This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer File: kHuyYrVxYj40suIMYKcYwXOcw70.cer (raw, json) Hash identifier: zlq1eYXIlegkuV4Gu+D7e3n8EWmOa6KvMhGyayMYMws= Subject key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02841C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:50:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 135885 IP: 103.229.1.0/24 IP: 2001:df4:5800::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164892 (0x2841c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 6 13:50:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:b4:ed:e7:e4:b2:f4:13:55:08:18:87:3f: f4:9c:95:24:74:5d:a6:99:6b:ee:0f:dd:51:4a:cb: 97:aa:30:17:0c:59:b3:e5:9a:be:70:f7:81:b2:da: b6:08:37:60:ae:37:33:28:8a:d3:b4:82:e2:f8:f1: b1:d8:43:7c:60:1e:6d:06:6d:0b:05:fc:b1:8b:d5: 1c:ad:01:c1:db:77:e9:f0:79:bf:1b:e0:1c:6a:c4: c4:bd:a7:a0:a6:ac:08:f7:dd:53:26:8f:22:8a:29: c4:e8:68:c6:fe:02:a8:7e:74:e5:c2:de:96:10:df: 12:b4:9e:8b:bf:08:95:30:d0:8d:bf:4f:d0:49:2c: f3:f7:3e:ec:e9:f0:c0:cf:c4:fe:4a:85:df:34:65: fb:55:90:21:7d:51:b3:c3:a4:39:d8:d0:f7:a8:d8: ab:8c:8f:30:24:c0:fe:ff:2f:52:1b:a2:3e:3d:e3: a5:b2:93:b1:61:00:ad:b1:78:0d:b1:fc:4a:bd:ce: c4:01:4d:d5:fb:c6:f3:ad:60:35:c3:8c:56:24:b9: f7:ad:d7:fb:20:41:b2:aa:f3:a1:4e:05:43:4b:70: fa:de:b6:2c:d7:ea:15:25:4b:b5:62:e0:c7:73:5d: 97:aa:74:bb:f5:88:6d:5c:32:c8:bf:8d:d6:aa:e4: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135885 sbgp-ipAddrBlock: critical IPv4: 103.229.1.0/24 IPv6: 2001:df4:5800::/48 Signature Algorithm: sha256WithRSAEncryption 84:e1:77:8c:2a:8a:30:83:e7:74:f8:1f:f7:51:7b:a4:21:d9: 37:d6:23:ad:04:7b:55:57:48:88:5d:9f:a6:d4:c6:69:4e:f5: be:23:c1:5c:01:d1:08:f5:ce:82:2c:d3:83:60:99:12:a9:a1: aa:3c:69:b1:2f:5e:b0:2f:e0:1a:be:62:7d:2d:16:cc:5f:e7: 57:f1:d8:99:d6:4e:98:ec:b5:99:30:30:a4:ce:2f:00:52:44: 26:b0:37:42:5c:b1:c2:f2:1b:ef:d6:e4:ba:a0:f9:bf:89:c8: 40:8e:ed:7f:22:fb:7f:c2:64:dd:38:4e:2c:67:ec:29:78:79: 1f:63:e8:97:d7:06:19:1d:7e:47:2a:14:3a:77:98:dd:28:06: a5:c9:f5:07:fd:6f:93:81:91:bd:a1:f5:28:5c:08:95:00:4a: 0b:9b:15:bb:3c:a4:81:d5:34:49:5a:7d:3c:9b:30:43:9c:c9: 2c:b7:a7:5a:2e:83:ba:1b:4f:c9:f6:21:3a:79:1b:71:a7:34: 6e:eb:09:af:01:7d:d5:57:b0:e7:96:3f:86:54:b5:30:dd:d6: 2a:0d:fd:d1:b4:fe:31:3b:8e:4e:f9:e6:56:41:f7:c7:75:5e: 5a:df:8b:25:32:f5:db:d6:94:03:bf:87:bb:ba:f8:d7:af:24: 15:e1:48:6d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoQcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNjEzNTAwOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIw QzYwQTcxOEMxNzM5Q0MzQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAurTt5+Sy9BNVCBiHP/SclSR0XaaZa+4P3VFKy5eqMBcMWbPlmr5w94Gy2rYI N2CuNzMoitO0guL48bHYQ3xgHm0GbQsF/LGL1RytAcHbd+nweb8b4BxqxMS9p6Cm rAj33VMmjyKKKcToaMb+Aqh+dOXC3pYQ3xK0nou/CJUw0I2/T9BJLPP3Puzp8MDP xP5Khd80ZftVkCF9UbPDpDnY0Peo2KuMjzAkwP7/L1Iboj4946Wyk7FhAK2xeA2x /Eq9zsQBTdX7xvOtYDXDjFYkufet1/sgQbKq86FOBUNLcPretizX6hUlS7Vi4Mdz XZeqdLv1iG1cMsi/jdaq5LrNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUkHuyYrVx Yj40suIMYKcYwXOcw70wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEzQTY0LzM1OEM2N0JFOUFEQTExRUM4NTcxMzM3OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBM0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJW eFlqNDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhLNMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ+UBMA8EAgAC MAkDBwAgAQ30WAAwDQYJKoZIhvcNAQELBQADggEBAIThd4wqijCD53T4H/dRe6Qh 2TfWI60Ee1VXSIhdn6bUxmlO9b4jwVwB0Qj1zoIs04NgmRKpoao8abEvXrAv4Bq+ Yn0tFsxf51fx2JnWTpjstZkwMKTOLwBSRCawN0JcscLyG+/W5Lqg+b+JyECO7X8i +3/CZN04Tixn7Cl4eR9j6JfXBhkdfkcqFDp3mN0oBqXJ9Qf9b5OBkb2h9ShcCJUA SgubFbs8pIHVNElafTybMEOcySy3p1oug7obT8n2ITp5G3GnNG7rCa8BfdVXsOeW P4ZUtTDd1ioN/dG0/jE7jk755lZB98d1XlrfiyUy9dvWlAO/h7u6+NevJBXhSG0= -----END CERTIFICATE-----Generated at Sun Jan 25 01:21:24 2026 by rpki-client