This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer File: he6Mb5WNbzwfFdLBq8T-m75s7tc.cer (raw, json) Hash identifier: fUz5DQmagAmOVabT35ayJWcEnRGi9aTALBci1/dXjAA= Subject key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028584 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:23:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138528 IP: 103.132.8.0/22 IP: 2404:2c40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165252 (0x28584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 12 13:23:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:ee:fd:48:60:b0:41:aa:c7:8d:50:62:9b: 3b:92:f9:b0:65:5a:8a:a5:a5:48:06:69:89:e5:76: f8:17:12:56:53:38:b3:e8:25:ed:fa:ef:ba:c9:8a: 2d:9a:10:90:1f:e9:66:70:cb:80:df:c3:4a:35:4d: ae:d0:7d:bd:1d:c0:a7:0a:02:37:ef:4b:44:6d:9f: 62:4b:87:b2:c1:fb:01:dc:52:b2:00:64:42:03:8d: 8f:d2:ab:86:64:23:5a:e5:b6:8c:29:5b:ab:38:d8: 06:9f:c0:fd:30:aa:fe:2d:0c:98:17:76:36:00:a3: 18:e5:c9:4a:94:b7:72:8f:bb:fe:56:c3:4f:50:4e: 90:1c:36:be:63:78:94:4e:11:7a:55:67:9d:bf:8b: ce:69:1b:ee:43:c8:f9:35:0a:a6:e4:c2:c9:ca:c8: c1:71:a8:c4:69:1a:4d:b8:0b:de:ef:56:3b:26:3a: 92:68:74:30:31:dd:85:72:5f:d4:8d:71:2d:44:90: 26:98:05:76:b2:8d:29:d8:78:eb:2a:de:12:07:17: 85:06:cc:67:9a:99:cd:66:6e:81:d6:9e:70:14:c7: 4f:0f:38:17:16:1d:e1:5b:b7:be:79:ea:22:89:65: 40:f9:45:42:d3:70:03:47:d7:b1:ea:ef:ed:b4:67: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138528 sbgp-ipAddrBlock: critical IPv4: 103.132.8.0/22 IPv6: 2404:2c40::/32 Signature Algorithm: sha256WithRSAEncryption 9f:ab:aa:55:51:5e:f7:5f:f4:81:42:9a:87:0f:49:63:ee:0c: 77:e4:c8:69:f4:e2:06:e3:79:41:df:68:df:09:32:f0:fd:7c: 07:62:a0:02:13:88:3f:ea:b4:91:31:ed:eb:59:bf:7d:4f:32: 2e:5a:e1:78:28:8f:0e:12:11:72:cf:2b:2a:42:f8:91:f8:20: 92:73:85:4e:7d:43:5c:09:20:59:7c:ba:c6:8a:f9:3a:93:0f: ba:9e:46:6d:62:84:d3:3f:c8:5f:af:73:0e:eb:4f:41:dc:07: fb:d9:79:1e:f3:48:92:83:21:48:cc:6c:90:3e:6c:8a:e5:e1: 32:1d:01:ae:72:ec:d1:12:f0:21:0d:83:1d:a1:f7:2d:ae:cf: f1:8c:57:73:04:34:42:f8:ce:60:84:dd:0a:4a:8e:50:a5:cf: ed:6c:ee:3f:e0:f9:e7:9c:7d:77:14:08:9b:d9:84:23:45:7a: 09:4a:5f:0a:f0:ab:b8:6e:79:e4:4a:77:dd:74:f5:dc:38:5e: f0:70:34:76:ae:b0:4d:18:b7:bd:58:06:ac:1b:4d:c0:94:cd: f9:3a:30:af:77:9a:4e:da:fc:a9:fc:25:d3:94:b5:9f:6f:86: ab:16:7d:62:d3:9c:16:d3:0d:7e:3c:bd:a3:72:e1:a4:15:f8: 42:05:a0:67 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoWEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMjEzMjMxMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJD MUFCQzRGRTlCQkU2Q0VFRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9fO79SGCwQarHjVBimzuS+bBlWoqlpUgGaYnldvgXElZTOLPoJe3677rJii2a EJAf6WZwy4Dfw0o1Ta7Qfb0dwKcKAjfvS0Rtn2JLh7LB+wHcUrIAZEIDjY/Sq4Zk I1rltowpW6s42AafwP0wqv4tDJgXdjYAoxjlyUqUt3KPu/5Ww09QTpAcNr5jeJRO EXpVZ52/i85pG+5DyPk1CqbkwsnKyMFxqMRpGk24C97vVjsmOpJodDAx3YVyX9SN cS1EkCaYBXayjSnYeOsq3hIHF4UGzGeamc1mboHWnnAUx08POBcWHeFbt7556iKJ ZUD5RULTcANH17Hq7+20Z9B9AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUhe6Mb5WN bzwfFdLBq8T+m75s7tcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc1MTY1LzkwRjBGRkFFMEYwODExRTk4NjgwRTg1Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVX TmJ6d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh0gMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4QIMA0EAgAC MAcDBQAkBCxAMA0GCSqGSIb3DQEBCwUAA4IBAQCfq6pVUV73X/SBQpqHD0lj7gx3 5Mhp9OIG43lB32jfCTLw/XwHYqACE4g/6rSRMe3rWb99TzIuWuF4KI8OEhFyzysq QviR+CCSc4VOfUNcCSBZfLrGivk6kw+6nkZtYoTTP8hfr3MO609B3Af72Xke80iS gyFIzGyQPmyK5eEyHQGucuzREvAhDYMdofctrs/xjFdzBDRC+M5ghN0KSo5Qpc/t bO4/4PnnnH13FAib2YQjRXoJSl8K8Ku4bnnkSnfddPXcOF7wcDR2rrBNGLe9WAas G03AlM35OjCvd5pO2vyp/CXTlLWfb4arFn1i05wW0w1+PL2jcuGkFfhCBaBn -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:59 2026 by rpki-client