This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer File: agTrNKPf8GX9DvMS4s44P6tQJN4.cer (raw, json) Hash identifier: n56FKA4DAAvCqWLOe+XFhh9pzqaIXX7IJPwrv1zBn+w= Subject key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02838F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft caRepository: rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 04 Jan 2026 12:24:20 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153453 AS: 153461 IP: 2401:d860::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164751 (0x2838f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 4 12:24:20 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:54:e8:bc:89:d9:1d:5a:70:7f:14:3e:1f: ac:77:ea:55:9b:a5:6f:7a:96:10:63:9c:b4:ed:89: b8:65:94:fc:1a:dc:62:a0:66:f1:6a:3a:36:a9:c2: 89:ae:7e:6e:46:ea:c5:7a:80:55:da:67:c3:2a:7c: 96:7e:cd:d3:4c:f9:ee:2e:1f:c1:06:a8:ca:ed:67: 3f:57:9f:25:82:8b:55:c4:f6:08:0c:d9:12:63:14: 84:50:b4:57:42:62:98:8c:d8:f0:ed:4d:dd:f1:0f: 95:6c:06:63:e5:fb:d3:d4:76:01:83:90:bc:c9:fd: 29:18:8c:4d:13:eb:9e:c2:e9:15:68:72:e2:3f:ca: 37:37:af:86:db:9d:e4:70:aa:2d:ff:71:8b:c9:32: 6c:ad:b9:2c:11:68:8c:85:ef:45:8b:26:12:bb:79: 39:f6:cb:38:09:44:3d:48:9b:6b:22:f6:f3:c4:f5: d3:f5:b3:26:24:07:d4:45:71:fd:52:96:43:dd:68: d9:79:96:d5:02:ef:ec:a4:3b:1f:bc:30:fa:0e:f8: 13:34:3a:11:80:26:74:4e:ff:f2:70:42:b2:75:fd: 8f:af:80:6b:90:88:20:72:e9:41:f1:4d:b7:14:ec: 1e:78:30:2f:b0:e2:82:27:bf:ac:2c:d9:8c:9b:1b: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153453 153461 sbgp-ipAddrBlock: critical IPv6: 2401:d860::/32 Signature Algorithm: sha256WithRSAEncryption 8c:12:5c:54:33:1f:80:fd:23:59:4d:43:ad:08:3a:d0:94:0d: 5b:53:94:d4:7f:5f:10:b0:5b:9b:2b:9f:d6:a7:9d:86:4b:19: 4c:55:35:6f:89:1f:86:e1:7a:81:a3:e0:6c:f0:cf:4b:76:7e: fa:6a:c0:3b:c5:94:39:80:24:80:5c:57:c8:89:0c:53:99:92: 57:b6:d3:b1:90:fb:2f:6a:d8:51:eb:c0:6a:6d:22:4f:9e:1b: 65:37:5d:df:ac:ce:62:fa:8e:58:b6:44:b7:67:03:a4:c4:d3: 6d:3b:bd:ee:bb:bf:7a:f4:f3:13:64:61:03:09:b7:92:9f:63: 50:de:6a:4b:62:a6:e2:c9:19:56:b3:ba:0d:f3:f7:77:4e:c2: eb:a2:21:78:f2:ff:ec:c4:3f:1b:3d:c3:63:d4:cf:6a:2f:f9: 3e:6a:1f:18:f3:cf:14:13:12:ca:d6:82:4d:8f:ed:eb:11:ed: 5e:ec:a8:56:99:4b:f4:b8:f1:fc:e5:ad:e7:13:da:83:6b:ee: 8a:d2:43:5a:1c:79:25:7d:d6:14:92:e2:90:cd:f3:cb:35:26: 3d:19:ab:2d:af:c1:b8:1f:35:8b:03:54:2e:b4:fa:c8:16:66: 6b:58:f2:98:56:f7:86:41:ad:ca:9f:02:62:b9:02:f6:3a:2d: a1:c7:c3:72 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoOPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNDEyMjQyMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTY5MUExMTAvBgNVBAUTKDZBMDRFQjM0QTNERkYwNjVGRDBFRjMx MkUyQ0UzODNGQUI1MDI0REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNy1TovInZHVpwfxQ+H6x36lWbpW96lhBjnLTtibhllPwa3GKgZvFqOjapwomu fm5G6sV6gFXaZ8MqfJZ+zdNM+e4uH8EGqMrtZz9XnyWCi1XE9ggM2RJjFIRQtFdC YpiM2PDtTd3xD5VsBmPl+9PUdgGDkLzJ/SkYjE0T657C6RVocuI/yjc3r4bbneRw qi3/cYvJMmytuSwRaIyF70WLJhK7eTn2yzgJRD1Im2si9vPE9dP1syYkB9RFcf1S lkPdaNl5ltUC7+ykOx+8MPoO+BM0OhGAJnRO//JwQrJ1/Y+vgGuQiCBy6UHxTbcU 7B54MC+w4oInv6ws2YybG7Y1AgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUagTrNKPf 8GX9DvMS4s44P6tQJN4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE2OTFBLzQ3ODkzMTc4QTE5RDExRUZCRUI1Njk3REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNjkxQS80Nzg5MzE3OEExOUQxMUVGQkVCNTY5N0RDNEY5QUUwMi9hZ1RyTktQ ZjhHWDlEdk1TNHM0NFA2dFFKTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAldtAgMCV3UwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAdhg MA0GCSqGSIb3DQEBCwUAA4IBAQCMElxUMx+A/SNZTUOtCDrQlA1bU5TUf18QsFub K5/Wp52GSxlMVTVviR+G4XqBo+Bs8M9Ldn76asA7xZQ5gCSAXFfIiQxTmZJXttOx kPsvathR68BqbSJPnhtlN13frM5i+o5YtkS3ZwOkxNNtO73uu7969PMTZGEDCbeS n2NQ3mpLYqbiyRlWs7oN8/d3TsLroiF48v/sxD8bPcNj1M9qL/k+ah8Y888UExLK 1oJNj+3rEe1e7KhWmUv0uPH85a3nE9qDa+6K0kNaHHklfdYUkuKQzfPLNSY9Gast r8G4HzWLA1QutPrIFmZrWPKYVveGQa3KnwJiuQL2Oi2hx8Ny -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:35 2026 by rpki-client