This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer File: WkoaHy2STehVVccdPbZrm7DkNkM.cer (raw, json) Hash identifier: kxD3iDE5PFkHbP4Rf5YVLELvWXXrk5ukYGIBYy5XVeA= Subject key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0280B1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 24 Dec 2025 14:03:46 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138412 IP: 103.124.248.0/22 IP: 2404:da40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164017 (0x280b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 24 14:03:46 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:d5:70:bd:50:ef:ed:a8:02:b9:de:98:f7: 9b:d8:b8:16:68:68:4a:d6:7f:d0:50:dc:d5:26:4b: d4:87:d8:d2:75:75:56:8d:1a:c5:09:b0:ca:d9:e5: d4:12:dd:cf:e5:95:4b:2b:ba:84:d9:b8:6a:35:30: 50:79:cb:e6:81:64:67:ce:c2:cc:00:4e:f0:6f:8b: 8b:f7:d6:41:66:f4:b7:2a:0c:71:66:dc:c8:0b:9f: 78:cb:89:90:03:d8:25:3d:f6:0d:0e:69:e5:fe:2b: 16:13:95:83:fe:72:ca:8a:c6:e1:5e:5d:81:f5:05: 9a:fd:c3:f6:90:b6:49:24:7f:99:bd:4e:3c:4b:d5: 7a:10:71:b8:cb:a2:84:98:35:e9:35:6d:e6:9c:2b: 35:38:ec:ea:81:24:02:7b:ff:b7:cc:58:5e:a3:35: bc:92:c6:7e:fc:2c:ca:ff:47:fb:57:42:3c:e0:64: 28:62:35:5b:61:32:00:c3:1c:ee:ae:4e:73:14:ff: 19:e7:57:89:f1:61:74:86:e5:03:b4:5a:91:7f:20: 5e:92:ea:6e:76:35:8d:5b:82:42:a3:2d:ec:55:2f: dd:b4:a4:90:d6:1e:e1:45:b4:0d:c4:ed:86:a0:b6: 40:6d:98:ed:c5:e5:a7:a0:d2:ff:15:80:c4:05:21: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138412 sbgp-ipAddrBlock: critical IPv4: 103.124.248.0/22 IPv6: 2404:da40::/32 Signature Algorithm: sha256WithRSAEncryption be:1d:69:cd:53:10:15:46:2f:0e:b8:62:fe:53:4a:b1:83:42: a7:5b:2d:ce:c7:6d:41:9a:e6:09:de:c6:85:63:bd:15:f8:51: 11:0f:47:02:70:6b:02:a8:90:57:cd:02:ee:da:5f:a4:b7:08: 72:ec:23:18:b1:c1:75:7b:58:60:a3:c1:3b:1e:ef:91:65:81: 7b:80:d1:87:b2:47:5a:e7:e1:9a:3a:d2:b2:6d:b2:22:c8:ef: 31:cf:49:55:bf:47:11:52:52:cc:0f:5b:64:0e:72:a1:e5:0d: b6:4b:45:c5:6d:2f:2f:b8:29:e9:83:d9:94:c0:c3:95:c0:fb: dc:25:6e:59:3d:e4:ee:48:72:5a:3b:ef:f3:78:e7:f5:f1:c2: 5d:d5:36:4a:d1:9f:1d:8c:a7:62:82:67:ac:5a:a6:eb:1a:4c: 0b:6a:e1:ad:2b:29:36:f2:74:a5:af:8a:82:fe:af:a2:15:96: 6b:1d:1d:c7:74:31:99:b9:eb:80:5d:fe:c3:79:5d:0d:6b:44: cb:86:a8:cc:3b:a8:a6:2f:bf:ad:54:0a:73:94:ee:30:1b:22: ad:09:14:f0:de:f3:fd:3d:3d:71:99:14:b7:73:55:96:4f:11: 88:fb:3a:f1:f0:7a:eb:ff:1d:cd:6d:15:ac:61:6d:31:0a:ef: 42:2f:b0:4f -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoCxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNDE0MDM0NloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1Qzcx RDNEQjY2QjlCQjBFNDM2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd1NVwvVDv7agCud6Y95vYuBZoaErWf9BQ3NUmS9SH2NJ1dVaNGsUJsMrZ5dQS 3c/llUsruoTZuGo1MFB5y+aBZGfOwswATvBvi4v31kFm9LcqDHFm3MgLn3jLiZAD 2CU99g0OaeX+KxYTlYP+csqKxuFeXYH1BZr9w/aQtkkkf5m9TjxL1XoQcbjLooSY Nek1beacKzU47OqBJAJ7/7fMWF6jNbySxn78LMr/R/tXQjzgZChiNVthMgDDHO6u TnMU/xnnV4nxYXSG5QO0WpF/IF6S6m52NY1bgkKjLexVL920pJDWHuFFtA3E7Yag tkBtmO3F5aeg0v8VgMQFIR9XAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUWkoaHy2S TehVVccdPbZrm7DkNkMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMyRTg3L0E5RjNDNkVFMTI5RjExRUFBQjI3MjAyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHky U1RlaFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhysMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3z4MA0EAgAC MAcDBQAkBNpAMA0GCSqGSIb3DQEBCwUAA4IBAQC+HWnNUxAVRi8OuGL+U0qxg0Kn Wy3Ox21BmuYJ3saFY70V+FERD0cCcGsCqJBXzQLu2l+ktwhy7CMYscF1e1hgo8E7 Hu+RZYF7gNGHskda5+GaOtKybbIiyO8xz0lVv0cRUlLMD1tkDnKh5Q22S0XFbS8v uCnpg9mUwMOVwPvcJW5ZPeTuSHJaO+/zeOf18cJd1TZK0Z8djKdigmesWqbrGkwL auGtKyk28nSlr4qC/q+iFZZrHR3HdDGZueuAXf7DeV0Na0TLhqjMO6imL7+tVApz lO4wGyKtCRTw3vP9PT1xmRS3c1WWTxGI+zrx8Hrr/x3NbRWsYW0xCu9CL7BP -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:38 2026 by rpki-client