This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer (raw, json) Hash identifier: EIPIHgdwkUxSLRGlTmj8Orv3QwAJa25k5MRDPQmty5I= Subject key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0285D0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft caRepository: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 12:23:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134991 IP: 103.205.0.0/22 IP: 203.76.236.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165328 (0x285d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 13 12:23:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:fc:ce:ef:b1:5f:2f:04:49:2c:eb:89:a0: 64:70:de:7b:70:da:0b:74:bb:5b:6f:ae:25:4e:ad: ff:6f:68:58:14:a0:53:91:ca:8f:b3:f6:71:7b:6d: 11:81:75:51:f2:45:4b:cc:f5:ab:14:79:61:27:0d: ff:41:72:1b:81:32:38:a0:4c:72:03:78:f3:83:ee: ec:12:30:e7:c9:f6:4e:ad:93:f3:3a:69:24:f3:53: 0e:39:01:d3:ad:c6:0b:2f:9f:98:91:d5:35:c3:cb: 19:d8:1e:73:8e:9d:e1:e7:26:f5:95:59:25:fc:3b: 9d:04:9c:ad:e3:6c:cd:1e:56:3e:a8:00:0e:be:f5: 31:5e:e5:c5:d3:47:77:0a:17:eb:3f:d4:46:e8:3b: 23:d6:07:18:c1:73:6d:02:00:db:4f:8e:94:fd:99: e3:3f:0e:ab:13:a9:98:79:40:19:91:ca:63:ae:7c: 39:2e:c2:b3:ef:43:9e:fc:b8:25:58:e0:80:3b:d3: a5:d6:db:ac:8c:74:8a:fd:b5:f0:4d:95:3c:7b:4a: be:66:79:61:3c:72:6f:b9:25:b9:0b:c1:01:84:dc: 83:16:8e:c1:f7:b1:83:dd:c4:36:82:70:9c:7a:f5: 94:ae:56:bd:b7:33:4f:b6:ce:f8:6b:6b:9f:0b:16: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134991 sbgp-ipAddrBlock: critical IPv4: 103.205.0.0/22 203.76.236.0/22 Signature Algorithm: sha256WithRSAEncryption a6:3f:0c:01:ab:2f:60:eb:2a:86:8a:78:17:cf:54:d9:9b:3c: 3a:64:80:4e:b9:80:5f:08:2d:18:33:a0:df:f8:2b:d0:e6:31: 53:91:0d:c3:0a:a9:1a:45:cd:3d:3b:b2:9b:ce:68:d7:03:fa: cd:62:27:51:ef:b4:32:7a:68:38:6d:dc:21:44:ba:2e:c1:bd: e1:08:ea:ef:73:2c:ef:77:93:5f:53:de:9e:a3:52:f0:63:dc: 40:06:c8:4c:2e:a6:89:f6:79:50:b0:4f:c7:3a:64:01:8c:6e: e6:ed:e1:c2:c1:0e:a3:31:bb:cc:0f:ce:05:ca:f0:5a:e8:c0: 1d:28:be:34:fc:7e:91:73:e8:83:db:9d:7f:6d:a6:1b:58:7f: 4f:6b:f9:71:d9:76:07:bb:47:c3:9f:83:e3:8f:d9:b6:62:60: 58:a9:ba:31:9e:47:e0:f1:17:52:dc:f9:9b:e1:b5:4b:f1:21: 07:68:a5:38:6b:2d:2c:22:31:76:5f:53:a2:84:54:99:ce:b1: e9:94:bc:98:f3:fe:79:55:c2:ea:3e:4d:72:85:44:8d:34:65: c2:8a:25:28:5a:ff:8c:6c:f0:78:10:95:9f:02:2b:da:f5:5a: 40:71:b3:ed:30:26:f7:73:92:9b:da:e4:c1:d3:2f:35:c8:73: 0f:06:f3:b9 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoXQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMzEyMjMxM1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0 RkMzQTJEQ0Y1NDg1RTdERjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl0PzO77FfLwRJLOuJoGRw3ntw2gt0u1tvriVOrf9vaFgUoFORyo+z9nF7bRGB dVHyRUvM9asUeWEnDf9BchuBMjigTHIDePOD7uwSMOfJ9k6tk/M6aSTzUw45AdOt xgsvn5iR1TXDyxnYHnOOneHnJvWVWSX8O50EnK3jbM0eVj6oAA6+9TFe5cXTR3cK F+s/1EboOyPWBxjBc20CANtPjpT9meM/DqsTqZh5QBmRymOufDkuwrPvQ578uCVY 4IA706XW26yMdIr9tfBNlTx7Sr5meWE8cm+5JbkLwQGE3IMWjsH3sYPdxDaCcJx6 9ZSuVr23M0+2zvhra58LFupRAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUaHdB3hXN iDwQ3bxPw6Lc9UheffMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE0RDRGLzBFM0FDQ0ZDNUI5QzExRUY5QjE1NDk0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hY TmlEd1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg9PMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ80AAwQCy0zs MA0GCSqGSIb3DQEBCwUAA4IBAQCmPwwBqy9g6yqGingXz1TZmzw6ZIBOuYBfCC0Y M6Df+CvQ5jFTkQ3DCqkaRc09O7KbzmjXA/rNYidR77Qyemg4bdwhRLouwb3hCOrv cyzvd5NfU96eo1LwY9xABshMLqaJ9nlQsE/HOmQBjG7m7eHCwQ6jMbvMD84FyvBa 6MAdKL40/H6Rc+iD251/baYbWH9Pa/lx2XYHu0fDn4Pjj9m2YmBYqboxnkfg8RdS 3Pmb4bVL8SEHaKU4ay0sIjF2X1OihFSZzrHplLyY8/55VcLqPk1yhUSNNGXCiiUo Wv+MbPB4EJWfAiva9VpAcbPtMCb3c5Kb2uTB0y81yHMPBvO5 -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:47 2026 by rpki-client