This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer File: g7x91dFCfoM0DS32wztiPUPX7KQ.cer (raw, json) Hash identifier: HMz9kNw2OkYYwnD6vvmLuGvHHGFCl6UIiQboSQ4Kc0g= Subject key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02835E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 17:18:46 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 135006 IP: 59.152.32.0/22 IP: 103.205.120.0/22 IP: 2402:64c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164702 (0x2835e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 17:18:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:0a:ae:34:58:dc:90:b6:31:ce:e2:d7:4f: d7:77:7c:51:9d:e5:06:de:89:a1:2c:f0:31:14:c2: fc:f7:40:a4:41:f7:99:70:a6:de:b7:fa:c2:6d:14: 34:02:01:93:3e:20:c3:d1:22:cc:8f:4b:23:81:3e: bc:74:ff:96:6c:30:e6:29:0f:ad:4e:dd:1e:7c:8d: 89:d2:5c:b3:84:08:eb:bf:74:cc:bf:f0:01:97:e2: 5e:10:b5:2b:c7:85:14:b5:9f:51:58:63:4a:42:70: 62:11:49:30:bd:c8:44:9b:d9:09:ff:0e:fc:72:5e: 6e:e5:21:6e:04:b6:df:bd:3c:e1:07:a7:89:2d:d1: ce:23:fa:08:e3:0b:5a:12:86:88:24:14:76:15:4b: 05:4a:51:e9:73:b3:3b:6e:48:8e:d7:92:a1:4c:c2: 8f:8c:d1:5c:81:10:42:bf:21:1c:00:45:10:7e:15: 94:ad:3b:de:f1:4e:94:2f:50:3d:9f:e2:4b:4d:f7: b4:de:cd:b7:75:ba:ed:be:83:a0:70:97:35:9f:e9: 94:db:b2:46:e4:cf:b3:c9:90:43:28:b9:45:6d:de: 4d:a2:46:9c:36:a1:7a:40:34:5f:92:54:a4:9f:49: d5:9c:86:90:a2:e4:c3:1a:3a:88:14:7f:6f:71:fd: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135006 sbgp-ipAddrBlock: critical IPv4: 59.152.32.0/22 103.205.120.0/22 IPv6: 2402:64c0::/32 Signature Algorithm: sha256WithRSAEncryption 1e:bc:8a:3e:d3:21:77:e1:36:ef:02:a7:60:8b:67:64:37:d3: ec:fa:52:0d:3c:ad:cd:85:68:a5:33:a2:33:fc:56:35:b3:4c: ec:07:1a:fa:8d:d9:f0:bd:6f:0c:cd:a8:3e:02:96:2d:4f:90: 61:c3:cc:e1:c4:ee:ff:c4:31:de:48:42:ae:01:1a:e1:4b:06: 8e:7e:f5:cd:ce:d4:0a:59:65:1e:44:d1:75:b5:a6:36:82:6d: ab:cd:8b:3c:28:c0:d9:69:78:ea:a9:fb:f6:d8:cd:24:91:ff: 27:0d:fb:b9:b9:4a:23:60:fe:96:6b:29:26:89:e2:90:00:02: cf:6f:bd:03:d9:f5:d5:6c:7d:a5:40:f0:5c:c1:82:fd:55:cc: 8a:d5:66:67:fa:9e:d9:c9:c9:52:f7:d8:3f:36:24:c1:a3:0e: a3:ab:a1:ff:82:77:af:2b:00:ad:a1:e7:32:1a:4b:e0:64:6c: 6a:48:49:37:c9:37:7b:68:a7:6c:fc:d2:f4:b1:d1:13:1b:33: b6:76:2f:81:fe:a8:35:f6:43:1d:5e:5c:95:6c:aa:e0:57:15: d1:72:52:a4:54:3e:1e:6a:19:69:f1:c1:6e:83:92:ee:8a:fd: 04:bc:06:cb:f5:03:96:d8:ef:59:db:0a:1b:4f:02:8f:f1:23: 9c:f8:ba:46 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoNeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE3MTg0NloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRG NkMzM0I2MjNENDNEN0VDQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxKAquNFjckLYxzuLXT9d3fFGd5QbeiaEs8DEUwvz3QKRB95lwpt63+sJtFDQC AZM+IMPRIsyPSyOBPrx0/5ZsMOYpD61O3R58jYnSXLOECOu/dMy/8AGX4l4QtSvH hRS1n1FYY0pCcGIRSTC9yESb2Qn/DvxyXm7lIW4Ett+9POEHp4kt0c4j+gjjC1oS hogkFHYVSwVKUelzsztuSI7XkqFMwo+M0VyBEEK/IRwARRB+FZStO97xTpQvUD2f 4ktN97Tezbd1uu2+g6BwlzWf6ZTbskbkz7PJkEMouUVt3k2iRpw2oXpANF+SVKSf SdWchpCi5MMaOogUf29x/XyvAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUg7x91dFC foM0DS32wztiPUPX7KQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCNDY4LzgxMjI2MDI4OTExQjExRTk5MzAwRkU1N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRG Q2ZvTTBEUzMyd3p0aVBVUFg3S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg9eMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCO5ggAwQCZ814 MA0EAgACMAcDBQAkAmTAMA0GCSqGSIb3DQEBCwUAA4IBAQAevIo+0yF34TbvAqdg i2dkN9Ps+lINPK3NhWilM6Iz/FY1s0zsBxr6jdnwvW8Mzag+ApYtT5Bhw8zhxO7/ xDHeSEKuARrhSwaOfvXNztQKWWUeRNF1taY2gm2rzYs8KMDZaXjqqfv22M0kkf8n Dfu5uUojYP6WaykmieKQAALPb70D2fXVbH2lQPBcwYL9VcyK1WZn+p7ZyclS99g/ NiTBow6jq6H/gnevKwCtoecyGkvgZGxqSEk3yTd7aKds/NL0sdETGzO2di+B/qg1 9kMdXlyVbKrgVxXRclKkVD4eahlp8cFug5Luiv0EvAbL9QOW2O9Z2wobTwKP8SOc +LpG -----END CERTIFICATE-----Generated at Sun Jan 25 01:15:49 2026 by rpki-client