This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer File: WY3Vo5rkd2WK1by_42JkoaYdZwg.cer (raw, json) Hash identifier: GRnmgKzTU59JpW8FYdz9daHsG+AsVkU8HecmlaCKofQ= Subject key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028395 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 04 Jan 2026 13:55:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136030 IP: 43.225.96.0/22 IP: 103.244.132.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164757 (0x28395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 4 13:55:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:d1:99:14:f3:5c:84:15:70:25:b7:01:d4: b1:f4:37:d1:18:7b:f1:e2:e3:d3:6e:25:f8:e3:3f: 58:54:30:3f:14:48:1d:a1:c3:67:66:cf:10:60:60: f1:b7:e2:71:5b:5d:ea:ae:d4:cd:e4:26:b8:15:aa: 64:32:bb:bf:33:00:1d:83:29:e2:30:ac:fe:40:98: dc:a4:66:4c:df:2f:1d:92:4b:59:c0:23:16:d2:d7: 4b:0f:c4:f9:8b:ee:15:a2:82:7c:db:a3:cf:f5:ae: 62:dc:8a:94:82:0d:08:50:2b:9f:c9:96:8a:e6:f2: 59:07:86:63:00:d0:6e:da:ec:a5:c4:41:54:36:e1: b1:d5:ce:8d:d4:16:17:0a:52:70:dc:14:b4:fc:22: 95:c9:ab:c5:b0:39:8a:2e:48:3d:01:af:d3:46:cc: f4:9c:0e:d2:04:d9:0d:20:98:6b:50:ab:b5:b3:44: f0:6e:07:a2:54:7d:89:c5:49:29:ca:67:b6:ce:8a: 8b:6a:59:5f:7d:68:76:62:e1:56:73:e2:b0:10:35: a2:6f:cd:f0:3f:de:ce:65:2e:ec:b7:3a:03:7b:81: 7f:0c:a7:71:45:98:4c:36:b4:a5:87:f1:d0:ca:f3: 02:5a:e3:4f:71:4d:82:ea:ea:ed:97:74:7a:4c:da: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136030 sbgp-ipAddrBlock: critical IPv4: 43.225.96.0/22 103.244.132.0/22 Signature Algorithm: sha256WithRSAEncryption ce:09:d8:d1:09:d6:f4:1b:49:fc:c6:3f:d2:fe:11:3c:d3:1d: 62:06:dd:b0:9f:05:a9:6c:20:dc:29:c0:eb:7b:d0:dc:3d:c4: 7b:7e:56:4c:c6:11:b8:e9:3a:ea:20:fd:a3:75:b6:c6:08:72: f3:a0:ca:f7:13:c1:d3:77:48:c3:45:cd:cf:d7:49:61:01:7b: 03:88:63:6f:7c:34:dc:7a:3c:c9:ac:64:43:8b:12:ac:6d:75: 7e:ca:f0:2f:53:8d:44:14:73:b7:d4:48:82:61:67:db:d2:80: 90:68:1f:8d:64:58:6d:93:1c:cd:b3:8d:c0:d9:59:66:ea:61: 4d:94:57:df:75:2f:f6:8f:dc:35:d8:f1:b0:0d:00:da:e4:b5: 19:a2:8b:48:91:e7:55:b0:02:a4:94:37:ef:77:97:46:d6:8b: b7:f2:e3:7c:03:12:d2:8e:e7:d8:81:a7:9a:3a:b5:a9:6c:68: 46:d3:d8:f3:56:33:90:37:d0:ab:c0:7c:95:ec:60:9f:d6:57: 38:ae:fd:fc:c8:7c:fc:d2:7c:00:b2:ea:77:80:89:fd:ef:cf: 13:8a:0d:c2:fc:15:b4:28:07:e9:18:e7:14:d2:36:86:95:db: c4:ec:2a:ea:8b:a0:5c:99:7a:45:33:04:b1:ba:e7:f1:60:8e: 8b:6e:2b:17 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoOVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNDEzNTUwMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNC RkUzNjI2NEExQTYxRDY3MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcRdGZFPNchBVwJbcB1LH0N9EYe/Hi49NuJfjjP1hUMD8USB2hw2dmzxBgYPG3 4nFbXequ1M3kJrgVqmQyu78zAB2DKeIwrP5AmNykZkzfLx2SS1nAIxbS10sPxPmL 7hWignzbo8/1rmLcipSCDQhQK5/Jlorm8lkHhmMA0G7a7KXEQVQ24bHVzo3UFhcK UnDcFLT8IpXJq8WwOYouSD0Br9NGzPScDtIE2Q0gmGtQq7WzRPBuB6JUfYnFSSnK Z7bOiotqWV99aHZi4VZz4rAQNaJvzfA/3s5lLuy3OgN7gX8Mp3FFmEw2tKWH8dDK 8wJa409xTYLq6u2XdHpM2hvvAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUWY3Vo5rk d2WK1by/42JkoaYdZwgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMxQTE0L0Y3RTg2NDQ2OEZCQzExRUFBOEMzMTI3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVy a2QyV0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhNeMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK+FgAwQCZ/SE MA0GCSqGSIb3DQEBCwUAA4IBAQDOCdjRCdb0G0n8xj/S/hE80x1iBt2wnwWpbCDc KcDre9DcPcR7flZMxhG46TrqIP2jdbbGCHLzoMr3E8HTd0jDRc3P10lhAXsDiGNv fDTcejzJrGRDixKsbXV+yvAvU41EFHO31EiCYWfb0oCQaB+NZFhtkxzNs43A2Vlm 6mFNlFffdS/2j9w12PGwDQDa5LUZootIkedVsAKklDfvd5dG1ou38uN8AxLSjufY gaeaOrWpbGhG09jzVjOQN9CrwHyV7GCf1lc4rv38yHz80nwAsup3gIn9788Tig3C /BW0KAfpGOcU0jaGldvE7Crqi6BcmXpFMwSxuufxYI6LbisX -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:02 2026 by rpki-client