This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer File: X48BYbesuyVfE88IG2ZTYZtOLAI.cer (raw, json) Hash identifier: sqikWUE5E0SZhab2uKn23AvB4cNbjIZTIhFsmUN+Mz8= Subject key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283A7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 03:47:20 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138456 AS: 151970 AS: 154346 IP: 103.126.24.0/24 IP: 103.152.206.0/24 IP: 2001:df7:3700::/46 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164775 (0x283a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 5 03:47:20 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:63:59:6c:83:07:d3:fb:17:98:ab:44:95: 96:c6:cb:cd:3b:89:89:05:55:42:fc:04:2e:4c:9d: b5:22:78:97:b4:98:ec:04:11:a2:79:91:2f:14:08: 25:89:71:c6:88:a5:ba:89:34:7a:5f:54:1f:e2:f1: 0d:a7:11:fd:3c:8e:77:81:24:8a:bd:c4:fe:b7:a6: 2d:eb:dc:dd:3d:20:8a:c0:17:2c:b2:b2:c3:07:51: 56:74:e4:df:cc:2d:7d:43:34:a7:73:fa:a8:06:77: 56:dd:f4:13:2d:96:b9:af:cf:c6:1c:d2:92:3c:92: de:9e:66:9a:de:1c:1f:7a:45:c7:56:4a:d4:c1:1c: ca:c3:75:15:79:a0:57:81:94:fb:f9:9b:62:da:3e: 81:0d:cd:00:4b:57:62:7f:d5:44:18:a9:5b:8c:f6: 2f:3e:23:52:c8:a7:e3:6b:30:48:25:4b:68:0d:69: 2e:f8:58:e9:bd:60:2a:94:c3:e0:2f:c2:d2:e3:e2: a6:5e:e2:5b:8a:5d:c7:ed:3f:f2:35:a3:dd:38:de: fc:61:60:b1:51:95:6e:66:33:6d:16:95:52:8c:62: e2:8f:1b:d6:d2:58:9d:fe:13:24:29:41:2b:da:69: b9:5d:f7:c4:b8:9b:d2:03:ae:2f:f8:45:c6:ed:f2: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138456 151970 154346 sbgp-ipAddrBlock: critical IPv4: 103.126.24.0/24 103.152.206.0/24 IPv6: 2001:df7:3700::/46 Signature Algorithm: sha256WithRSAEncryption 76:d2:26:10:93:bb:9c:f0:7e:3d:90:47:1b:43:c1:0c:85:34: 18:0d:c6:18:0b:39:9e:b5:3b:06:53:08:db:77:62:1d:a0:7a: 9e:ce:a1:6d:22:48:55:24:96:e7:b7:82:0c:5e:f1:50:c5:a4: a3:18:28:fd:63:71:a7:34:51:66:fa:c1:71:c4:73:a3:96:7a: fc:6d:56:94:f5:c2:fb:b3:a5:b4:1a:63:68:a2:7c:dd:e4:da: fa:09:f6:1a:7e:01:65:6f:52:3b:d5:b1:d4:75:8f:48:9a:0a: b0:08:86:e6:c1:2d:b8:04:71:a2:3f:ac:f5:bb:1f:d5:1f:82: 97:cb:9d:e5:39:6e:21:da:3e:98:61:8e:cd:94:5c:55:bc:2a: f9:5c:6b:8f:16:65:c7:00:40:ec:4d:2d:8d:e7:69:ea:c3:47: f8:03:75:1c:ac:b8:ed:f3:7e:9e:87:12:b7:fa:3c:69:d4:16: e8:9e:9e:0c:63:2b:60:9a:a8:0a:d7:07:a0:c8:23:19:c6:d6: 4e:ad:a8:77:e9:6c:5f:a8:b8:0f:c3:9f:0f:da:5f:1c:14:0c: 7a:6f:ac:83:15:83:ae:16:aa:93:ca:03:99:89:8f:81:8a:f8: 6d:e4:d9:60:c5:8f:24:78:12:3f:cd:5e:e6:ce:51:eb:5a:79: 86:7a:8a:a5 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAoOnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNTAzNDcyMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0Yw ODFCNjY1MzYxOUI0RTJDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDwWNZbIMH0/sXmKtElZbGy807iYkFVUL8BC5MnbUieJe0mOwEEaJ5kS8UCCWJ ccaIpbqJNHpfVB/i8Q2nEf08jneBJIq9xP63pi3r3N09IIrAFyyyssMHUVZ05N/M LX1DNKdz+qgGd1bd9BMtlrmvz8Yc0pI8kt6eZpreHB96RcdWStTBHMrDdRV5oFeB lPv5m2LaPoENzQBLV2J/1UQYqVuM9i8+I1LIp+NrMEglS2gNaS74WOm9YCqUw+Av wtLj4qZe4luKXcftP/I1o9043vxhYLFRlW5mM20WlVKMYuKPG9bSWJ3+EyQpQSva abld98S4m9IDri/4Rcbt8iATAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUX48BYbes uyVfE88IG2ZTYZtOLAIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ5QTBELzBGQjc5MTY0RkIxNTExRUFCMDExRUM2RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJl c3V5VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAhzYAgMCUaICAwJa6jA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAME AGd+GAMEAGeYzjAPBAIAAjAJAwcCIAEN9zcAMA0GCSqGSIb3DQEBCwUAA4IBAQB2 0iYQk7uc8H49kEcbQ8EMhTQYDcYYCzmetTsGUwjbd2IdoHqezqFtIkhVJJbnt4IM XvFQxaSjGCj9Y3GnNFFm+sFxxHOjlnr8bVaU9cL7s6W0GmNoonzd5Nr6CfYafgFl b1I71bHUdY9ImgqwCIbmwS24BHGiP6z1ux/VH4KXy53lOW4h2j6YYY7NlFxVvCr5 XGuPFmXHAEDsTS2N52nqw0f4A3UcrLjt836ehxK3+jxp1Bbonp4MYytgmqgK1weg yCMZxtZOrah36WxfqLgPw58P2l8cFAx6b6yDFYOuFqqTygOZiY+Bivht5NlgxY8k eBI/zV7mzlHrWnmGeoql -----END CERTIFICATE-----Generated at Sun Jan 25 04:28:57 2026 by rpki-client