This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer (raw, json) Hash identifier: Doc94gs8Mlb08dSTpBwuc2bsbhFD6EunBJsv2dYMWFM= Subject key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028729 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 04:56:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133213 IP: 2401:e0e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165673 (0x28729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 04:56:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ea:4b:71:e5:83:e5:c6:41:27:bf:0b:2b:37: ff:fd:24:be:72:7d:bc:68:10:06:b6:70:49:a2:26: 7c:3b:5d:f7:d2:94:4d:cc:22:5e:7f:88:13:12:74: 2d:2a:97:cc:c7:fd:f1:6a:5b:83:55:72:68:17:e1: 5a:3f:b3:ec:05:83:17:02:8b:5d:ad:aa:d3:98:b4: 55:f2:84:b8:d7:4b:87:ef:ce:ed:b8:a2:6a:ce:8a: ca:2e:1e:3a:32:a5:65:60:0b:cc:f6:86:17:95:d2: b6:65:3c:92:cd:21:43:44:27:b5:22:d6:fb:bf:e9: 5e:4e:b3:3c:7a:9c:18:57:c5:33:9c:0d:8a:2a:29: 51:d0:4d:f0:5e:ff:b3:5a:92:5d:03:95:0b:35:2e: 7a:82:b1:31:9d:9e:ae:e6:ad:99:15:74:ad:6c:33: 77:4d:96:16:fe:b7:5a:9f:53:92:c4:2d:e0:2a:57: 50:24:4c:8f:f2:8f:36:94:30:72:0f:85:0a:f9:b4: 75:c9:7c:44:1b:cd:fe:fe:54:66:14:39:2d:97:73: 2e:83:b4:22:78:d2:3c:e0:4a:a0:9c:ac:c8:d3:fc: 2f:61:49:9d:96:8d:cf:f9:54:36:1b:03:d7:5f:44: 03:57:31:fe:e9:35:c4:71:a2:66:29:85:99:a5:c7: 00:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133213 sbgp-ipAddrBlock: critical IPv6: 2401:e0e0::/32 Signature Algorithm: sha256WithRSAEncryption aa:db:52:a9:fd:92:dd:07:f8:a3:0d:99:fd:25:77:f6:97:95: 1c:d0:e5:66:22:c1:12:52:eb:f4:6a:4f:55:c3:fd:a7:ce:f0: 36:d3:a6:d5:b3:78:b4:3c:27:26:a9:a3:be:c1:76:d2:81:62: 43:bf:7f:12:9d:ac:65:9a:6a:a4:a1:df:20:b4:8e:5f:d3:72: 25:cb:cf:18:82:2a:88:46:0c:41:f7:b6:14:02:10:91:a6:30: a1:25:31:ba:1a:43:5a:4a:e7:72:9d:eb:d8:dc:98:7a:ac:55: 70:4f:02:82:cd:11:1e:a8:9e:ed:96:7a:db:b6:67:ed:9c:1e: bb:5c:80:ef:b9:bd:4e:8f:ac:8a:76:d2:6c:a2:13:22:3c:bb: 07:04:69:fa:d0:45:f0:6b:b6:45:81:54:a2:63:bf:95:d7:f4: 9e:22:50:1e:8b:96:77:bf:fc:dd:8d:d3:3a:7a:2f:73:ea:f2: e3:44:a1:7a:0d:9f:26:b6:f7:73:4f:b8:47:8e:3c:d0:56:73: a6:61:23:fc:5f:be:d3:83:df:09:e6:df:7d:f7:1a:c7:75:be: 8c:42:ef:ee:67:30:b7:24:7d:f3:f6:b9:ca:a7:ef:d2:9b:d9: 3f:eb:0a:a8:71:d0:09:3b:2f:c5:fe:c5:ab:7b:3d:a6:ed:f7: 29:ea:2c:e3 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAocpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTA0NTYxMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjRE QkZCNzlGRDM5QjI1NkZERTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDt6ktx5YPlxkEnvwsrN//9JL5yfbxoEAa2cEmiJnw7XffSlE3MIl5/iBMSdC0q l8zH/fFqW4NVcmgX4Vo/s+wFgxcCi12tqtOYtFXyhLjXS4fvzu24omrOisouHjoy pWVgC8z2hheV0rZlPJLNIUNEJ7Ui1vu/6V5Oszx6nBhXxTOcDYoqKVHQTfBe/7Na kl0DlQs1LnqCsTGdnq7mrZkVdK1sM3dNlhb+t1qfU5LELeAqV1AkTI/yjzaUMHIP hQr5tHXJfEQbzf7+VGYUOS2Xcy6DtCJ40jzgSqCcrMjT/C9hSZ2Wjc/5VDYbA9df RANXMf7pNcRxomYphZmlxwBDAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUhcVnJZED 2eIpLmTb+3n9ObJW/eQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk2RENBLzU4M0ZGQzk0Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpF RDJlSXBMbVRiLTNuOU9iSldfZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAghdMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHg4DANBgkq hkiG9w0BAQsFAAOCAQEAqttSqf2S3Qf4ow2Z/SV39peVHNDlZiLBElLr9GpPVcP9 p87wNtOm1bN4tDwnJqmjvsF20oFiQ79/Ep2sZZpqpKHfILSOX9NyJcvPGIIqiEYM Qfe2FAIQkaYwoSUxuhpDWkrncp3r2NyYeqxVcE8Cgs0RHqie7ZZ627Zn7Zweu1yA 77m9To+sinbSbKITIjy7BwRp+tBF8Gu2RYFUomO/ldf0niJQHouWd7/83Y3TOnov c+ry40Sheg2fJrb3c0+4R4480FZzpmEj/F++04PfCebfffcax3W+jELv7mcwtyR9 8/a5yqfv0pvZP+sKqHHQCTsvxf7Fq3s9pu33Keos4w== -----END CERTIFICATE-----Generated at Sun Jan 25 01:16:36 2026 by rpki-client