This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer File: ghhST3oWtYwNm3OUAxk5fuT8pv0.cer (raw, json) Hash identifier: 0CSoaWtgPKNElm3Gaz6UhctmeyECcEndlDBEjRpAmSs= Subject key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02850A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 13:22:55 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.145.58.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165130 (0x2850a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 13:22:55 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c8:78:a3:4a:f5:b6:34:64:a7:7f:00:c8:76: 04:82:2b:bf:ff:1b:a4:ef:a0:9e:05:2e:83:26:a8: 8f:04:b3:a6:fd:86:62:f4:95:8c:f8:df:a4:51:ec: 23:1c:30:d3:f9:9e:ea:2a:a7:a9:0e:10:72:86:3f: a7:df:ea:a0:1b:d6:d7:5c:da:d1:b6:8c:32:4f:3c: a1:5a:b6:9d:2a:7b:4e:1a:47:f4:d9:3a:4e:bf:2e: bc:c9:69:2d:20:89:6f:82:9d:7c:4c:45:d8:39:22: 26:c0:a5:5a:45:69:b1:f3:d7:02:d6:68:da:c8:2f: 7f:34:89:89:1a:cc:4f:19:a0:e2:e1:50:65:c6:fc: 0a:46:27:18:9d:28:f4:87:7d:e6:14:65:22:af:6b: 4a:90:e0:63:1f:70:f7:ea:ec:ee:e7:ee:cb:8b:d2: a9:50:a2:d2:fe:36:fe:d3:67:1f:a6:49:b5:a8:dc: 1f:23:43:a0:70:ec:d7:7c:74:e8:0a:8a:06:05:b5: 19:c1:d8:15:53:e9:f6:b0:d3:1c:2f:ce:0b:37:b0: 0d:b3:24:5e:1d:1f:99:32:ca:ef:56:d1:57:24:94: 92:ae:6b:bb:3a:1a:f0:3c:4d:b0:00:57:cf:f0:9a: 14:da:05:60:94:66:ad:38:f4:d4:5f:dc:0a:de:19: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.58.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:0e:20:18:ea:ca:e2:e2:64:12:ab:6d:35:39:6d:aa:9b:77: b9:71:2b:15:1a:21:d6:21:e2:a7:af:24:1b:d8:34:2f:40:1e: a8:9e:43:1e:ba:29:b2:24:61:79:2c:a6:9a:ce:6c:97:98:76: 56:75:e5:88:57:12:94:f2:21:8f:4f:24:e7:78:6a:7b:20:4d: 93:d0:f6:86:0e:0a:7d:8b:f7:c4:22:cf:ca:eb:f7:dd:30:40: d4:e0:64:b7:9e:2f:aa:f5:01:be:24:91:30:f1:d1:61:c5:96: dc:ac:d4:a2:0d:51:3c:f3:48:b7:21:76:6d:42:18:7f:2a:ec: 6d:34:a1:b4:a2:63:d8:fd:42:76:a6:96:6b:20:73:72:c3:f8: 3f:fb:55:74:45:d0:22:0f:f5:e6:ad:4a:16:40:3e:18:13:83: 9e:90:d5:dc:cf:d6:74:0b:b2:6b:f6:ec:d5:f7:71:88:4e:6f: 80:a7:0f:8d:da:6c:eb:c7:12:7d:39:a9:db:8c:33:70:bd:7a: 19:5c:a3:9e:98:ce:12:ce:13:5e:20:40:dd:37:3f:6e:1a:11: 1d:6d:8d:c0:49:53:36:a6:6a:46:b6:32:de:23:ac:f3:05:7a: bf:47:39:5a:7d:a3:85:ad:1b:01:a6:2c:cb:33:da:20:1e:11: a3:c6:d8:88 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAoUKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTEzMjI1NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5 NDAzMTkzOTdFRTRGQ0E2RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiyHijSvW2NGSnfwDIdgSCK7//G6TvoJ4FLoMmqI8Es6b9hmL0lYz436RR7CMc MNP5nuoqp6kOEHKGP6ff6qAb1tdc2tG2jDJPPKFatp0qe04aR/TZOk6/LrzJaS0g iW+CnXxMRdg5IibApVpFabHz1wLWaNrIL380iYkazE8ZoOLhUGXG/ApGJxidKPSH feYUZSKva0qQ4GMfcPfq7O7n7suL0qlQotL+Nv7TZx+mSbWo3B8jQ6Bw7Nd8dOgK igYFtRnB2BVT6faw0xwvzgs3sA2zJF4dH5kyyu9W0VcklJKua7s6GvA8TbAAV8/w mhTaBWCUZq049NRf3AreGcaXAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUghhST3oW tYwNm3OUAxk5fuT8pv0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc5RUUyLzAyQjI3Mzg4RjU3MjExRUE5QTI0NzkxN0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3OUVFMi8wMkIyNzM4OEY1NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNv V3RZd05tM09VQXhrNWZ1VDhwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAFnkTowDQYJKoZIhvcNAQELBQADggEBAEoOIBjqyuLiZBKrbTU5 baqbd7lxKxUaIdYh4qevJBvYNC9AHqieQx66KbIkYXkspprObJeYdlZ15YhXEpTy IY9PJOd4ansgTZPQ9oYOCn2L98Qiz8rr990wQNTgZLeeL6r1Ab4kkTDx0WHFltys 1KINUTzzSLchdm1CGH8q7G00obSiY9j9Qnamlmsgc3LD+D/7VXRF0CIP9eatShZA PhgTg56Q1dzP1nQLsmv27NX3cYhOb4CnD43abOvHEn05qduMM3C9ehlco56YzhLO E14gQN03P24aER1tjcBJUzamaka2Mt4jrPMFer9HOVp9o4WtGwGmLMsz2iAeEaPG 2Ig= -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:22 2026 by rpki-client