This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer File: _yC8N52JoNs75vzykPo91S63-iA.cer (raw, json) Hash identifier: Yh7rnWMo2VRvhbcEwU6kNILHPzeDGxxbFugEVzqkvaM= Subject key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02847A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 14:30:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135388 IP: 45.123.188.0/22 IP: 103.253.40.0/22 IP: 2001:df7:7000::/48 IP: 2407:8480::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164986 (0x2847a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 7 14:30:33 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:5f:7b:97:43:b2:ab:0d:89:89:a3:55:71: e6:7b:f0:8c:19:8b:b0:f9:2a:12:55:27:27:d5:2d: b3:35:f5:4f:bb:1d:23:aa:cc:9d:d3:7f:ff:d9:ef: c2:50:9f:6a:fe:54:67:e0:8c:04:4c:0d:3d:7f:bd: 72:9b:1d:07:95:22:37:13:ef:4f:f7:d0:cc:3b:fc: 56:1f:d3:c9:d9:d1:e6:a1:4d:7d:99:3c:5d:32:7c: 78:6c:e4:db:51:81:d1:4f:0c:dc:86:31:f6:04:78: 0e:33:93:f8:f3:75:2d:1a:3f:5a:4a:f5:93:5c:69: 7e:b0:9b:40:97:c2:c5:93:8e:f2:7d:fe:11:3f:7a: 48:78:3a:48:87:6a:3c:fd:46:18:89:47:de:a1:6e: bd:e1:93:8c:45:3b:f9:76:32:24:b1:38:dc:f9:8b: 16:8e:0e:90:c4:43:4a:e2:ca:82:49:e6:71:f3:4b: e2:3a:1b:fd:a8:c2:2d:67:ff:6a:23:65:d1:7a:9d: 4b:f1:10:ce:d5:eb:e4:a2:3c:d4:28:b5:58:6a:55: d9:03:6d:14:fd:7f:99:7f:02:39:13:f0:de:7b:36: 7e:73:29:4e:91:c5:74:81:b2:f7:5a:4b:9e:58:6b: 86:ba:50:ef:5c:b3:fc:c4:de:10:75:89:da:9f:49: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135388 sbgp-ipAddrBlock: critical IPv4: 45.123.188.0/22 103.253.40.0/22 IPv6: 2001:df7:7000::/48 2407:8480::/32 Signature Algorithm: sha256WithRSAEncryption 69:0b:01:80:9b:1c:08:4c:25:35:0f:e5:5e:56:c3:83:1b:5a: 0c:9f:a4:09:de:29:0f:3f:d4:8a:6f:fe:e7:c1:62:fb:15:b3: 15:45:a9:8b:38:82:4d:fd:0e:57:60:4d:83:e8:3a:77:09:38: a7:ab:0b:94:99:26:ce:25:e1:64:ca:a7:24:7c:e3:c2:3a:04: 9e:ed:4b:07:ed:8a:85:44:eb:c8:26:a3:05:12:ab:ca:7c:a8: 51:6e:cf:f9:43:b6:e0:ee:01:52:a8:bf:87:da:44:1d:5a:95: c7:32:d6:f6:b8:74:fa:05:80:fa:e7:7c:a5:3e:95:17:3f:61: dc:d0:85:b5:5d:7b:3e:7b:61:2a:31:bd:5e:04:c7:ed:66:71: 50:04:9c:d4:2b:6f:33:b2:5d:73:26:37:5c:48:d7:56:50:01: 07:31:d3:f4:ff:e6:ca:e1:9f:2e:01:8f:95:6b:8f:00:c4:11: bc:ec:27:ec:67:84:d2:ef:ff:7f:ba:74:4d:e7:69:de:88:a0: 5e:43:5d:f6:91:43:63:68:2c:d5:f7:22:18:f1:a7:f6:4d:10: bc:9f:ad:32:85:19:62:53:0b:fe:77:d5:0c:4c:dd:52:d3:30: 5b:07:ad:8a:c9:06:1e:fa:5d:d7:32:93:9f:aa:96:5c:ab:91: 3d:f9:3f:5a -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIDAoR6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNzE0MzAzM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRkM0RkIxMTAvBgNVBAUTKEZGMjBCQzM3OUQ4OUEwREIzQkU2RkNG MjkwRkEzREQ1MkVCN0ZBMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+3l97l0Oyqw2JiaNVceZ78IwZi7D5KhJVJyfVLbM19U+7HSOqzJ3Tf//Z78JQ n2r+VGfgjARMDT1/vXKbHQeVIjcT70/30Mw7/FYf08nZ0eahTX2ZPF0yfHhs5NtR gdFPDNyGMfYEeA4zk/jzdS0aP1pK9ZNcaX6wm0CXwsWTjvJ9/hE/ekh4OkiHajz9 RhiJR96hbr3hk4xFO/l2MiSxONz5ixaODpDEQ0riyoJJ5nHzS+I6G/2owi1n/2oj ZdF6nUvxEM7V6+SiPNQotVhqVdkDbRT9f5l/AjkT8N57Nn5zKU6RxXSBsvdaS55Y a4a6UO9cs/zE3hB1idqfSRERAgMBAAGjggMtMIIDKTAdBgNVHQ4EFgQU/yC8N52J oNs75vzykPo91S63+iAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZDNEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGQzRGQi8wOThGRTJFOERDREMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUy Sm9Oczc1dnp5a1BvOTFTNjMtaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhDcMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCLXu8AwQCZ/0o MBYEAgACMBADBwAgAQ33cAADBQAkB4SAMA0GCSqGSIb3DQEBCwUAA4IBAQBpCwGA mxwITCU1D+VeVsODG1oMn6QJ3ikPP9SKb/7nwWL7FbMVRamLOIJN/Q5XYE2D6Dp3 CTinqwuUmSbOJeFkyqckfOPCOgSe7UsH7YqFROvIJqMFEqvKfKhRbs/5Q7bg7gFS qL+H2kQdWpXHMtb2uHT6BYD653ylPpUXP2Hc0IW1XXs+e2EqMb1eBMftZnFQBJzU K28zsl1zJjdcSNdWUAEHMdP0/+bK4Z8uAY+Va48AxBG87CfsZ4TS7/9/unRN52ne iKBeQ132kUNjaCzV9yIY8af2TRC8n60yhRliUwv+d9UMTN1S0zBbB62KyQYe+l3X MpOfqpZcq5E9+T9a -----END CERTIFICATE-----Generated at Sun Jan 25 04:21:08 2026 by rpki-client