This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer File: jowmjxBHCaZsjW9iCludk8Ga8FA.cer (raw, json) Hash identifier: 6GWUR9if6w+zFbCWgl+Uf+9TUM5ZHdvz2Iuy/pzadw8= Subject key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02845B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 12:55:51 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 175.41.16.0/20 IP: 2400:e840::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164955 (0x2845b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 7 12:55:51 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:3e:e6:98:6f:e5:17:54:94:60:5c:00:6f: 21:1a:ee:04:e6:e3:a2:da:01:59:80:79:bc:53:42: aa:38:7e:50:e7:81:93:05:28:2f:3b:d1:b4:cb:61: b0:9a:fd:3c:49:dd:2f:b5:2b:22:60:f7:13:e2:eb: 48:fc:65:61:1b:98:16:56:2a:d0:22:12:70:2a:53: eb:e2:5d:0d:ca:ff:d3:ec:a2:35:c8:24:d3:b9:7c: 45:18:c8:29:d6:7f:ee:dc:c2:c6:03:1e:a8:8b:9b: a7:82:7f:b3:c4:0f:cc:a6:3e:7d:ac:20:61:41:84: e4:57:16:e5:76:19:89:d8:43:06:c2:54:d4:d1:31: 7d:98:9e:3b:71:ca:c7:66:27:44:51:4c:e7:4a:1e: 8f:32:24:9a:e9:f0:aa:ff:6e:56:82:0a:68:a3:1c: aa:4e:6f:8f:53:61:a1:15:6a:a5:5b:7f:89:88:4e: 35:41:25:50:a8:61:6e:1c:b1:03:f8:09:57:7a:8b: d9:49:e8:56:b5:36:f1:0f:c3:3c:fd:7e:d5:4f:01: 27:3f:51:dc:92:d3:25:f8:95:14:dd:a1:75:40:c5: b4:85:ea:a6:cc:df:30:b9:bf:19:27:94:f7:27:6c: 24:21:b1:73:1c:03:d7:ec:45:27:3b:e7:ad:5a:33: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.41.16.0/20 IPv6: 2400:e840::/32 Signature Algorithm: sha256WithRSAEncryption b0:21:55:c1:d0:11:32:fc:d4:31:5a:0a:c8:f4:de:0a:90:59: ce:2a:f8:ae:15:de:2e:dc:0e:8f:76:ca:c4:bd:33:51:7d:48: 5f:45:1c:75:89:39:01:58:0c:98:1c:b2:17:b5:f2:39:b0:1e: ba:0e:9a:63:99:0a:c5:bd:1c:6d:66:fd:cd:8a:e7:82:7a:d2: 17:f5:03:17:5e:f1:77:a1:46:3e:5a:9f:ec:a1:60:ab:21:bc: 62:64:7f:88:97:7c:fa:7a:ab:39:97:f5:91:0d:52:3c:3d:1a: 4f:7d:4e:a2:ed:89:c9:5a:e7:59:81:2d:de:71:71:90:fc:3d: 08:ac:e5:d5:00:14:04:55:09:78:b7:02:5e:da:ef:37:94:ad: 0a:27:e3:fe:77:4d:d3:f2:d0:57:78:e5:58:bf:87:9c:c8:27: 42:3c:a9:0b:64:f3:83:e1:4d:40:9b:0f:04:c0:91:7c:74:ff: c1:c5:5e:e1:62:e4:9b:92:24:5b:ac:0e:3a:60:9f:31:94:d3: 38:3d:24:b5:c4:2e:60:64:81:78:e4:32:89:54:db:83:c4:80: 4d:04:99:ee:cf:6b:ee:52:36:51:4b:ac:51:ff:0b:3e:2d:1e: ac:0a:41:06:ae:9e:24:ee:e2:e5:4b:22:79:61:88:19:15:7c: 96:f1:30:19 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAoRbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNzEyNTU1MVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2 MjBBNUI5RDkzQzE5QUYwNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPWz7mmG/lF1SUYFwAbyEa7gTm46LaAVmAebxTQqo4flDngZMFKC870bTLYbCa /TxJ3S+1KyJg9xPi60j8ZWEbmBZWKtAiEnAqU+viXQ3K/9PsojXIJNO5fEUYyCnW f+7cwsYDHqiLm6eCf7PED8ymPn2sIGFBhORXFuV2GYnYQwbCVNTRMX2Ynjtxysdm J0RRTOdKHo8yJJrp8Kr/blaCCmijHKpOb49TYaEVaqVbf4mITjVBJVCoYW4csQP4 CVd6i9lJ6Fa1NvEPwzz9ftVPASc/UdyS0yX4lRTdoXVAxbSF6qbM3zC5vxknlPcn bCQhsXMcA9fsRSc7561aM+kLAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUjowmjxBH CaZsjW9iCludk8Ga8FAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ1RUZGLzQ1MTdFQ0U4MzBBQTExRUM4NDVEREQ1MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhC SENhWnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBASvKRAwDQQCAAIwBwMFACQA6EAwDQYJKoZIhvcNAQELBQADggEB ALAhVcHQETL81DFaCsj03gqQWc4q+K4V3i7cDo92ysS9M1F9SF9FHHWJOQFYDJgc she18jmwHroOmmOZCsW9HG1m/c2K54J60hf1Axde8XehRj5an+yhYKshvGJkf4iX fPp6qzmX9ZENUjw9Gk99TqLticla51mBLd5xcZD8PQis5dUAFARVCXi3Al7a7zeU rQon4/53TdPy0Fd45Vi/h5zIJ0I8qQtk84PhTUCbDwTAkXx0/8HFXuFi5JuSJFus DjpgnzGU0zg9JLXELmBkgXjkMolU24PEgE0Eme7Pa+5SNlFLrFH/Cz4tHqwKQQau niTu4uVLInlhiBkVfJbxMBk= -----END CERTIFICATE-----Generated at Sun Jan 25 01:15:52 2026 by rpki-client