This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.cer (raw, json) Hash identifier: zN6M7CQovO2+NPn1zc6l2nIMzkE2lWljpu4n0Qescf0= Subject key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282EE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:11:28 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133526 IP: 27.0.192.0/22 IP: 43.243.220.0/22 IP: 45.113.160.0/22 IP: 45.116.212.0/22 IP: 45.120.184.0/22 IP: 103.13.220.0/22 IP: 103.57.24.0/22 IP: 103.61.0.0/22 IP: 103.79.52.0/22 IP: 103.80.124.0/22 IP: 103.123.160.0/22 IP: 103.208.32.0/22 IP: 103.229.180.0/22 IP: 103.233.184.0/22 IP: 116.193.152.0/22 IP: 202.53.136.0/22 IP: 2400:5340::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164590 (0x282ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 14:11:28 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:55:0d:dd:89:47:c7:7b:2b:c5:62:97:66: e1:fc:92:83:bd:b5:29:96:b0:c0:cd:1a:46:65:d9: c7:90:e5:ae:57:a5:34:56:49:19:26:50:a2:b7:27: 33:df:eb:4f:89:e8:61:0a:ea:bc:98:07:c0:c9:ef: 2d:e8:41:3f:d9:d8:8c:64:80:73:9d:4c:b6:6e:3c: 35:18:fc:78:f2:aa:18:49:7c:05:60:05:58:b3:25: 65:c7:8e:6b:76:dd:e1:67:d4:07:56:43:d9:be:e3: 35:34:cb:8e:18:89:67:7b:d1:fa:e7:5e:1f:93:b9: 70:36:a1:d3:43:98:fb:c3:74:6c:bd:81:6d:60:29: 5b:24:32:18:60:60:53:43:07:d9:f6:a7:2d:6a:a7: c7:99:f2:68:73:91:9f:e8:7b:1e:b8:5c:91:46:e7: 16:7b:92:b9:a7:a6:c3:43:a2:fb:8b:ee:03:38:d5: b5:d5:61:2c:82:85:e5:9d:7c:2c:9d:6e:3e:5c:3e: 54:3c:73:71:a3:9a:06:fa:16:e5:65:ce:e3:82:15: 9e:93:0f:e8:0e:1e:4a:57:93:28:9d:33:12:e3:3d: 5f:ff:97:20:90:20:fe:bc:a7:9b:ee:04:44:55:cb: 7b:ce:db:5b:67:1b:34:20:6a:e0:8d:ef:74:d2:43: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133526 sbgp-ipAddrBlock: critical IPv4: 27.0.192.0/22 43.243.220.0/22 45.113.160.0/22 45.116.212.0/22 45.120.184.0/22 103.13.220.0/22 103.57.24.0/22 103.61.0.0/22 103.79.52.0/22 103.80.124.0/22 103.123.160.0/22 103.208.32.0/22 103.229.180.0/22 103.233.184.0/22 116.193.152.0/22 202.53.136.0/22 IPv6: 2400:5340::/32 Signature Algorithm: sha256WithRSAEncryption 18:ea:a4:57:5d:8d:3a:94:3b:29:ca:44:b7:c1:14:6a:de:6c: 32:b3:83:b3:6f:25:94:41:9e:32:21:dd:83:24:24:58:3a:8b: c0:80:f9:86:94:86:b7:1f:93:03:5d:b8:11:a1:f4:62:a3:72: 50:bf:a2:96:b8:ca:6d:d0:a8:0d:17:e9:f8:b0:a6:e0:23:ab: 96:f0:d5:b3:4d:4d:25:ca:25:b7:3f:09:90:1a:8e:53:62:ca: 06:e1:44:bf:01:31:8c:0d:7f:20:90:fb:d4:8a:5c:96:71:bd: 0e:88:23:4a:cb:cf:2c:24:5d:63:30:8d:e1:62:1d:d9:06:dd: 49:bc:cd:2c:7a:2c:3b:f4:3e:9f:12:b6:01:3f:9b:b8:ff:e8: 31:db:0d:e0:15:6c:94:04:7e:e9:ce:9c:cb:fa:46:81:5c:1e: 4f:b9:7f:f1:a8:2d:92:0d:29:b7:2f:1e:95:f0:7f:d4:1a:de: b2:b5:24:ca:3a:ec:df:54:ac:53:b1:16:df:3e:b4:8e:c1:f6: 19:45:2f:c4:0a:0b:3e:ae:1b:80:55:47:74:b8:02:3f:2b:8e: b0:ab:2e:a1:e3:fa:a5:3e:ae:ac:29:72:30:50:f9:42:cd:62: f8:71:59:dd:cc:f7:80:34:de:b1:ab:b9:4a:4a:cd:15:da:34: 27:a4:00:d8 -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIDAoLuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTE0MTEyOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTE4NTMxMTAvBgNVBAUTKEZEOTE0N0FFRjZBMzMwRDE4REQ0QzlD RkQ4NjQyRjBFREFBN0I5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvNFUN3YlHx3srxWKXZuH8koO9tSmWsMDNGkZl2ceQ5a5XpTRWSRkmUKK3JzPf 60+J6GEK6ryYB8DJ7y3oQT/Z2IxkgHOdTLZuPDUY/HjyqhhJfAVgBVizJWXHjmt2 3eFn1AdWQ9m+4zU0y44YiWd70frnXh+TuXA2odNDmPvDdGy9gW1gKVskMhhgYFND B9n2py1qp8eZ8mhzkZ/oex64XJFG5xZ7krmnpsNDovuL7gM41bXVYSyCheWdfCyd bj5cPlQ8c3Gjmgb6FuVlzuOCFZ6TD+gOHkpXkyidMxLjPV//lyCQIP68p5vuBERV y3vO21tnGzQgauCN73TSQ0EhAgMBAAGjggN5MIIDdTAdBgNVHQ4EFgQU/ZFHrvaj MNGN1MnP2GQvDtqnuQcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMTg1My8xQUIxNUI4Q0JEQjAxMUYwODdFREU5MjlDNEY5QUUwMi9fWkZIcnZh ak1OR04xTW5QMkdRdkR0cW51UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgmWMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAhsAwAMEAivz 3AMEAi1xoAMEAi101AMEAi14uAMEAmcN3AMEAmc5GAMEAmc9AAMEAmdPNAMEAmdQ fAMEAmd7oAMEAmfQIAMEAmfltAMEAmfpuAMEAnTBmAMEAso1iDANBAIAAjAHAwUA JABTQDANBgkqhkiG9w0BAQsFAAOCAQEAGOqkV12NOpQ7KcpEt8EUat5sMrODs28l lEGeMiHdgyQkWDqLwID5hpSGtx+TA124EaH0YqNyUL+ilrjKbdCoDRfp+LCm4COr lvDVs01NJcoltz8JkBqOU2LKBuFEvwExjA1/IJD71IpclnG9DogjSsvPLCRdYzCN 4WId2QbdSbzNLHosO/Q+nxK2AT+buP/oMdsN4BVslAR+6c6cy/pGgVweT7l/8agt kg0pty8elfB/1BresrUkyjrs31SsU7EW3z60jsH2GUUvxAoLPq4bgFVHdLgCPyuO sKsuoeP6pT6urClyMFD5Qs1i+HFZ3cz3gDTesau5SkrNFdo0J6QA2A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:31 2026 by rpki-client