This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer File: VtexXMGugneFjWSSwB3VMwhEzAY.cer (raw, json) Hash identifier: r+unlaFCLMlHPdgI8dG3opEzkSd87EGg6XoqFpUyEOQ= Subject key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028486 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 04:01:21 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 18222 IP: 45.115.216.0/22 IP: 45.117.152.0/23 IP: 103.90.84.0/22 IP: 103.250.132.0/23 IP: 202.51.68.0/24 IP: 202.51.74.0 -- 202.51.76.255 IP: 202.51.82.0/23 IP: 202.51.86.0/24 IP: 202.51.95.0/24 IP: 2400:89e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164998 (0x28486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 8 04:01:21 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:ba:21:28:f6:7b:5b:1e:99:6c:12:1c:cd: c1:fd:85:3d:71:62:17:4b:4c:0f:aa:58:a8:02:a1: 8c:f4:07:39:56:5c:c5:b2:28:03:bd:26:8a:b2:57: 06:73:f2:4f:1e:01:54:a6:38:80:1f:b0:04:0b:be: ed:08:ce:bb:14:03:82:26:f4:0e:15:13:e4:0f:a7: 0f:4e:2e:7b:86:4f:dd:8b:32:5a:67:c0:a1:80:94: bb:94:82:34:2f:05:74:0b:27:c4:6c:db:c5:3e:3b: 8b:95:85:3e:aa:59:cf:6f:d3:c0:d5:b3:a5:05:1c: ea:76:49:f0:91:84:4c:e8:b1:97:f9:22:83:5c:b5: 97:dd:20:02:4a:90:f7:62:1d:83:60:9f:b1:e3:33: 5a:e2:c8:33:bb:2a:0e:98:89:f1:2b:c0:ba:a8:5a: 3e:73:85:d7:f3:9c:88:a1:c1:fa:ba:d8:25:f2:f8: e3:d9:ea:92:e3:69:03:59:49:00:23:85:03:44:a1: 9b:ca:54:ed:69:cc:4c:a4:14:fb:18:31:87:6f:dc: fc:77:93:48:9f:75:8b:2e:8b:c8:5f:52:a8:22:50: 09:a5:a0:ae:e8:86:b2:c7:e0:55:b9:82:6d:2c:d8: 61:a8:ac:86:92:94:7b:8a:52:fa:91:17:82:a5:47: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18222 sbgp-ipAddrBlock: critical IPv4: 45.115.216.0/22 45.117.152.0/23 103.90.84.0/22 103.250.132.0/23 202.51.68.0/24 202.51.74.0-202.51.76.255 202.51.82.0/23 202.51.86.0/24 202.51.95.0/24 IPv6: 2400:89e0::/32 Signature Algorithm: sha256WithRSAEncryption 51:8f:84:26:6d:bd:9b:9d:79:e1:4e:f5:f6:b5:5a:a0:d3:50: 95:8a:9e:79:fc:fe:7e:f9:c9:fe:d5:db:9d:81:28:49:90:6c: 8d:8c:9e:7f:fa:a7:00:59:2c:28:43:3d:72:9b:83:e1:33:0a: 36:3c:ca:85:b0:41:1a:4e:56:d0:0a:84:2d:57:0e:2b:d3:1b: 37:ad:ea:ed:7c:1d:6c:58:25:4b:f6:4f:0f:71:ac:a7:17:66: 0b:6d:b8:89:c5:8c:b6:c1:9a:5f:a2:7e:35:6c:b2:e4:0e:32: f3:05:bd:fd:71:be:99:24:ef:12:12:78:7c:46:0a:e9:8e:d1: 15:07:d6:09:55:6e:e4:93:d0:94:ac:27:65:0c:89:49:48:d2: 26:f6:ee:30:6b:c9:23:db:24:e6:69:3e:cf:b4:b2:ef:ce:d5: 46:97:f3:af:fa:fe:5d:d9:a2:70:00:cd:4d:2e:94:1e:18:2e: 11:b3:b2:1c:8a:38:14:21:e3:5a:f5:80:14:c5:18:61:f5:7c: 62:9b:1f:8f:d8:39:07:22:ff:1c:db:35:1c:39:58:24:35:40: 1e:28:ef:c4:35:bb:32:ba:34:17:5b:3c:7f:f4:db:3e:4e:9e: 3d:c9:48:c3:92:d0:b7:c5:52:51:85:e4:69:cd:cd:6c:a5:28: b3:06:d4:41 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIDAoSGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwODA0MDEyMVoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRjBDQzgxMTAvBgNVBAUTKDU2RDdCMTVDQzFBRTgyNzc4NThENjQ5 MkMwMURENTMzMDg0NENDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMRrohKPZ7Wx6ZbBIczcH9hT1xYhdLTA+qWKgCoYz0BzlWXMWyKAO9JoqyVwZz 8k8eAVSmOIAfsAQLvu0IzrsUA4Im9A4VE+QPpw9OLnuGT92LMlpnwKGAlLuUgjQv BXQLJ8Rs28U+O4uVhT6qWc9v08DVs6UFHOp2SfCRhEzosZf5IoNctZfdIAJKkPdi HYNgn7HjM1riyDO7Kg6YifErwLqoWj5zhdfznIihwfq62CXy+OPZ6pLjaQNZSQAj hQNEoZvKVO1pzEykFPsYMYdv3Px3k0ifdYsui8hfUqgiUAmloK7ohrLH4FW5gm0s 2GGorIaSlHuKUvqRF4KlR+xdAgMBAAGjggNVMIIDUTAdBgNVHQ4EFgQUVtexXMGu gneFjWSSwB3VMwhEzAYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYwQ0M4LzAxMkVEMUJFQ0E0RDExRUFBMTMyRTE3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMENDOC8wMTJFRDFCRUNBNEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1H dWduZUZqV1NTd0IzVk13aEV6QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICRy4wZgYIKwYBBQUHAQcBAf8EVzBVMEQEAgABMD4DBAItc9gDBAEtdZgD BAJnWlQDBAFn+oQDBADKM0QwDAMEAcozSgMEAMozTAMEAcozUgMEAMozVgMEAMoz XzANBAIAAjAHAwUAJACJ4DANBgkqhkiG9w0BAQsFAAOCAQEAUY+EJm29m5154U71 9rVaoNNQlYqeefz+fvnJ/tXbnYEoSZBsjYyef/qnAFksKEM9cpuD4TMKNjzKhbBB Gk5W0AqELVcOK9MbN63q7XwdbFglS/ZPD3GspxdmC224icWMtsGaX6J+NWyy5A4y 8wW9/XG+mSTvEhJ4fEYK6Y7RFQfWCVVu5JPQlKwnZQyJSUjSJvbuMGvJI9sk5mk+ z7Sy787VRpfzr/r+XdmicADNTS6UHhguEbOyHIo4FCHjWvWAFMUYYfV8Ypsfj9g5 ByL/HNs1HDlYJDVAHijvxDW7Mro0F1s8f/TbPk6ePclIw5LQt8VSUYXkac3NbKUo swbUQQ== -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:11 2026 by rpki-client