This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer File: gyAF3EXYwTKohRVcQx0zMZrPbY0.cer (raw, json) Hash identifier: jP0ttCtbxKEVI4JtDfyUtjWQa2QYwZkP6wyR3FSCtrE= Subject key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028500 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 12:43:52 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136525 IP: 103.11.0.0/22 IP: 203.212.28.0/22 IP: 2400:9fc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165120 (0x28500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 12:43:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:40:6d:94:af:5c:47:b8:f2:3f:27:34:18: 8d:98:1e:2e:15:ef:25:e9:f4:cc:03:59:1d:90:41: 17:eb:c7:3a:49:9e:b9:36:ca:34:fe:f5:55:fa:b9: b3:87:79:7d:8a:4b:00:cd:27:86:e1:1f:f6:25:a5: 7e:2b:c2:7a:eb:49:89:74:4d:9b:5f:6a:dd:c8:05: d1:de:7f:a6:ec:45:aa:9d:3f:51:21:72:08:5d:a7: d8:0c:84:93:81:fb:bf:af:64:3e:12:85:eb:fa:27: 5c:24:4d:06:ef:38:2e:3f:e0:8a:08:71:d4:d5:58: 5e:a9:ed:07:26:08:2e:21:0c:e0:e4:96:0d:5d:29: 0a:f1:cf:ab:de:9a:9d:d6:fb:d4:3f:2e:6e:12:76: b6:ba:af:58:b0:01:8e:12:9d:ae:4b:d0:77:c1:4a: 9c:e6:6d:1e:05:3f:8f:e6:15:fc:16:07:6f:5a:56: 85:b0:5e:d7:eb:ac:6b:50:71:02:8e:8b:68:cf:69: 72:34:8d:7b:aa:41:d3:9d:7b:16:83:95:92:ac:de: 30:88:d9:fa:db:37:7e:28:d5:68:b1:25:1e:02:ff: df:2f:2d:13:d8:13:e5:bb:f6:43:fb:02:60:7b:5b: f8:cf:45:e8:ae:f3:07:4b:b8:fd:d3:1f:99:2e:93: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136525 sbgp-ipAddrBlock: critical IPv4: 103.11.0.0/22 203.212.28.0/22 IPv6: 2400:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 07:68:2c:e0:69:cf:1e:90:14:03:92:c7:b3:ed:e7:7e:a7:06: ea:45:32:12:f4:2a:a6:90:82:01:95:c8:44:1f:1c:f4:dd:fa: 8d:b7:27:f0:4d:41:ef:7e:d7:36:67:c4:fe:62:bb:a4:52:92: 5e:fc:7a:1b:1d:c1:db:32:45:00:26:dc:20:1b:e0:fa:b7:84: 2d:cf:1d:78:f3:79:8b:a5:1a:10:9b:95:2b:22:bd:10:29:e2: c3:f1:dc:c8:c0:51:85:33:fc:cf:b7:06:08:9b:7c:f3:cc:c8: 2a:34:0a:e0:7b:41:30:5c:07:cd:3b:c3:bb:ce:ee:ed:4b:50: d7:43:06:bf:0c:c7:6c:aa:d4:d4:2f:20:d3:c8:f3:c6:a1:d9: 79:48:b4:0a:2a:d2:1b:e3:c9:cc:24:77:e9:79:0e:16:5e:0d: a2:10:31:f4:93:70:ea:8a:30:cc:f7:7e:87:86:10:04:db:dc: 12:6b:01:6b:27:4e:2e:74:e7:d9:96:0c:77:44:26:e1:8a:30: 8b:49:a3:ab:90:b1:51:48:e4:16:8f:48:a9:c0:e8:8b:8d:fb: 49:ec:92:77:a6:55:e5:84:ba:2b:75:54:65:ed:18:4c:64:b1: 20:cf:69:50:77:bf:20:30:46:1a:fe:3b:e7:06:47:66:46:24: 84:65:a2:01 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoUAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTEyNDM1MloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1 QzQzMUQzMzMxOUFDRjZEOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOJkBtlK9cR7jyPyc0GI2YHi4V7yXp9MwDWR2QQRfrxzpJnrk2yjT+9VX6ubOH eX2KSwDNJ4bhH/YlpX4rwnrrSYl0TZtfat3IBdHef6bsRaqdP1Ehcghdp9gMhJOB +7+vZD4Shev6J1wkTQbvOC4/4IoIcdTVWF6p7QcmCC4hDODklg1dKQrxz6vemp3W +9Q/Lm4Sdra6r1iwAY4Sna5L0HfBSpzmbR4FP4/mFfwWB29aVoWwXtfrrGtQcQKO i2jPaXI0jXuqQdOdexaDlZKs3jCI2frbN34o1WixJR4C/98vLRPYE+W79kP7AmB7 W/jPReiu8wdLuP3TH5kuk0/NAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUgyAF3EXY wTKohRVcQx0zMZrPbY0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM2MkEwLzgwMzJDQkYwRTNBMTExRTZCRjNCMDA2OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VY WXdUS29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhVNMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZwsAAwQCy9Qc MA0EAgACMAcDBQAkAJ/AMA0GCSqGSIb3DQEBCwUAA4IBAQAHaCzgac8ekBQDksez 7ed+pwbqRTIS9CqmkIIBlchEHxz03fqNtyfwTUHvftc2Z8T+YrukUpJe/HobHcHb MkUAJtwgG+D6t4Qtzx1483mLpRoQm5UrIr0QKeLD8dzIwFGFM/zPtwYIm3zzzMgq NArge0EwXAfNO8O7zu7tS1DXQwa/DMdsqtTULyDTyPPGodl5SLQKKtIb48nMJHfp eQ4WXg2iEDH0k3DqijDM936HhhAE29wSawFrJ04udOfZlgx3RCbhijCLSaOrkLFR SOQWj0ipwOiLjftJ7JJ3plXlhLordVRl7RhMZLEgz2lQd78gMEYa/jvnBkdmRiSE ZaIB -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:35 2026 by rpki-client