This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer File: kS3Nd84XYnPZShzEJZKtBclnamI.cer (raw, json) Hash identifier: dTVLRRcv9w7tQyFBUjQBG9BoeNpLyvLKkf+EAcc+gFQ= Subject key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0285F1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 14:06:04 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.175.192.0/23 IP: 2001:df7:fb80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165361 (0x285f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 13 14:06:04 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:fa:3f:84:f6:e6:a9:18:dc:b0:5e:58:bd: 00:6f:b1:a7:ae:96:36:fd:37:27:e6:dd:e4:8e:72: 3a:d2:69:4a:50:fa:f8:70:54:3a:8d:6b:2e:b9:0a: 7a:8a:8b:1d:38:a2:35:2b:5a:7e:b9:cc:71:3d:7a: 1c:e4:6a:62:8e:10:c1:77:81:04:d0:74:c7:32:ac: 6e:06:b6:73:d8:ec:e1:3c:08:1f:01:8c:4e:e0:0d: be:c3:52:45:2b:f3:5e:e0:d7:a5:7a:e7:9b:1f:23: b9:77:19:6b:56:37:b2:e4:0a:6b:73:22:2c:5e:5c: ac:b1:2d:44:b3:82:c7:44:55:73:01:05:88:ba:b7: fb:53:4d:36:27:4f:df:3a:f1:f0:a0:b0:63:fe:92: 92:4d:03:81:df:ba:bb:19:8a:75:11:88:a8:61:65: db:7f:19:0c:06:80:48:8f:e1:fc:5a:0d:39:1a:92: 1a:f1:f5:61:ea:87:1c:83:63:e6:d0:fe:ac:d1:92: 80:95:55:0f:bb:0e:d6:3b:b1:46:00:25:22:6f:a9: 34:74:e1:90:f5:a7:5b:a4:40:bd:b9:a2:58:d5:ba: 76:60:1f:ff:08:50:b1:b7:b6:2e:cc:37:04:9a:1e: bc:64:f6:c0:6d:fa:97:e2:d5:5a:5c:51:d2:b1:91: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.192.0/23 IPv6: 2001:df7:fb80::/48 Signature Algorithm: sha256WithRSAEncryption 8c:6c:73:d9:ff:43:5b:80:1a:6a:98:d4:b1:e6:7d:21:f9:0b: f1:22:8b:3c:57:dd:07:36:c5:4d:5f:2d:2e:07:df:6d:aa:01: 5b:69:1d:dd:72:1d:11:a9:fd:d0:48:29:2c:e0:23:e2:d7:ae: 6d:99:01:25:60:d0:3f:4d:f6:bc:96:ef:5d:e1:6a:55:b7:53: 00:e6:94:40:3e:24:d3:e6:42:98:d6:22:67:78:ed:4b:e7:50: 27:b0:d0:9d:d2:9c:69:17:1d:1e:72:05:ec:62:dc:1b:ce:31: c9:1c:e1:7f:ae:14:05:33:64:a3:72:e1:1a:38:f2:37:80:2c: 1f:ed:da:dd:5b:58:f6:31:01:a1:52:2b:66:9f:66:45:6f:ec: 02:89:86:38:8e:e1:46:e5:f6:bd:1c:1c:00:09:52:3b:aa:3d: 3e:ba:82:4f:7b:b9:cb:6f:0e:1c:a0:86:3a:72:e6:f1:3b:f8: 4a:f2:df:95:42:bb:07:1e:6b:43:58:44:d0:a2:5d:53:64:e4: 29:c7:dc:0d:26:6a:ad:e3:d3:da:8e:ca:58:98:cd:a4:a0:a4: 71:38:23:89:79:fc:4b:97:e0:6e:2a:bd:d2:bb:0e:17:05:14: 98:2c:80:b5:70:d1:f1:6d:ab:0e:89:2c:15:2e:d6:12:2b:2f: be:1e:26:c3 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAoXxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMzE0MDYwNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUND NDI1OTJBRDA1Qzk2NzZBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLGfo/hPbmqRjcsF5YvQBvsaeuljb9Nyfm3eSOcjrSaUpQ+vhwVDqNay65CnqK ix04ojUrWn65zHE9ehzkamKOEMF3gQTQdMcyrG4GtnPY7OE8CB8BjE7gDb7DUkUr 817g16V655sfI7l3GWtWN7LkCmtzIixeXKyxLUSzgsdEVXMBBYi6t/tTTTYnT986 8fCgsGP+kpJNA4HfursZinURiKhhZdt/GQwGgEiP4fxaDTkakhrx9WHqhxyDY+bQ /qzRkoCVVQ+7DtY7sUYAJSJvqTR04ZD1p1ukQL25oljVunZgH/8IULG3ti7MNwSa Hrxk9sBt+pfi1VpcUdKxkRFfAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUkS3Nd84X YnPZShzEJZKtBclnamIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNBNkU2LzNCODNBRkUwRjBEMDExRUQ4MDUwNzY2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0 WFluUFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnr8AwDwQCAAIwCQMHACABDff7gDANBgkqhkiG9w0BAQsFAAOC AQEAjGxz2f9DW4AaapjUseZ9IfkL8SKLPFfdBzbFTV8tLgffbaoBW2kd3XIdEan9 0EgpLOAj4teubZkBJWDQP032vJbvXeFqVbdTAOaUQD4k0+ZCmNYiZ3jtS+dQJ7DQ ndKcaRcdHnIF7GLcG84xyRzhf64UBTNko3LhGjjyN4AsH+3a3VtY9jEBoVIrZp9m RW/sAomGOI7hRuX2vRwcAAlSO6o9PrqCT3u5y28OHKCGOnLm8Tv4SvLflUK7Bx5r Q1hE0KJdU2TkKcfcDSZqrePT2o7KWJjNpKCkcTgjiXn8S5fgbiq90rsOFwUUmCyA tXDR8W2rDoksFS7WEisvvh4mww== -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:16 2026 by rpki-client