This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer File: kUhQxLilE7L45O3EtVeHB3djcq4.cer (raw, json) Hash identifier: udVG6J4izvXkfjnQDosFsTVIPqL8s/0gGuFj0qoxZNY= Subject key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281BC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 12:30:51 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133551 IP: 103.48.0.0/23 IP: 2001:df1:a040::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 09:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164284 (0x281bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 12:30:51 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:26:b9:c3:01:d0:1a:b2:c7:d0:ac:db:32: 0e:08:d0:a1:e3:6a:3d:4f:76:bb:c4:64:46:8e:fc: a7:4b:bf:2e:a0:91:d0:44:79:3a:16:37:6e:59:a6: 9a:0e:07:d1:20:16:ee:44:44:da:c2:f7:ac:5d:f6: 40:f7:65:57:db:6e:d2:d2:ee:74:12:78:aa:74:f1: ee:5a:d3:c3:e5:16:20:e7:d3:e1:d0:6a:ef:b9:ac: 8b:c6:f8:6b:70:ed:99:1b:cf:f1:61:ba:41:ad:c2: 66:26:8d:91:b4:57:e3:62:0b:c2:42:e5:24:d2:9f: cd:5e:ac:14:18:3f:69:94:ae:d1:29:0e:82:0d:01: 9e:46:3d:c5:e6:9f:66:7a:49:f6:6b:0b:ae:bc:00: b4:b8:fb:de:9d:90:97:17:17:89:b6:1c:3e:4a:ca: 8a:d4:a5:c7:6b:d3:f0:4e:05:81:8e:de:c7:c2:de: df:28:28:ba:d9:06:3b:07:a8:17:0b:77:66:23:97: 3d:69:f6:ef:d4:53:f5:8c:56:76:92:6b:54:70:22: f8:bd:08:8c:ed:4a:87:ba:72:fe:c7:85:a2:2b:ef: b6:26:d1:96:f0:e9:1a:bf:00:4a:de:5e:85:1a:af: 40:94:5e:45:68:9a:bd:30:a4:5f:3b:45:da:87:70: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133551 sbgp-ipAddrBlock: critical IPv4: 103.48.0.0/23 IPv6: 2001:df1:a040::/48 Signature Algorithm: sha256WithRSAEncryption 29:ac:46:ba:e0:9f:4b:b0:c6:42:60:c0:75:10:b6:35:e1:dc: 0b:58:01:29:8c:01:78:1f:58:24:21:9a:15:74:9e:b2:95:d4: 95:01:b6:b3:57:76:4b:41:d9:ef:a0:b1:87:2b:c2:d7:d8:64: 4c:80:3b:5e:3a:9b:e4:53:cc:a5:f2:3e:26:32:05:46:65:ef: 4a:25:c5:9a:60:60:f9:e7:89:1b:7c:3d:1c:5c:ab:bd:5f:ba: 4d:96:7f:7d:2f:75:0f:a4:f1:6b:3e:b3:b8:e7:7a:98:0e:1c: ef:58:c3:ba:ad:71:3d:ba:7a:2c:37:64:d8:27:8d:6e:37:1a: 0d:6f:6b:85:e6:df:c0:e2:15:a3:d1:f3:74:d5:c5:3b:08:0a: 03:ff:a7:7b:68:38:0e:28:93:02:92:46:3e:09:0f:fa:78:65: bb:64:9e:4a:14:0c:1b:58:6b:e7:1f:4f:60:c5:d2:98:59:58: fd:28:0f:4c:38:ad:16:c5:95:59:20:4b:4a:91:81:d3:d2:e2: cb:7a:e3:63:12:1f:b1:b9:4a:57:24:64:69:5e:e0:91:f5:38: cb:d0:71:08:fd:ab:b4:2f:e0:5c:12:e0:18:6c:06:d9:bf:85: 45:75:42:93:2e:c9:a5:d9:0a:57:84:5c:d3:5a:55:5e:51:a7: cf:77:36:fb -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoG8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDEyMzA1MVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURD NEI1NTc4NzA3Nzc2MzcyQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMZia5wwHQGrLH0KzbMg4I0KHjaj1PdrvEZEaO/KdLvy6gkdBEeToWN25ZppoO B9EgFu5ERNrC96xd9kD3ZVfbbtLS7nQSeKp08e5a08PlFiDn0+HQau+5rIvG+Gtw 7Zkbz/FhukGtwmYmjZG0V+NiC8JC5STSn81erBQYP2mUrtEpDoINAZ5GPcXmn2Z6 SfZrC668ALS4+96dkJcXF4m2HD5KyorUpcdr0/BOBYGO3sfC3t8oKLrZBjsHqBcL d2Yjlz1p9u/UU/WMVnaSa1RwIvi9CIztSoe6cv7HhaIr77Ym0Zbw6Rq/AEreXoUa r0CUXkVomr0wpF87RdqHcJzZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUkUhQxLil E7L45O3EtVeHB3djcq4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIxNUIzL0U2RjY4RjA2MEI0QjExRUVBQjlBQUQ3OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyMTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExp bEU3TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgmvMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZzAAMA8EAgAC MAkDBwAgAQ3xoEAwDQYJKoZIhvcNAQELBQADggEBACmsRrrgn0uwxkJgwHUQtjXh 3AtYASmMAXgfWCQhmhV0nrKV1JUBtrNXdktB2e+gsYcrwtfYZEyAO146m+RTzKXy PiYyBUZl70olxZpgYPnniRt8PRxcq71fuk2Wf30vdQ+k8Ws+s7jnepgOHO9Yw7qt cT26eiw3ZNgnjW43Gg1va4Xm38DiFaPR83TVxTsICgP/p3toOA4okwKSRj4JD/p4 ZbtknkoUDBtYa+cfT2DF0phZWP0oD0w4rRbFlVkgS0qRgdPS4st642MSH7G5Slck ZGle4JH1OMvQcQj9q7Qv4FwS4BhsBtm/hUV1QpMuyaXZCleEXNNaVV5Rp893Nvs= -----END CERTIFICATE-----Generated at Sun Jan 25 12:23:27 2026 by rpki-client