This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.cer (raw, json) Hash identifier: YL+HZpAN1X8Dv4BDG+6zwXt4pA3mBQmab8S1F/DRaR8= Subject key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0287C3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft caRepository: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:42:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139928 IP: 103.147.110.0/23 IP: 2001:df2:9380::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165827 (0x287c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 21 13:42:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:81:e4:22:6c:51:8a:d0:0e:80:6a:e0:64: 09:c9:89:ed:89:04:11:45:18:e2:9d:d0:b3:d9:cd: f1:c3:a9:28:46:4c:db:4d:ba:c0:33:03:66:c7:fa: 30:b1:e2:be:9b:9b:ae:36:08:5b:4f:ad:74:02:62: 96:25:a1:eb:8e:54:e8:1f:a8:54:1e:e6:a4:72:42: 6d:a3:47:25:94:88:0b:9f:89:00:fa:be:47:5e:fb: 02:2d:59:3c:d9:39:03:a2:15:a4:3f:08:ba:a7:66: 78:f4:fd:98:7c:57:35:f2:d9:bb:e8:65:ad:46:c7: 61:d6:ff:ce:1c:70:e3:f9:e2:3e:25:10:39:4c:b6: 09:e1:e3:f4:15:4c:9e:ef:1e:29:6b:50:dd:07:26: d2:5d:2a:63:be:b6:6d:6d:11:06:ff:fc:d4:bc:93: 7f:00:1e:09:7e:cf:76:60:8a:c8:64:c1:2d:dc:49: 0a:02:c1:e9:48:53:a7:ce:88:11:96:b0:8f:e2:00: e5:69:bb:f6:63:2b:ac:f4:eb:82:78:2c:d8:0b:91: 4c:60:b6:e8:49:d0:2e:92:37:4b:6f:86:c6:a3:b4: 47:66:62:da:c0:66:5d:85:45:16:d5:2f:93:83:e6: c0:b4:b2:8a:dd:70:15:fb:52:c2:eb:ad:d9:80:09: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139928 sbgp-ipAddrBlock: critical IPv4: 103.147.110.0/23 IPv6: 2001:df2:9380::/48 Signature Algorithm: sha256WithRSAEncryption a2:9c:44:f9:01:4f:5c:2b:5a:df:7d:d5:2c:4d:4e:a5:f8:77: 1d:52:a1:d4:83:10:f8:91:08:40:87:8f:e8:fa:f1:49:9f:86: 37:db:a4:01:b8:e7:59:ff:f7:0a:18:be:57:b9:6f:3a:f9:11: f0:4f:94:59:4c:a0:8e:9f:44:b2:aa:0a:57:70:25:72:13:37: bf:44:0c:eb:65:56:a4:f7:37:da:59:46:11:92:3e:df:28:81: e5:8a:f2:dc:27:1b:7c:e0:ab:c8:da:d1:ec:b9:cf:be:e6:50: cf:43:14:fb:ff:63:c0:7a:13:9c:b5:10:60:b4:44:b6:35:70: 7b:4d:5a:88:dd:50:00:08:39:ca:db:6d:db:3e:49:f5:9d:2f: f9:a8:57:a0:f4:1f:d7:7a:24:f6:a2:92:d9:b2:02:69:15:0c: c1:8a:e5:3f:4f:35:40:76:f3:50:86:03:67:80:9d:1c:98:a0: 47:31:ae:11:ae:8c:1a:d7:ca:00:7f:bf:d6:10:93:98:fe:ba: 34:09:d6:6b:37:50:52:7f:71:48:5a:40:35:64:8a:b5:a2:04: ef:b5:2e:97:2f:fc:27:9a:fc:68:b9:4c:33:04:21:04:59:f1: f6:21:f3:3c:52:54:b9:89:77:18:6a:d3:5e:28:60:32:c6:bf: 45:e0:91:9e -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAofDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMTEzNDI0MloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JC NEM1OUJDQkZCNkQwNjkzRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzWIHkImxRitAOgGrgZAnJie2JBBFFGOKd0LPZzfHDqShGTNtNusAzA2bH+jCx 4r6bm642CFtPrXQCYpYloeuOVOgfqFQe5qRyQm2jRyWUiAufiQD6vkde+wItWTzZ OQOiFaQ/CLqnZnj0/Zh8VzXy2bvoZa1Gx2HW/84ccOP54j4lEDlMtgnh4/QVTJ7v HilrUN0HJtJdKmO+tm1tEQb//NS8k38AHgl+z3ZgishkwS3cSQoCwelIU6fOiBGW sI/iAOVpu/ZjK6z064J4LNgLkUxgtuhJ0C6SN0tvhsajtEdmYtrAZl2FRRbVL5OD 5sC0sordcBX7UsLrrdmACUXfAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU/cYTVRXV 0BXJRDu0xZvL+20Gk9EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlERjZGL0RBNDBBOEU4NDI5ODExRUFCN0EyMkExMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJY VjBCWEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiKYMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5NuMA8EAgAC MAkDBwAgAQ3yk4AwDQYJKoZIhvcNAQELBQADggEBAKKcRPkBT1wrWt991SxNTqX4 dx1SodSDEPiRCECHj+j68UmfhjfbpAG451n/9woYvle5bzr5EfBPlFlMoI6fRLKq CldwJXITN79EDOtlVqT3N9pZRhGSPt8ogeWK8twnG3zgq8ja0ey5z77mUM9DFPv/ Y8B6E5y1EGC0RLY1cHtNWojdUAAIOcrbbds+SfWdL/moV6D0H9d6JPaiktmyAmkV DMGK5T9PNUB281CGA2eAnRyYoEcxrhGujBrXygB/v9YQk5j+ujQJ1ms3UFJ/cUha QDVkirWiBO+1Lpcv/Cea/Gi5TDMEIQRZ8fYh8zxSVLmJdxhq014oYDLGv0XgkZ4= -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:59 2026 by rpki-client