This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer File: a-Q-axOWQ8tMGebfcyO1A8STEds.cer (raw, json) Hash identifier: moRwsaou2lxnoH7mSaR3mPDZYMXd2VutZZATrrAAstI= Subject key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286A4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:25:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 58779 AS: 59237 AS: 59337 AS: 132790 AS: 133027 IP: 43.243.224.0/22 IP: 43.252.168.0/22 IP: 103.241.16.0/22 IP: 103.244.52.0/22 IP: 2405:ef00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165540 (0x286a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 14:25:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:ab:3b:1b:a1:38:36:1f:22:4f:8f:53:fb: ca:cb:3b:72:9f:4f:27:2f:c4:09:46:37:27:5b:0e: 21:3e:82:87:82:2f:ed:27:ef:c7:44:5c:79:91:53: 03:3c:9a:36:2a:52:c5:84:d9:52:53:5d:4b:d7:6b: 1d:f7:8e:f2:64:82:04:d3:de:4e:7a:df:c0:62:55: a1:78:81:be:44:ab:56:74:20:0c:49:28:f2:de:50: 6a:03:3f:9c:75:4d:2c:dd:80:01:c4:51:6f:fa:8b: 18:25:ad:4b:ad:cc:bf:5f:20:63:70:5a:ef:26:0c: 6e:fb:e2:3d:af:67:c1:ad:de:77:18:8a:eb:b8:17: 77:4e:59:a3:19:7b:17:f5:19:f0:b9:7e:bc:9d:28: 8f:1e:c8:51:22:d9:33:75:cf:8d:0c:a3:f7:5b:02: 81:94:73:ed:d5:c9:ce:70:8f:3f:85:9b:1d:d8:17: 2e:0c:a6:0c:a7:08:ca:4a:cc:f3:68:a9:e2:3f:de: 72:26:55:0e:25:fd:8b:67:ba:b3:fc:40:3e:8c:10: 86:fd:b5:de:48:e7:4a:95:36:4b:b9:e4:79:71:0d: 61:db:41:6d:de:66:5f:2a:13:0c:4e:2d:1f:4c:95: 97:5f:a0:44:ef:f1:86:e0:58:14:92:bc:f6:ab:85: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58779 59237 59337 132790 133027 sbgp-ipAddrBlock: critical IPv4: 43.243.224.0/22 43.252.168.0/22 103.241.16.0/22 103.244.52.0/22 IPv6: 2405:ef00::/32 Signature Algorithm: sha256WithRSAEncryption d5:61:35:1c:53:b1:06:25:01:64:e6:9b:c9:80:b4:29:e0:7c: be:13:1e:21:4d:74:8d:17:e1:8a:0d:28:54:68:93:2b:36:2f: 01:28:5d:d7:78:81:7e:b7:13:3a:d8:39:d0:dc:62:a9:86:e5: 92:54:0a:d6:62:44:91:8e:7f:2e:50:f4:4e:95:3c:ae:38:b4: 26:3d:97:79:d5:78:94:aa:db:df:ab:38:68:b6:d9:86:ed:e6: b0:6e:2a:cb:34:d9:69:fb:79:e0:d0:2e:80:17:72:3f:73:5b: 30:a5:6b:67:c6:bc:2c:85:ff:ee:de:0b:da:e0:73:2b:ad:8b: 63:bf:5d:90:54:cc:aa:53:e8:72:2f:cf:3d:72:98:8d:d4:13: 6b:57:71:fe:5c:a1:78:b2:a1:85:ca:2c:5b:27:38:38:89:40: 72:cb:91:d2:50:d0:f9:b7:7d:d2:e6:02:a6:f9:1b:e7:bc:c7: 59:6c:9a:84:28:be:a3:42:32:8f:cd:b2:00:58:b3:0d:cf:c4: e5:35:a8:2d:60:93:22:cc:05:07:d8:8a:24:d2:39:62:ac:97: 0c:ff:02:74:98:d6:51:f2:ba:32:05:d3:19:b7:18:f4:c9:1d: 21:3d:5e:85:d6:15:68:71:c4:d0:0f:22:21:d7:e7:3a:97:33: ca:aa:02:d2 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIDAoakMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTE0MjUyM1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZE RjczMjNCNTAzQzQ5MzExREIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC18qs7G6E4Nh8iT49T+8rLO3KfTycvxAlGNydbDiE+goeCL+0n78dEXHmRUwM8 mjYqUsWE2VJTXUvXax33jvJkggTT3k5638BiVaF4gb5Eq1Z0IAxJKPLeUGoDP5x1 TSzdgAHEUW/6ixglrUutzL9fIGNwWu8mDG774j2vZ8Gt3ncYiuu4F3dOWaMZexf1 GfC5frydKI8eyFEi2TN1z40Mo/dbAoGUc+3Vyc5wjz+Fmx3YFy4MpgynCMpKzPNo qeI/3nImVQ4l/YtnurP8QD6MEIb9td5I50qVNku55HlxDWHbQW3eZl8qEwxOLR9M lZdfoETv8YbgWBSSvParhYzpAgMBAAGjggNEMIIDQDAdBgNVHQ4EFgQUa+Q+axOW Q8tMGebfcyO1A8STEdswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU4RDI3L0MwQzU4MDcwNDJFOTExRTI5NzUwQTMyRTI5NzlCQjIwLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFOEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhP V1E4dE1HZWJmY3lPMUE4U1RFZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQgBAf8EHzAd oBswGQIDAOWbAgMA52UCAwDnyQIDAga2AgMCB6MwQAYIKwYBBQUHAQcBAf8EMTAv MB4EAgABMBgDBAIr8+ADBAIr/KgDBAJn8RADBAJn9DQwDQQCAAIwBwMFACQF7wAw DQYJKoZIhvcNAQELBQADggEBANVhNRxTsQYlAWTmm8mAtCngfL4THiFNdI0X4YoN KFRokys2LwEoXdd4gX63EzrYOdDcYqmG5ZJUCtZiRJGOfy5Q9E6VPK44tCY9l3nV eJSq29+rOGi22Ybt5rBuKss02Wn7eeDQLoAXcj9zWzCla2fGvCyF/+7eC9rgcyut i2O/XZBUzKpT6HIvzz1ymI3UE2tXcf5coXiyoYXKLFsnODiJQHLLkdJQ0Pm3fdLm Aqb5G+e8x1lsmoQovqNCMo/NsgBYsw3PxOU1qC1gkyLMBQfYiiTSOWKslwz/AnSY 1lHyujIF0xm3GPTJHSE9XoXWFWhxxNAPIiHX5zqXM8qqAtI= -----END CERTIFICATE-----Generated at Sun Jan 25 04:26:39 2026 by rpki-client