This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer File: h17HLkbyzRY_Brgi5wQSmu_jGRA.cer (raw, json) Hash identifier: lEtguEFsCg1Gbz7L+Uo+cNtJkVhv1fJf93jjni5Cth8= Subject key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282B4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft caRepository: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:48:52 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 148976 IP: 103.175.34.0/23 IP: 2400:9de0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164532 (0x282b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 00:48:52 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:e1:69:0e:70:85:8c:d4:87:9e:d6:b0:c5: bc:ed:44:4c:a3:50:0e:89:d5:a2:b1:dd:87:be:29: 92:32:b2:cd:50:fd:10:4a:d2:90:18:31:6e:8e:79: f0:da:4a:f2:fa:70:9e:00:f3:22:ea:bf:31:94:78: 1b:16:b2:bc:0a:93:dc:d6:ef:25:aa:be:c0:91:a2: ec:a3:f1:2e:26:d1:34:2e:07:eb:a1:54:a4:6b:48: 07:82:d2:32:23:7d:88:4d:98:55:6d:38:d7:f4:1f: 0a:0d:43:82:fc:c0:07:1a:e6:a5:42:89:dc:0b:39: 45:30:82:44:60:a1:37:26:05:a0:23:a4:b1:59:e8: 4c:8f:5b:50:d5:5f:66:82:d0:eb:3a:cd:97:1b:29: 74:4e:07:1f:1f:a8:b5:b1:fa:52:d8:e2:ca:af:31: 14:65:59:6b:11:b2:b3:9e:9c:5e:c6:84:58:dc:88: 7e:0a:d1:0b:b5:17:bb:a0:18:f6:10:50:9a:36:05: a2:80:f0:15:67:dd:2e:1c:d1:a9:4f:39:a4:70:3b: 45:e7:24:f3:9a:cb:0a:af:72:6d:14:2e:fd:d4:2b: 58:3e:f5:41:08:b0:54:1a:48:f1:ed:3f:a0:f9:1e: f3:57:58:52:90:05:d4:2a:df:ce:15:6e:8f:d9:5a: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 148976 sbgp-ipAddrBlock: critical IPv4: 103.175.34.0/23 IPv6: 2400:9de0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:c8:da:12:70:c5:f3:68:58:3c:ea:ee:44:bd:a7:a8:8d:fd: 51:05:4f:04:79:f3:29:01:45:bc:33:83:83:46:fd:61:03:38: ee:b6:91:00:0e:b8:9c:73:8d:ea:51:60:f4:23:c0:3d:7e:75: 5b:fa:40:df:f0:e6:b8:29:37:02:32:61:50:41:e2:c3:91:84: 83:2c:ca:68:d2:ae:a0:bf:c2:d2:f2:b5:cd:4b:93:c3:f7:d8: a3:0d:cc:e4:26:50:65:b1:ce:32:c5:cd:48:8c:45:0b:21:d9: 0b:43:1a:4d:24:25:02:c0:d2:84:4f:84:33:9c:46:a2:3c:be: a3:2d:10:57:dd:2a:90:10:f1:1a:3e:1e:21:b3:ac:f5:39:e6: 15:2a:40:89:48:e1:b8:6c:67:4c:66:23:5f:50:1e:4a:c8:9c: 7b:8b:bc:95:78:bb:9f:76:87:71:0d:64:c0:98:d1:9b:b8:4e: 3f:b7:82:4e:98:45:f8:b2:b6:aa:86:d2:e9:22:83:af:24:76: 61:a5:08:10:80:fe:ee:c9:42:81:84:4a:dd:6f:ab:39:3d:e2: d0:60:44:87:9c:84:60:ad:1f:15:e0:bb:fb:29:7a:ba:a6:08: 7f:b7:9f:a5:ad:ca:bc:96:47:f3:f7:fa:6e:e7:63:66:a1:05: 46:c3:08:1a -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoK0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTAwNDg1MloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxN0M3MTYxMTAvBgNVBAUTKDg3NUVDNzJFNDZGMkNEMTYzRjA2Qjgy MkU3MDQxMjlBRUZFMzE5MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiEeFpDnCFjNSHntawxbztREyjUA6J1aKx3Ye+KZIyss1Q/RBK0pAYMW6OefDa SvL6cJ4A8yLqvzGUeBsWsrwKk9zW7yWqvsCRouyj8S4m0TQuB+uhVKRrSAeC0jIj fYhNmFVtONf0HwoNQ4L8wAca5qVCidwLOUUwgkRgoTcmBaAjpLFZ6EyPW1DVX2aC 0Os6zZcbKXROBx8fqLWx+lLY4sqvMRRlWWsRsrOenF7GhFjciH4K0Qu1F7ugGPYQ UJo2BaKA8BVn3S4c0alPOaRwO0XnJPOaywqvcm0ULv3UK1g+9UEIsFQaSPHtP6D5 HvNXWFKQBdQq384Vbo/ZWofZAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUh17HLkby zRY/Brgi5wQSmu/jGRAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdDNzE2LzREQjlDQUM0MTQwMjExRURCOTY2MzQxNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGti eXpSWV9CcmdpNXdRU211X2pHUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkXwMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ68iMA0EAgAC MAcDBQAkAJ3gMA0GCSqGSIb3DQEBCwUAA4IBAQAOyNoScMXzaFg86u5Evaeojf1R BU8EefMpAUW8M4ODRv1hAzjutpEADricc43qUWD0I8A9fnVb+kDf8Oa4KTcCMmFQ QeLDkYSDLMpo0q6gv8LS8rXNS5PD99ijDczkJlBlsc4yxc1IjEULIdkLQxpNJCUC wNKET4QznEaiPL6jLRBX3SqQEPEaPh4hs6z1OeYVKkCJSOG4bGdMZiNfUB5KyJx7 i7yVeLufdodxDWTAmNGbuE4/t4JOmEX4sraqhtLpIoOvJHZhpQgQgP7uyUKBhErd b6s5PeLQYESHnIRgrR8V4Lv7KXq6pgh/t5+lrcq8lkfz9/pu52NmoQVGwwga -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:43 2026 by rpki-client