:e2:da:20:da:80: 80:51:7f:b4:84:a9:3b:2f:c3:e5:68:fb:0e:22:1c:9a:3f:4b: 78:20:84:2e:d9:0a:7f:67:e8:20:4c:fd:b8:b5:f9:1b:a1:59: d5:05:e6:f4:f7:1d:06:f7:5c:17:8f:b0:35:1c:a7:08:ae:39: 91:71:76:bd -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoZjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTA2MDA1MVoXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTlDRkYxMTAvBgNVBAUTKDUwQkE2M0I5M0Y4MjkxMjk1RUU0NzAz MUI5NkI0NUNEQTVDMjRCMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4qf7ZUSKuNxSXtPOHV7Plrfn96kuzS43O/g0STi9ZFw22OgbQ+9Byjo8FDVYs 5U4UXBhz/bsLD1D7BvKdEaZPHsRIo9op4bOWoax7AOGm3kcZfBxbWYINHI/zM2Nr 1sEmVr8FWasOTocia6fbiRfOIg9nvtceX9QAGEw+x7TKymPbSmQz1Yfyg3xdvrxO XXtDwZFFlxCqnOM3+liNMeR1c+59wLW2++inbl/ccZR12zcBzDZfQKhLRpZBpNrf +WGNVscxqsf6k3yvzAVNk9zhgE4OAMvXKNjRtNRiSv2ETrsGon+5RUD3PPyXD390 +9+gdmtHsIH2C34ZQ4h5NfWpAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUULpjuT+C kSle5HAxuWtFzaXCSw0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5Q0ZGLzJBRTE2QTU4RDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5OUNGRi8yQUUxNkE1OEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQt Q2tTbGU1SEF4dVd0RnphWENTdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlezMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9OlAMA0G CSqGSIb3DQEBCwUAA4IBAQBT/y5Ifq/XL2aO7g83T+E+m7rovL1A/AGeTLzsatjI lMzztU4KQUJWpokCMyouPaFZPyiVfvRrs27gUtX4D62XA9QnfNb3cgfQIBM2MCvW M3G65YTLHPPTq/JbdI1C3XaPnGyLiaHR+toDZ1B9R0t2zL6OzyAEFOpTuQIh8Psa 45tFgW9UfBijxvLNsP7mnUUWO/973XNjY/172xkixsiF8t2q3OPNgjV8/dd+k8au ZAXlX3wI8tQzC8w8aq4o+K1z4tog2oCAUX+0hKk7L8PlaPsOIhyaP0t4IIQu2Qp/ Z+ggTP24tfkboVnVBeb09x0G91wXj7A1HKcIrjmRcXa9 -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:41 2026 by rpki-client