This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer (raw, json) Hash identifier: PdYKVq05dTZdUi0zDHE6IkI4jtprrHIC4s5erqPjZ80= Subject key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286D5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 13:50:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133938 AS: 140078 IP: 103.48.119.0/24 IP: 103.108.140.0/24 IP: 103.132.96.0/24 IP: 2404:2f40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165589 (0x286d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 16 13:50:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:5e:68:d2:15:85:4d:3e:1f:52:b8:45:2f: 15:18:ee:94:1a:5e:bf:91:74:f1:9c:9b:41:cd:ba: 13:97:86:9d:94:28:48:20:e1:2b:98:5f:35:9c:f3: 1d:e9:13:03:13:08:b9:18:89:ba:41:f1:f8:3d:08: f4:f1:26:b9:01:4e:e9:f5:d5:86:37:79:2b:e1:01: ad:13:6f:b0:20:3d:0a:fe:1f:f2:96:7b:6d:7b:47: 0c:35:df:7c:d1:6a:17:c9:32:30:c5:72:7a:af:0f: 69:46:78:c5:f8:b2:42:d9:d5:57:25:31:53:5f:73: 65:47:1c:c9:be:47:af:56:cc:5f:86:f8:e7:93:ee: 0b:a8:19:9c:50:f1:3e:c3:a1:0a:aa:e9:aa:86:7f: 49:86:41:a4:cc:d9:10:a1:12:30:67:dc:24:b7:e7: 6f:ad:65:2b:bc:94:c9:b6:9b:83:ce:90:a3:62:f5: 9a:39:d2:07:be:fd:23:7d:b3:c6:bd:e4:54:29:89: 72:e1:de:09:a5:0f:b9:44:b3:33:24:a0:fa:82:d4: e6:f5:9a:09:b5:ba:1f:52:1f:dd:51:8a:29:40:3a: c9:23:48:eb:b2:d9:3c:ef:df:52:98:68:0b:2f:16: 6f:0a:b3:26:a7:c7:14:eb:94:c0:37:d9:c5:ae:cc: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133938 140078 sbgp-ipAddrBlock: critical IPv4: 103.48.119.0/24 103.108.140.0/24 103.132.96.0/24 IPv6: 2404:2f40::/32 Signature Algorithm: sha256WithRSAEncryption a6:7b:fd:9c:d6:66:f0:b9:74:70:aa:d4:6c:92:97:67:e5:03: 25:d2:cf:e1:a7:1f:a6:1b:60:00:0f:e1:f9:71:48:7a:32:66: 45:73:0d:cb:0c:44:7c:74:1f:70:20:03:11:3b:9e:dd:15:0b: 0a:c0:5d:c6:9e:49:ad:b7:1b:cf:8c:b8:61:e4:51:1c:a3:c1: 81:59:9e:77:e4:ac:1c:cb:ec:f0:37:3c:da:03:1b:b6:cd:b8: 7d:65:7a:a7:cc:a0:34:af:cd:32:cb:04:69:e4:98:a2:3a:77: d5:bc:17:ed:a1:2b:e5:9d:45:e0:e1:5a:42:b3:53:2d:6b:fb: bd:7b:fb:81:0c:cd:fc:b7:33:4b:dd:8d:42:8c:8c:3b:28:66: 31:9c:63:e1:35:0c:c8:3c:c5:b3:b6:69:6e:63:86:6e:a2:50: 64:14:51:72:4b:af:9c:31:03:64:70:0c:55:d7:b8:f3:0d:9a: d3:48:9d:0f:06:d0:f7:a4:da:63:f0:56:5f:fd:2d:d8:a5:26: 9e:e9:65:d2:4f:7a:3c:41:6e:bb:d3:85:ed:83:54:4a:89:8d: be:39:e2:4b:93:28:ba:d9:a4:1d:fd:2f:9a:0f:54:2d:e2:67: 35:1e:51:eb:d3:53:69:55:8a:e8:e2:2e:58:df:ad:d9:89:4c: b5:b1:70:1e -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAobVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNjEzNTAxNVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5 NUYwQ0E1MEZFRTAwNjI1NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAfV5o0hWFTT4fUrhFLxUY7pQaXr+RdPGcm0HNuhOXhp2UKEgg4SuYXzWc8x3p EwMTCLkYibpB8fg9CPTxJrkBTun11YY3eSvhAa0Tb7AgPQr+H/KWe217Rww133zR ahfJMjDFcnqvD2lGeMX4skLZ1VclMVNfc2VHHMm+R69WzF+G+OeT7guoGZxQ8T7D oQqq6aqGf0mGQaTM2RChEjBn3CS352+tZSu8lMm2m4POkKNi9Zo50ge+/SN9s8a9 5FQpiXLh3gmlD7lEszMkoPqC1Ob1mgm1uh9SH91RiilAOskjSOuy2Tzv31KYaAsv Fm8KsyanxxTrlMA32cWuzL+1AgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUjJ9EB3zF HbCUj7KV8MpQ/uAGJUswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFCMzg0L0JGNEJENDU4NDQ4MzExRUE4RUJDNkQyNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6 RkhiQ1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgsyAgMCIy4wOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBABnMHcD BABnbIwDBABnhGAwDQQCAAIwBwMFACQEL0AwDQYJKoZIhvcNAQELBQADggEBAKZ7 /ZzWZvC5dHCq1GySl2flAyXSz+GnH6YbYAAP4flxSHoyZkVzDcsMRHx0H3AgAxE7 nt0VCwrAXcaeSa23G8+MuGHkURyjwYFZnnfkrBzL7PA3PNoDG7bNuH1leqfMoDSv zTLLBGnkmKI6d9W8F+2hK+WdReDhWkKzUy1r+717+4EMzfy3M0vdjUKMjDsoZjGc Y+E1DMg8xbO2aW5jhm6iUGQUUXJLr5wxA2RwDFXXuPMNmtNInQ8G0Pek2mPwVl/9 LdilJp7pZdJPejxBbrvThe2DVEqJjb454kuTKLrZpB39L5oPVC3iZzUeUevTU2lV iujiLljfrdmJTLWxcB4= -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:52 2026 by rpki-client