This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer File: kzrI56xL07WCmJ_Mty_JJ9cWQks.cer (raw, json) Hash identifier: s3W2TC7vktV/oBmZXhq4fScweo4Jbx0De1SGpJZmUSA= Subject key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028698 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:07:22 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 133929 IP: 43.229.116.0/22 IP: 103.48.140.0/22 IP: 2001:df2:2c00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165528 (0x28698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 14:07:22 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:e2:ef:6b:5d:d3:eb:51:c9:fd:6f:9c:40: e5:21:40:04:ff:fd:62:cd:58:d9:1b:06:7f:15:8e: 75:3a:5d:53:b8:5b:93:84:e1:1a:c7:ee:8d:59:97: f7:5b:ea:7c:78:ef:83:44:74:dc:e0:06:7f:9d:af: a5:3d:0a:2f:8c:25:1b:06:9f:28:2a:f2:15:88:9c: 7a:56:80:5d:75:89:33:31:40:85:46:ad:d8:0b:85: 4c:c5:f2:2c:c1:69:37:9b:76:5e:03:4c:67:da:06: 3b:2f:76:2f:f2:8b:72:92:33:b1:05:86:ff:d6:a0: 44:51:48:80:83:a3:c5:48:46:06:32:3b:2b:45:df: 29:c8:e3:22:5e:81:c4:d4:ea:fa:49:35:35:bd:7f: b9:5d:30:ff:02:33:26:d7:91:1f:84:1b:10:21:a9: 29:a3:69:bc:89:9e:d7:b4:1f:8f:0a:91:96:f8:68: c2:9d:31:c2:0e:4a:4d:ad:02:a5:1f:7a:62:86:ee: 1f:b5:d7:62:27:e6:e7:9e:41:d0:b4:28:dc:bb:7f: 94:13:82:2f:76:f7:bd:df:97:7d:14:13:d1:4c:70: ed:01:b8:50:13:54:ea:52:7f:b0:f4:04:c3:a8:7c: eb:2d:7f:1a:c1:1d:95:0d:8b:af:bb:06:a9:c0:1f: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133929 sbgp-ipAddrBlock: critical IPv4: 43.229.116.0/22 103.48.140.0/22 IPv6: 2001:df2:2c00::/48 Signature Algorithm: sha256WithRSAEncryption 22:e4:a6:e7:ef:45:ee:eb:29:66:59:2d:b4:ac:4b:a0:86:67: 68:a6:1e:17:eb:7f:b8:ff:b2:0b:72:46:a8:3b:96:a9:70:26: 63:58:c6:6e:e1:b0:5c:10:bc:c3:dc:3c:c0:4c:aa:38:ff:01: cb:f1:9f:80:07:7c:32:b0:63:9e:a8:f9:22:01:d4:46:b1:a7: ba:6d:7e:3e:18:d7:42:fe:a4:4a:a3:d1:e1:47:0a:89:9a:26: 46:a0:35:45:dc:94:30:71:d8:d8:54:63:8e:74:62:1b:d1:97: aa:4e:4c:5d:ca:41:74:17:a6:29:9f:e8:e5:4b:76:f3:da:47: 08:40:50:d2:29:30:95:15:4b:21:1d:17:59:2b:ef:43:53:ff: fc:78:b2:60:e0:37:4e:51:2e:86:13:02:f4:83:2e:6b:53:d3: d7:c3:2e:99:ea:57:38:74:a3:90:27:87:33:ab:f4:a0:0a:d3: e0:ce:84:02:5b:19:0d:19:b4:fd:8c:64:26:44:bc:77:50:c5: 35:f6:df:d2:f7:21:5b:4d:12:10:a2:25:c6:20:f1:7a:a2:d0: 76:38:bb:74:f2:69:43:f5:95:38:20:8d:54:2c:c6:78:c4:6e: 0e:d5:e8:9d:af:dc:71:10:47:1c:10:7f:c9:c1:93:7e:3c:5f: 98:5b:87:9a -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAoaYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTE0MDcyMloXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZD Q0I3MkZDOTI3RDcxNjQyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbTOLva13T61HJ/W+cQOUhQAT//WLNWNkbBn8VjnU6XVO4W5OE4RrH7o1Zl/db 6nx474NEdNzgBn+dr6U9Ci+MJRsGnygq8hWInHpWgF11iTMxQIVGrdgLhUzF8izB aTebdl4DTGfaBjsvdi/yi3KSM7EFhv/WoERRSICDo8VIRgYyOytF3ynI4yJegcTU 6vpJNTW9f7ldMP8CMybXkR+EGxAhqSmjabyJnte0H48KkZb4aMKdMcIOSk2tAqUf emKG7h+112In5ueeQdC0KNy7f5QTgi92973fl30UE9FMcO0BuFATVOpSf7D0BMOo fOstfxrBHZUNi6+7BqnAH18dAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUkzrI56xL 07WCmJ/Mty/JJ9cWQkswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM3OUUxLzY1NTZGOERBRDc4NDExRUE5QzVEOTY0MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4 TDA3V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgspMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCK+V0AwQCZzCM MA8EAgACMAkDBwAgAQ3yLAAwDQYJKoZIhvcNAQELBQADggEBACLkpufvRe7rKWZZ LbSsS6CGZ2imHhfrf7j/sgtyRqg7lqlwJmNYxm7hsFwQvMPcPMBMqjj/Acvxn4AH fDKwY56o+SIB1Eaxp7ptfj4Y10L+pEqj0eFHComaJkagNUXclDBx2NhUY450YhvR l6pOTF3KQXQXpimf6OVLdvPaRwhAUNIpMJUVSyEdF1kr70NT//x4smDgN05RLoYT AvSDLmtT09fDLpnqVzh0o5AnhzOr9KAK0+DOhAJbGQ0ZtP2MZCZEvHdQxTX239L3 IVtNEhCiJcYg8Xqi0HY4u3TyaUP1lTggjVQsxnjEbg7V6J2v3HEQRxwQf8nBk348 X5hbh5o= -----END CERTIFICATE-----Generated at Sun Jan 25 02:52:00 2026 by rpki-client