This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer File: aFEZgfy52vrY49MDBLtBqW-5p28.cer (raw, json) Hash identifier: kVspFVd3yrZsgXyXe1tQa16ZyFZ4zJIJYX2niOj/5uw= Subject key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02832E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft caRepository: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 13:36:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137267 AS: 147051 IP: 103.106.110.0/23 IP: 203.27.18.0/24 IP: 203.33.188.0/24 IP: 2001:df3:a300::/48 IP: 2400:1360::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164654 (0x2832e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 13:36:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:6c:7b:ec:9c:35:db:36:44:d2:a9:ad:66: a6:52:d0:23:f5:3d:74:00:02:ef:1a:de:bc:eb:49: df:30:61:66:39:a9:f8:fa:41:00:57:48:94:aa:73: 0c:fc:d9:ab:2c:1e:9a:21:c3:07:5f:38:f6:ea:18: e4:8f:09:7c:8d:94:c5:73:28:f2:8e:6c:f0:29:69: 0e:a3:af:45:28:fc:e4:90:7a:2b:98:71:c1:d9:22: 85:ce:e5:d8:75:3a:82:6a:cc:6f:6b:15:dc:d1:30: 5c:9d:2c:36:e8:48:2d:82:12:48:c6:64:0b:2f:bb: 33:7d:6f:96:24:36:d0:0c:5e:42:b5:b6:da:c4:82: 3f:52:b6:36:5f:0d:d1:02:48:2f:11:5b:82:4a:f4: cf:e4:ad:49:ba:30:5a:8c:5d:26:e0:4e:e4:c1:80: f6:cd:ca:d7:75:c5:5d:f1:4d:8e:19:56:2f:cd:2b: a0:9b:c8:7a:19:48:cc:87:20:17:16:1c:de:0e:79: 12:70:35:dc:28:f6:d0:ba:0f:17:6b:5e:8b:af:00: 86:c9:89:48:3f:61:3a:04:26:00:e8:14:df:12:4a: 3a:31:06:aa:c2:44:15:00:fc:a1:76:26:f2:95:82: 79:53:6a:ca:7a:81:81:a7:24:91:0c:a9:99:07:46: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137267 147051 sbgp-ipAddrBlock: critical IPv4: 103.106.110.0/23 203.27.18.0/24 203.33.188.0/24 IPv6: 2001:df3:a300::/48 2400:1360::/32 Signature Algorithm: sha256WithRSAEncryption 9b:fb:90:26:26:a0:cf:e0:5d:71:8d:ae:6e:5e:13:58:f9:2e: 5c:5c:bb:32:94:37:a9:4a:95:d9:4e:aa:bb:39:05:3a:e4:a2: 99:2c:16:f1:9f:ac:28:96:59:52:50:8d:1d:f0:27:7c:0e:fc: 4e:da:41:4e:72:87:81:fd:3e:2a:56:35:18:4e:4b:60:01:a0: 49:7b:7c:85:94:8e:aa:8f:9b:1a:90:e7:44:6d:24:37:ac:91: b1:66:cf:01:ff:a3:c5:d0:cb:54:1d:bc:6d:8c:20:b9:ff:62: 94:a0:ce:ce:45:c4:63:45:f1:13:11:92:10:96:66:59:2f:6a: a3:1c:f6:99:b8:d3:12:57:cb:b4:cd:b1:0c:88:f4:88:3f:98: 27:5b:e2:2b:bf:31:00:10:40:bb:23:99:b2:27:53:0a:b5:3a: 7f:a2:cb:40:c6:4c:51:a1:08:c7:e2:5a:fd:f6:40:a2:1b:74: a0:c7:1b:79:11:e4:5a:b6:12:b4:c3:f1:89:68:30:b9:a2:23: 12:00:54:89:ae:93:cc:e7:41:d6:fc:84:c1:44:8d:c4:02:cb: 98:a9:94:f3:d3:7d:3c:97:6e:b1:5a:e2:89:72:cd:d2:c0:7c: 61:c3:9a:77:ba:2e:98:9b:4d:35:9b:59:d4:07:b5:26:bc:cc: eb:e2:c9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIDAoMuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjEzMzYzNFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxODE5NkQxMTAvBgNVBAUTKDY4NTExOTgxRkNCOURBRkFEOEUzRDMw MzA0QkI0MUE5NkZCOUE3NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGGWx77Jw12zZE0qmtZqZS0CP1PXQAAu8a3rzrSd8wYWY5qfj6QQBXSJSqcwz8 2assHpohwwdfOPbqGOSPCXyNlMVzKPKObPApaQ6jr0Uo/OSQeiuYccHZIoXO5dh1 OoJqzG9rFdzRMFydLDboSC2CEkjGZAsvuzN9b5YkNtAMXkK1ttrEgj9StjZfDdEC SC8RW4JK9M/krUm6MFqMXSbgTuTBgPbNytd1xV3xTY4ZVi/NK6CbyHoZSMyHIBcW HN4OeRJwNdwo9tC6DxdrXouvAIbJiUg/YToEJgDoFN8SSjoxBqrCRBUA/KF2JvKV gnlTasp6gYGnJJEMqZkHRotPAgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQUaFEZgfy5 2vrY49MDBLtBqW+5p28wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgxOTZELzYyMDJBQTNFNDExMDExRUM5OTM5QzAwRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MTk2RC82MjAyQUEzRTQxMTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5 NTJ2clk0OU1EQkx0QnFXLTVwMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAhgzAgMCPmswQwYIKwYBBQUHAQcBAf8ENDAyMBgEAgABMBIDBAFnam4D BADLGxIDBADLIbwwFgQCAAIwEAMHACABDfOjAAMFACQAE2AwDQYJKoZIhvcNAQEL BQADggEBAJv7kCYmoM/gXXGNrm5eE1j5LlxcuzKUN6lKldlOqrs5BTrkopksFvGf rCiWWVJQjR3wJ3wO/E7aQU5yh4H9PipWNRhOS2ABoEl7fIWUjqqPmxqQ50RtJDes kbFmzwH/o8XQy1QdvG2MILn/YpSgzs5FxGNF8RMRkhCWZlkvaqMc9pm40xJXy7TN sQyI9Ig/mCdb4iu/MQAQQLsjmbInUwq1On+iy0DGTFGhCMfiWv32QKIbdKDHG3kR 5Fq2ErTD8YloMLmiIxIAVImuk8znQdb8hMFEjcQCy5iplPPTfTyXbrFa4olyzdLA fGHDmne6LpibTTWbWdQHtSa8zOviybw= -----END CERTIFICATE-----Generated at Sun Jan 25 02:54:31 2026 by rpki-client