This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer File: cS61otcGnxjunGXzsBMnGtvx9UA.cer (raw, json) Hash identifier: qwKGK8hmcoxUeaJSNpl5CZeyMrRSrbwU709spdGOdsc= Subject key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028782 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:51:00 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150451 IP: 103.42.228.0/23 IP: 2001:df1:97c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 15:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165762 (0x28782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 20 13:51:00 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:8c:4d:bb:c3:0f:55:b8:bc:c6:72:a0:0a: 54:72:14:6d:bc:7b:ab:a0:6e:1d:1d:54:96:98:9f: 0f:7d:5b:7d:fc:e0:b6:a8:9d:6d:bd:d8:54:f8:44: 02:1a:97:47:e4:e6:de:3c:36:08:e4:e1:6c:fd:8b: 9c:73:4a:55:d1:a0:ce:c2:57:39:9a:26:96:50:6a: f6:27:7d:e7:4b:df:8b:2e:f0:bf:48:61:ee:c8:93: fe:80:3b:93:77:76:09:ff:3c:d3:a3:ea:da:c5:3d: d1:1f:33:03:dd:fc:08:81:1d:ba:be:55:60:39:6a: 03:49:9d:5d:7a:e3:01:8d:cc:02:ef:1d:59:6a:d4: 16:ff:88:34:64:d0:11:f2:e7:32:67:61:c6:71:2e: 69:b6:1a:a7:9d:b6:e8:49:77:da:a6:41:b7:82:66: c9:13:98:5a:c2:55:9d:4e:1d:17:87:c6:53:5e:a9: 41:bd:56:14:bd:58:0d:fa:05:a2:a9:52:99:a4:fc: 27:f7:fc:7c:02:10:31:43:b6:66:5b:a0:6a:30:77: 21:83:d5:fc:c6:26:a0:6d:7c:1d:90:9e:d7:89:e9: 89:6b:57:98:2e:64:11:31:ca:29:40:9b:e0:6a:9d: a8:ab:b2:4b:d5:94:e7:cb:ca:6e:9e:59:e2:50:26: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150451 sbgp-ipAddrBlock: critical IPv4: 103.42.228.0/23 IPv6: 2001:df1:97c0::/48 Signature Algorithm: sha256WithRSAEncryption 8e:f2:8f:54:ff:f2:db:36:f0:a0:e7:7c:c0:10:60:ad:47:c0: 96:98:e4:53:5f:30:18:4d:7f:3e:38:5a:b1:0d:06:7e:57:62: 52:18:a2:7b:56:7b:9d:e9:36:97:28:da:df:c1:66:f9:72:75: 9f:f7:2a:a8:51:15:1a:87:ef:3b:16:e3:7e:de:5b:50:b6:2a: 66:01:02:83:d1:80:59:05:51:3a:c8:ae:e0:eb:d6:8b:20:a7: 33:a4:8b:b9:3e:06:fc:8e:5c:e6:5e:94:36:ef:ec:6e:6b:79: 4d:2b:d5:f6:aa:d1:03:3e:1a:08:86:57:45:bb:d2:f7:f5:51: 43:fb:a0:bb:a3:cd:be:21:99:8c:7c:4e:35:0e:76:96:2f:3c: 4d:38:af:0b:6c:2c:2d:20:25:cd:6f:6e:20:99:2a:1f:e2:3b: cd:33:ab:e0:3f:d5:58:7a:e2:ab:8a:d2:f6:f5:dd:37:f2:22: 5e:ab:49:f8:5e:2b:20:84:80:de:c9:02:e6:16:07:fb:ad:9f: e0:a4:88:28:9a:2f:f5:40:0d:6c:66:fe:0d:52:7d:f7:f3:92: 0c:18:fe:eb:b6:03:1a:5b:6e:8b:e7:d0:2d:35:14:14:bb:04: 49:d0:af:42:c2:a7:0a:e9:fd:09:e2:de:3d:60:94:a3:79:e1: eb:69:1e:7d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoeCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMDEzNTEwMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVG M0IwMTMyNzFBREJGMUY1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrMoxNu8MPVbi8xnKgClRyFG28e6ugbh0dVJaYnw99W3384LaonW292FT4RAIa l0fk5t48Ngjk4Wz9i5xzSlXRoM7CVzmaJpZQavYnfedL34su8L9IYe7Ik/6AO5N3 dgn/PNOj6trFPdEfMwPd/AiBHbq+VWA5agNJnV164wGNzALvHVlq1Bb/iDRk0BHy 5zJnYcZxLmm2GqedtuhJd9qmQbeCZskTmFrCVZ1OHReHxlNeqUG9VhS9WA36BaKp Upmk/Cf3/HwCEDFDtmZboGowdyGD1fzGJqBtfB2QnteJ6YlrV5guZBExyilAm+Bq nairskvVlOfLym6eWeJQJnIzAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUcS61otcG nxjunGXzsBMnGtvx9UAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE4QTUyL0ZCN0U0QkRFNzBCNTExRUQ5M0YwREQxNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBOEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3Rj R254anVuR1h6c0JNbkd0dng5VUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkuzMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZyrkMA8EAgAC MAkDBwAgAQ3xl8AwDQYJKoZIhvcNAQELBQADggEBAI7yj1T/8ts28KDnfMAQYK1H wJaY5FNfMBhNfz44WrENBn5XYlIYontWe53pNpco2t/BZvlydZ/3KqhRFRqH7zsW 437eW1C2KmYBAoPRgFkFUTrIruDr1osgpzOki7k+BvyOXOZelDbv7G5reU0r1faq 0QM+GgiGV0W70vf1UUP7oLujzb4hmYx8TjUOdpYvPE04rwtsLC0gJc1vbiCZKh/i O80zq+A/1Vh64quK0vb13TfyIl6rSfheKyCEgN7JAuYWB/utn+CkiCiaL/VADWxm /g1SfffzkgwY/uu2Axpbbovn0C01FBS7BEnQr0LCpwrp/Qni3j1glKN54etpHn0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:15 2026 by rpki-client