This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer File: _pmKu7E0uTwc5_hOi5--HdqbZKk.cer (raw, json) Hash identifier: zonineFh2ibkatW0eeJyZ3HeIWmN3I+w/aR4MVei+18= Subject key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0280D9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft caRepository: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 25 Dec 2025 09:33:04 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 103.48.164.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164057 (0x280d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 25 09:33:04 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9f:9b:2b:84:1f:49:c7:e1:49:58:0d:f5:60: 27:e4:d6:13:7b:5a:55:72:4e:f9:ce:fd:1d:ed:33: 9e:17:e1:e5:46:e2:ef:e3:20:f9:94:2b:65:b4:c3: 6c:1f:60:6c:1f:30:fa:a1:f3:92:01:1b:59:2a:87: 9a:7e:2b:e9:6a:a7:87:8d:06:31:2c:d6:fa:66:6e: 92:bc:46:9e:04:01:7d:f8:e0:76:dc:9e:fd:b5:06: 11:56:2a:60:ee:29:54:a6:29:a8:8d:bc:1c:4c:b4: 82:12:15:70:20:ba:8e:2c:e5:5f:15:b8:d5:8c:d2: 80:73:88:45:d3:0e:ec:c3:8f:4e:83:af:04:cd:4d: 33:00:61:c7:02:ca:1e:c9:83:1e:b3:d7:02:f5:3e: af:1d:34:a3:0f:32:7a:ac:64:76:9e:cd:19:5a:99: e3:84:ad:8f:ea:83:eb:7b:81:db:02:4c:8c:e3:5e: 78:23:74:0c:95:46:94:1e:03:a8:c3:ae:d2:36:07: 1a:e7:30:22:9f:53:d6:fd:d3:32:6f:61:20:99:30: 38:a2:49:88:a2:e1:08:de:16:3f:ce:a0:3b:f1:87: 40:5d:59:ed:9d:5a:46:68:06:df:2f:c0:67:3f:1e: 0a:b8:f8:e9:2d:cb:d7:e3:a6:e2:53:2f:0c:11:fa: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.164.0/22 Signature Algorithm: sha256WithRSAEncryption 01:e3:74:c4:ec:40:5b:b8:20:6f:c2:f6:e6:77:ad:22:0b:dc: 05:ee:b2:d2:a5:63:e8:dc:32:dc:59:9a:ef:a5:62:46:9b:d0: 98:66:ec:3f:d6:c6:8d:e6:22:e6:d5:b5:e5:24:26:25:a5:19: e5:2f:d5:c6:4d:e1:dd:76:64:6e:68:4c:3a:1e:9f:00:ec:6a: f0:e8:f0:dc:0b:fb:94:23:36:0a:2d:40:1e:74:b4:d1:7c:97: d9:7a:3d:19:ee:a1:f5:e9:0f:5d:f7:5c:58:cc:a7:3e:29:a3: f9:34:f4:b0:94:bc:75:c5:7b:19:16:d0:c3:56:0b:e6:2f:45: 5f:fc:c0:e7:0d:a0:e0:d7:50:5b:30:6f:c3:a8:74:48:37:d0: 6a:c0:2c:c9:3c:72:a3:73:e5:86:55:93:e7:7c:2f:b7:83:d6: 6c:7e:06:5d:a3:f4:ad:d5:d5:15:d6:d1:db:16:44:71:04:67: 23:5f:a2:6c:05:fd:92:9a:76:a4:da:49:0f:ad:7a:dd:47:3f: 39:23:6f:d0:3e:d8:ff:01:04:84:9f:a0:98:5a:7c:bd:da:2f: 83:55:db:0f:ed:fa:30:4d:28:ff:0f:ef:46:72:23:bd:11:ce: 23:76:87:9e:80:4c:ae:a9:f7:99:06:cb:1a:7e:09:cd:34:4c: b0:1f:a7:bd -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAoDZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNTA5MzMwNFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUFCQTIxMTAvBgNVBAUTKEZFOTk4QUJCQjEzNEI5M0MxQ0U3Rjg0 RThCOUZCRTFEREE5QjY0QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtn5srhB9Jx+FJWA31YCfk1hN7WlVyTvnO/R3tM54X4eVG4u/jIPmUK2W0w2wf YGwfMPqh85IBG1kqh5p+K+lqp4eNBjEs1vpmbpK8Rp4EAX344Hbcnv21BhFWKmDu KVSmKaiNvBxMtIISFXAguo4s5V8VuNWM0oBziEXTDuzDj06DrwTNTTMAYccCyh7J gx6z1wL1Pq8dNKMPMnqsZHaezRlameOErY/qg+t7gdsCTIzjXngjdAyVRpQeA6jD rtI2BxrnMCKfU9b90zJvYSCZMDiiSYii4QjeFj/OoDvxh0BdWe2dWkZoBt8vwGc/ Hgq4+Okty9fjpuJTLwwR+uDpAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU/pmKu7E0 uTwc5/hOi5++HdqbZKkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFBQkEyL0I0NDM2MEM4RTE3NDExRjBBNTQxRDAyRDNFNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQUJBMi9CNDQzNjBDOEUxNzQxMUYwQTU0MUQwMkQzRTZGNTZCQy9fcG1LdTdF MHVUd2M1X2hPaTUtLUhkcWJaS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJnMKQwDQYJKoZIhvcNAQELBQADggEBAAHjdMTsQFu4IG/C9uZ3 rSIL3AXustKlY+jcMtxZmu+lYkab0Jhm7D/Wxo3mIubVteUkJiWlGeUv1cZN4d12 ZG5oTDoenwDsavDo8NwL+5QjNgotQB50tNF8l9l6PRnuofXpD133XFjMpz4po/k0 9LCUvHXFexkW0MNWC+YvRV/8wOcNoODXUFswb8OodEg30GrALMk8cqNz5YZVk+d8 L7eD1mx+Bl2j9K3V1RXW0dsWRHEEZyNfomwF/ZKadqTaSQ+tet1HPzkjb9A+2P8B BISfoJhafL3aL4NV2w/t+jBNKP8P70ZyI70RziN2h56ATK6p95kGyxp+Cc00TLAf p70= -----END CERTIFICATE-----Generated at Sun Jan 25 01:12:05 2026 by rpki-client