This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer File: fqwMLLJ6MKE47kdbB_6X6Okz_co.cer (raw, json) Hash identifier: OWivjMWgRm/eTE3C8veadiZ+sEX7EdO5VvqzObDEGJk= Subject key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02851C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 14:23:45 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38051 AS: 133177 IP: 43.250.124.0/22 IP: 103.254.120.0/22 IP: 2401:ae0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165148 (0x2851c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 14:23:45 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:70:e3:d0:32:14:df:f1:c4:ed:7c:85:c0: fa:fb:ca:d4:d5:e0:c7:5b:b1:a8:b4:56:67:93:f9: cb:55:e4:f8:8a:4b:be:4a:dc:c0:62:27:b9:0c:7a: 08:72:fe:2c:c4:33:9c:7f:d5:41:bb:27:3c:f8:e9: 46:82:e7:15:ad:e4:63:a3:af:71:ed:8f:c0:20:78: 64:b9:31:ee:f1:2b:2c:48:71:44:f5:79:84:b0:c9: 09:97:77:34:a7:0e:45:e3:43:eb:54:6b:f0:8e:52: 66:d5:1b:d8:6c:01:03:7f:89:41:b9:d4:4f:fe:5e: 56:60:c8:3a:e9:0d:b4:67:6f:de:df:4e:c4:b1:01: d0:61:29:93:ac:a8:fb:dc:4c:71:4a:d8:47:08:e4: 8e:39:eb:8d:91:42:c6:9d:4f:52:3e:27:5f:ba:b1: 86:f0:dc:b1:23:96:28:bb:16:af:b4:11:34:c6:f2: a6:3a:05:af:48:c8:cc:dd:b2:70:e3:6d:80:82:9a: 6c:ab:83:3d:b6:c5:a2:2c:71:0c:12:c2:5a:64:3a: c6:f8:38:07:16:90:34:2f:f0:45:c3:b1:cf:7b:92: 42:09:4d:13:bf:e1:b1:c1:f2:84:ea:2a:2c:26:89: 22:70:13:d1:6e:d2:1d:0c:3a:2e:36:19:60:e5:21: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38051 133177 sbgp-ipAddrBlock: critical IPv4: 43.250.124.0/22 103.254.120.0/22 IPv6: 2401:ae0::/32 Signature Algorithm: sha256WithRSAEncryption 13:5b:2e:c5:a0:0b:08:61:3b:f4:f4:6f:90:8b:a0:a7:d6:47: 8b:6c:1b:33:52:4f:e3:5f:ff:20:83:e5:4a:77:1d:75:4b:c1: 1a:43:b1:30:07:76:33:6d:76:82:5a:6b:fb:ee:7a:75:4c:74: bf:50:c5:10:d9:af:61:b3:43:c6:d7:d4:31:52:9b:6d:8c:a0: f6:41:33:a8:57:94:72:cf:44:6f:b5:51:0a:a2:87:ad:cf:ab: 4e:90:2c:fc:10:37:1e:dc:e1:f4:61:96:f7:67:b2:b3:b9:b7: 36:4f:3c:f0:97:8a:af:85:70:cd:a1:c7:71:1d:99:51:27:1b: 2f:77:cf:c2:e2:89:d0:70:3c:6f:d6:b9:a0:13:78:d0:5f:dc: f3:64:8d:d1:bc:f8:f3:54:09:9e:df:8b:f4:d3:59:97:38:ad: 6a:bd:03:dc:91:b3:87:a6:24:4a:a3:6a:cd:0a:39:76:fb:12: 39:f5:ed:f7:4d:33:57:34:50:41:b4:06:52:23:5d:b1:ec:12: 83:6f:6c:ec:4c:bb:ed:36:82:e8:a0:33:94:ba:e5:d9:73:ec: 5b:c1:8c:a7:cb:3e:2d:f8:90:b9:c5:79:c1:59:b5:c4:7a:88: 70:e1:5c:9a:e6:20:49:76:ed:ac:e7:6c:c1:82:e3:92:51:d4: f8:07:18:b9 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAoUcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTE0MjM0NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1 QjA3RkU5N0U4RTkzM0ZEQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDVnDj0DIU3/HE7XyFwPr7ytTV4Mdbsai0VmeT+ctV5PiKS75K3MBiJ7kMeghy /izEM5x/1UG7Jzz46UaC5xWt5GOjr3Htj8AgeGS5Me7xKyxIcUT1eYSwyQmXdzSn DkXjQ+tUa/COUmbVG9hsAQN/iUG51E/+XlZgyDrpDbRnb97fTsSxAdBhKZOsqPvc THFK2EcI5I45642RQsadT1I+J1+6sYbw3LEjlii7Fq+0ETTG8qY6Ba9IyMzdsnDj bYCCmmyrgz22xaIscQwSwlpkOsb4OAcWkDQv8EXDsc97kkIJTRO/4bHB8oTqKiwm iSJwE9Fu0h0MOi42GWDlIW/jAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUfqwMLLJ6 MKE47kdbB/6X6Okz/cowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYxM0I5LzE4OTdCMjUyOUY5RDExRTQ5NjE5NTMyREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExK Nk1LRTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJSjAgMCCDkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIr+nwD BAJn/ngwDQQCAAIwBwMFACQBCuAwDQYJKoZIhvcNAQELBQADggEBABNbLsWgCwhh O/T0b5CLoKfWR4tsGzNST+Nf/yCD5Up3HXVLwRpDsTAHdjNtdoJaa/vuenVMdL9Q xRDZr2GzQ8bX1DFSm22MoPZBM6hXlHLPRG+1UQqih63Pq06QLPwQNx7c4fRhlvdn srO5tzZPPPCXiq+FcM2hx3EdmVEnGy93z8LiidBwPG/WuaATeNBf3PNkjdG8+PNU CZ7fi/TTWZc4rWq9A9yRs4emJEqjas0KOXb7Ejn17fdNM1c0UEG0BlIjXbHsEoNv bOxMu+02guigM5S65dlz7FvBjKfLPi34kLnFecFZtcR6iHDhXJrmIEl27aznbMGC 45JR1PgHGLk= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:55 2026 by rpki-client