This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer File: bCTOJGStN3HjLDMIGNG32gFMaQk.cer (raw, json) Hash identifier: NhU6wBGnIWgF1riK8sBTV1Y8//sieX90JYUGJQAFJpc= Subject key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02836A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 03 Jan 2026 03:04:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134996 IP: 103.82.116.0/22 IP: 202.124.252.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164714 (0x2836a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 3 03:04:11 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:6b:0e:c6:81:1b:e5:40:45:2f:f8:37:bb: 97:a0:85:34:cb:79:61:8e:d5:de:f6:56:6a:f2:59: bd:ac:0a:55:77:53:0e:d7:44:6f:cf:e7:a5:7b:7b: 82:f1:fe:4f:fe:81:bd:93:a5:c2:53:6a:17:e3:68: 5e:3a:be:52:25:d7:3d:ad:db:bb:8b:6c:6e:3a:36: 17:96:1f:1e:3c:ad:86:c0:9a:cf:1e:27:f9:92:9c: f1:8f:d2:55:44:02:77:fa:8f:68:92:58:11:b7:e9: ac:3a:d8:81:8d:a1:00:fa:51:15:1a:b1:f2:69:57: 3b:77:19:5d:74:a8:f8:11:af:09:29:2e:c6:9a:de: 3e:d1:70:9e:e1:ca:ff:fc:eb:f2:ca:68:b9:b0:57: 8f:28:64:ee:50:56:9b:ca:09:2a:fa:09:e2:5d:56: b1:f1:08:df:d8:96:2c:be:69:29:98:e1:e3:e5:5d: 31:3b:7d:72:b1:5b:f8:88:1a:53:a4:22:64:0f:4a: 35:1a:4d:bd:58:d8:b2:d0:cb:9d:57:f1:78:5c:92: 42:d3:41:67:40:f2:38:19:6e:83:d3:74:57:c5:f0: 77:93:b3:67:99:0b:17:35:a9:e0:2a:f1:69:3e:a3: 3c:64:39:2c:dd:f0:15:b0:9b:b8:db:6e:79:1e:f3: e5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134996 sbgp-ipAddrBlock: critical IPv4: 103.82.116.0/22 202.124.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:67:b3:c8:27:14:70:1a:f1:22:6c:fd:78:09:d1:75:75:12: 7b:93:4f:be:84:95:14:1b:10:d1:9a:6c:2c:5a:af:41:2f:c4: db:af:c7:8e:89:5d:77:08:5e:44:94:df:7a:e1:f1:42:79:9d: 2f:eb:58:61:34:75:88:db:f8:5a:19:64:ef:17:da:22:f4:43: 4f:7f:d4:78:b7:d3:c6:e3:ca:dd:83:6a:fe:77:ea:5d:5c:5a: 0b:ae:76:3a:8f:72:c9:b4:be:a1:95:d7:d9:38:b3:26:24:5a: 06:b0:c7:3b:33:33:b5:ce:41:63:43:00:b1:fc:91:71:41:e9: 36:e9:b4:12:48:1f:86:55:e4:59:e3:a0:1f:87:33:5e:a8:39: 58:21:e8:c4:75:2f:b4:c5:10:18:8b:c6:c5:4c:30:a5:85:a3: 8e:b3:ff:8e:f8:0a:87:44:f1:29:42:13:40:07:8b:40:97:6b: ae:19:6c:d2:95:52:f4:8d:0c:c3:f3:d1:27:e0:40:1d:a6:bb: 57:cf:e7:65:02:ec:dc:a0:73:f1:62:7d:8f:77:3c:06:84:95: dc:40:9f:d7:67:8a:0f:6d:87:b7:58:25:64:94:17:ce:8a:20: c7:8d:6b:94:80:4b:d7:60:7b:79:d8:9b:62:30:07:a2:ed:24: 1c:a9:d3:85 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoNqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMzAzMDQxMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxREM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMw ODE4RDFCN0RBMDE0QzY5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbxWsOxoEb5UBFL/g3u5eghTTLeWGO1d72VmryWb2sClV3Uw7XRG/P56V7e4Lx /k/+gb2TpcJTahfjaF46vlIl1z2t27uLbG46NheWHx48rYbAms8eJ/mSnPGP0lVE Anf6j2iSWBG36aw62IGNoQD6URUasfJpVzt3GV10qPgRrwkpLsaa3j7RcJ7hyv/8 6/LKaLmwV48oZO5QVpvKCSr6CeJdVrHxCN/Yliy+aSmY4ePlXTE7fXKxW/iIGlOk ImQPSjUaTb1Y2LLQy51X8XhckkLTQWdA8jgZboPTdFfF8HeTs2eZCxc1qeAq8Wk+ ozxkOSzd8BWwm7jbbnke8+VRAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUbCTOJGSt N3HjLDMIGNG32gFMaQkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURDODRDL0YzNUIzMDVFQkYzMTExRUVBNzlDOEUzREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdT dE4zSGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg9UMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ1J0AwQCynz8 MA0GCSqGSIb3DQEBCwUAA4IBAQBuZ7PIJxRwGvEibP14CdF1dRJ7k0++hJUUGxDR mmwsWq9BL8Tbr8eOiV13CF5ElN964fFCeZ0v61hhNHWI2/haGWTvF9oi9ENPf9R4 t9PG48rdg2r+d+pdXFoLrnY6j3LJtL6hldfZOLMmJFoGsMc7MzO1zkFjQwCx/JFx Qek26bQSSB+GVeRZ46AfhzNeqDlYIejEdS+0xRAYi8bFTDClhaOOs/+O+AqHRPEp QhNAB4tAl2uuGWzSlVL0jQzD89En4EAdprtXz+dlAuzcoHPxYn2PdzwGhJXcQJ/X Z4oPbYe3WCVklBfOiiDHjWuUgEvXYHt52JtiMAei7SQcqdOF -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:47 2026 by rpki-client