This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer File: X2mHOU7ukmatexkjRBv29RNP-VA.cer (raw, json) Hash identifier: GpM6end2JqzjOHKbFLPitEg8qO65IhsnCPN6nblNB7s= Subject key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02867A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 12:54:34 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 4818 IP: 210.48.192.0/20 IP: 2401:a120::/32 IP: 2402:1980::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165498 (0x2867a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 12:54:34 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:2e:c9:72:6c:b4:c6:89:4c:1d:50:0f:21: 94:bf:cf:7e:c6:0d:38:89:e9:b8:8e:bb:1c:31:7f: 86:9b:58:e8:c3:5d:90:57:4c:42:c5:73:75:c0:f7: db:29:af:ad:08:db:93:3f:0a:3c:05:e4:66:b4:fb: af:3d:7f:f9:74:41:7d:d0:78:aa:b0:cb:6c:2b:9a: bd:9e:dd:73:1a:21:27:27:28:a6:f3:d9:d7:c0:fd: 4a:c7:dc:6e:23:33:29:39:60:33:a8:47:d2:5f:2a: 7e:d9:6f:be:02:a6:73:44:d5:ba:8d:0a:47:6d:00: ca:e1:49:34:ea:ec:4c:94:1e:68:57:ba:79:55:ba: 16:08:81:9a:1b:82:95:9e:3e:92:c2:c1:28:5e:18: b0:b7:d1:15:63:5f:b6:b2:a8:c5:70:cf:41:39:40: 57:77:3a:2b:e0:23:82:48:49:17:c5:fd:da:b8:5d: 86:a9:0a:84:11:c2:69:06:80:e3:03:5f:4e:39:9a: 2c:fe:6e:b6:bb:fb:b8:47:ee:73:7b:1c:e3:dd:76: d8:20:33:9d:10:bf:9c:0b:5d:05:f0:3a:2a:9a:5e: 5d:95:51:2b:06:49:df:ca:d1:7e:78:f5:54:25:14: 60:11:52:2c:6f:9e:40:b0:10:ec:2c:d7:61:29:b1: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4818 sbgp-ipAddrBlock: critical IPv4: 210.48.192.0/20 IPv6: 2401:a120::/32 2402:1980::/32 Signature Algorithm: sha256WithRSAEncryption c2:29:bc:d7:46:4a:88:4a:28:1f:0a:1b:6f:12:22:dd:52:a3: ff:20:92:5c:04:11:44:0a:58:2c:3c:29:c7:51:45:6c:79:0a: 5c:3a:56:14:0e:d9:47:49:96:ad:fe:5c:2d:6b:c4:e0:d4:a2: 34:f3:36:3a:e3:3b:51:b9:ac:4c:3d:06:de:3d:1c:e6:93:65: 2c:23:54:a4:77:29:d3:93:5c:e5:ba:96:95:f4:8f:d8:7b:b9: bf:9f:dd:fb:eb:2a:2b:55:16:49:20:8d:30:df:ff:ea:db:39: b6:49:5e:05:0b:18:6f:80:bf:f6:64:ad:9c:e3:78:08:e0:9d: 49:4f:ce:81:15:98:eb:c8:b5:5a:0d:62:ea:90:dc:25:a6:b4: 96:20:a9:f9:97:65:50:69:55:10:e0:56:e5:b4:36:4b:bb:86: 11:8c:5d:d2:77:1b:e3:0b:c6:52:f7:85:5f:d5:d1:32:90:ea: 6d:16:24:26:da:ca:40:06:18:c7:fd:1e:32:48:7b:a9:26:8d: 46:a9:68:dd:ce:b0:3d:0b:a9:23:a7:07:94:7d:12:8e:3a:21: 03:c6:e5:1a:fb:b2:15:23:60:e8:ff:96:d7:aa:7e:a6:be:b2: 0e:82:cd:12:66:49:7a:71:b2:af:a4:79:00:02:f2:f8:97:eb: 89:6d:74:f7 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoZ6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTEyNTQzNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTky MzQ0MUJGNkY1MTM0RkY5NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ey7Jcmy0xolMHVAPIZS/z37GDTiJ6biOuxwxf4abWOjDXZBXTELFc3XA99sp r60I25M/CjwF5Ga0+689f/l0QX3QeKqwy2wrmr2e3XMaIScnKKbz2dfA/UrH3G4j Myk5YDOoR9JfKn7Zb74CpnNE1bqNCkdtAMrhSTTq7EyUHmhXunlVuhYIgZobgpWe PpLCwSheGLC30RVjX7ayqMVwz0E5QFd3OivgI4JISRfF/dq4XYapCoQRwmkGgOMD X045miz+bra7+7hH7nN7HOPddtggM50Qv5wLXQXwOiqaXl2VUSsGSd/K0X549VQl FGARUixvnkCwEOws12EpsUYnAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUX2mHOU7u kmatexkjRBv29RNP+VAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ3MjQxLzYyQkI1Qzc0RUNGMTExRUFBMzlENTcyMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3 dWttYXRleGtqUkJ2MjlSTlAtVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICEtIwNQYIKwYBBQUHAQcBAf8EJjAkMAwEAgABMAYDBATSMMAwFAQCAAIw DgMFACQBoSADBQAkAhmAMA0GCSqGSIb3DQEBCwUAA4IBAQDCKbzXRkqISigfChtv EiLdUqP/IJJcBBFEClgsPCnHUUVseQpcOlYUDtlHSZat/lwta8Tg1KI08zY64ztR uaxMPQbePRzmk2UsI1SkdynTk1zlupaV9I/Ye7m/n9376yorVRZJII0w3//q2zm2 SV4FCxhvgL/2ZK2c43gI4J1JT86BFZjryLVaDWLqkNwlprSWIKn5l2VQaVUQ4Fbl tDZLu4YRjF3SdxvjC8ZS94Vf1dEykOptFiQm2spABhjH/R4ySHupJo1GqWjdzrA9 C6kjpweUfRKOOiEDxuUa+7IVI2Do/5bXqn6mvrIOgs0SZkl6cbKvpHkAAvL4l+uJ bXT3 -----END CERTIFICATE-----Generated at Sun Jan 25 01:13:21 2026 by rpki-client