This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpkxQN1asi6jPs56kpL6PLQgw2g.cer File: dpkxQN1asi6jPs56kpL6PLQgw2g.cer (raw, json) Hash identifier: fK3gqsjmI9oipcyAQip72Ve1wshYOBk+TbAzI4TnKWA= Subject key identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028361 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft caRepository: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/ Notify URL: https://rrdp.sub.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 19:24:00 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 154155 AS: 154185 IP: 49.213.62.0/23 IP: 2001:df6:40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164705 (0x28361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 19:24:00 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A916FC1D0000, serialNumber=76993140DD5AB22EA33ECE7A9292FA3CB420C368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:07:9b:49:3e:4e:48:fc:8d:34:1e:da:1d: 9a:4c:d4:30:bd:f7:8f:fb:e1:be:15:1f:b6:46:f0: d6:0e:a4:b5:ae:3d:e6:95:3f:d1:07:1f:00:69:6c: 64:91:4f:c4:58:04:25:55:69:e9:b2:d0:39:78:4c: f0:03:3c:5c:82:51:ca:56:45:b6:39:d8:73:c2:f4: 52:73:6d:48:84:f9:a3:74:d1:19:25:33:99:08:8e: c2:40:1c:c7:94:38:f8:04:44:d9:39:2d:8f:6e:11: 03:f6:7a:fe:07:e9:48:2a:41:aa:83:97:dc:fe:9f: 8a:9f:67:6d:de:31:50:eb:72:76:97:e9:35:ab:6a: 71:91:56:ac:cf:03:89:8b:87:34:b8:81:54:34:42: da:78:02:b6:cf:99:20:ab:ad:d7:d0:2f:e4:6c:50: 2d:91:3d:dd:5a:b6:2c:91:39:ab:b0:0e:72:22:71: 41:fc:5e:76:b2:a5:09:78:4d:e7:4f:fe:d3:b3:b3: 8c:1f:b8:49:1d:36:c6:a3:df:02:fc:50:e9:38:98: e2:a9:c2:c8:ba:52:27:16:1b:bb:91:4e:40:8c:57: d1:e2:b7:b6:27:55:bf:08:a4:ea:c6:6c:30:30:20: c5:ce:49:2a:f4:23:73:b9:de:76:3a:b5:52:65:4f: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:99:31:40:DD:5A:B2:2E:A3:3E:CE:7A:92:92:FA:3C:B4:20:C3:68 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/ RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/76993140DD5AB22EA33ECE7A9292FA3CB420C368.mft RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154155 154185 sbgp-ipAddrBlock: critical IPv4: 49.213.62.0/23 IPv6: 2001:df6:40::/48 Signature Algorithm: sha256WithRSAEncryption d8:54:01:f5:a6:be:15:b1:87:ca:5f:c5:9c:08:90:29:bb:76: 50:fb:68:4e:06:4c:cb:3f:82:0e:26:fa:07:8f:22:3f:27:4e: cf:bf:8e:2f:52:5c:5f:76:f9:44:64:a5:dd:38:47:5c:e8:ea: c9:f9:24:b1:3e:cf:a0:8f:e2:63:55:92:43:5b:b9:59:f1:4e: 13:e6:b6:b1:b7:87:12:e0:d5:67:4a:65:f7:06:63:84:83:cf: 98:68:f5:d3:97:b3:34:5b:9e:9f:3f:0a:dc:05:4c:ec:ce:0d: 23:82:b7:52:75:3d:4a:b2:ce:44:c0:95:cb:c1:38:02:cc:14: d6:ea:b6:8a:a4:56:70:90:d5:4f:21:0b:f4:78:85:8c:85:d5: 73:99:9e:44:1e:43:95:1b:fb:ba:21:ab:9a:05:dc:97:de:25: 5c:70:bc:ef:7f:55:f3:b7:8e:b8:59:c9:6a:d4:8b:51:ff:c4: 3e:95:dc:60:49:98:6e:93:5c:20:de:4a:1b:b9:00:5b:b4:e1: 83:0a:f3:05:f9:5f:41:b9:0e:d0:d5:e1:c5:dd:3d:83:cd:2c: 60:5b:14:80:cc:cf:46:4e:e8:0c:19:d4:d9:c4:53:b2:e5:80: cc:75:52:ef:e9:30:ff:aa:99:4d:03:38:0e:5f:60:a6:6a:be: ae:f7:65:34 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgIDAoNhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE5MjQwMFoXDTI2MTIwMTAwMDAwMFowSjEVMBMG A1UEAwwMQTkxNkZDMUQwMDAwMTEwLwYDVQQFEyg3Njk5MzE0MERENUFCMjJFQTMz RUNFN0E5MjkyRkEzQ0I0MjBDMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvlgHm0k+Tkj8jTQe2h2aTNQwvfeP++G+FR+2RvDWDqS1rj3mlT/RBx8A aWxkkU/EWAQlVWnpstA5eEzwAzxcglHKVkW2OdhzwvRSc21IhPmjdNEZJTOZCI7C QBzHlDj4BETZOS2PbhED9nr+B+lIKkGqg5fc/p+Kn2dt3jFQ63J2l+k1q2pxkVas zwOJi4c0uIFUNELaeAK2z5kgq63X0C/kbFAtkT3dWrYskTmrsA5yInFB/F52sqUJ eE3nT/7Ts7OMH7hJHTbGo98C/FDpOJjiqcLIulInFhu7kU5AjFfR4re2J1W/CKTq xmwwMCDFzkkq9CNzud52OrVSZU/3pwIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFHaZ MUDdWrIuoz7OepKS+jy0IMNoMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1 MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2 RkMxRDAwMDAvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu bmV0L3JlcG9zaXRvcnkvQTkxNkZDMUQwMDAwLzAvNzY5OTMxNDBERDVBQjIyRUEz M0VDRTdBOTI5MkZBM0NCNDIwQzM2OC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgB Af8EEDAOoAwwCgIDAlorAgMCWkkwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAEx1T4wDwQCAAIwCQMHACABDfYAQDANBgkqhkiG9w0BAQsFAAOCAQEA2FQB9aa+ FbGHyl/FnAiQKbt2UPtoTgZMyz+CDib6B48iPydOz7+OL1JcX3b5RGSl3ThHXOjq yfkksT7PoI/iY1WSQ1u5WfFOE+a2sbeHEuDVZ0pl9wZjhIPPmGj105ezNFuenz8K 3AVM7M4NI4K3UnU9SrLORMCVy8E4AswU1uq2iqRWcJDVTyEL9HiFjIXVc5meRB5D lRv7uiGrmgXcl94lXHC8739V87eOuFnJatSLUf/EPpXcYEmYbpNcIN5KG7kAW7Th gwrzBflfQbkO0NXhxd09g80sYFsUgMzPRk7oDBnU2cRTsuWAzHVS7+kw/6qZTQM4 Dl9gpmq+rvdlNA== -----END CERTIFICATE-----Generated at Sun Jan 25 01:11:51 2026 by rpki-client