This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer File: lFlKrsbtZqaAoVv-tc2leC1MLYg.cer (raw, json) Hash identifier: lVKUOoXGS1ZGX8gawQehWtWzXSJ5bXLRFd9/5PF/jsQ= Subject key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286DE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 14:16:58 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152739 IP: 103.125.252.0/22 IP: 2403:ff40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165598 (0x286de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 16 14:16:58 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:1a:9a:8b:74:2c:67:be:da:4e:29:8e:9d: f5:53:71:6c:34:99:d6:fe:40:9a:b1:7e:aa:7a:7f: 3c:49:46:a8:63:c5:71:93:9e:af:03:dd:b4:bb:b8: 11:2b:0a:46:56:b1:28:37:de:96:4a:23:e3:21:d0: 2f:9b:9d:cb:f8:5e:fe:11:2d:d1:64:41:c3:6a:aa: b1:a7:51:26:c7:63:b2:83:c3:b1:46:d0:33:4b:87: 29:20:52:21:e0:09:86:09:e7:65:27:83:ab:b3:8b: 4f:41:d6:53:4c:82:1e:05:15:df:29:50:8f:dd:5c: eb:3e:e3:4d:cb:31:fe:54:b6:cf:49:cb:0f:49:07: 7a:cf:82:e2:ba:cb:a4:38:34:be:77:5d:81:e8:1b: 4e:a2:63:82:c2:e1:f9:b8:73:df:69:ce:a7:4b:8d: dd:9c:74:9c:39:82:c7:ed:a0:1f:9e:6e:76:3c:14: 77:61:e3:07:49:2a:ee:62:e5:b5:38:e8:3b:f9:12: 88:4e:ee:53:1e:10:a2:49:aa:80:61:9b:2e:8e:81: eb:f8:f4:3a:2c:66:43:82:57:99:c9:b6:4a:da:82: 15:40:d9:d2:50:29:68:7f:ee:34:a8:53:81:8b:ca: c1:5e:6d:cb:90:e6:b1:a1:9f:14:ee:5f:c3:23:3f: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152739 sbgp-ipAddrBlock: critical IPv4: 103.125.252.0/22 IPv6: 2403:ff40::/32 Signature Algorithm: sha256WithRSAEncryption 5f:10:37:67:c1:60:96:86:b9:13:4d:ca:39:30:7c:55:ed:4e: 0b:4d:f1:a8:b6:f3:4e:08:56:1c:1b:53:7d:a6:bc:43:16:20: 50:c3:f3:0e:65:8a:7e:06:42:ec:7a:53:00:da:83:7d:30:8d: b0:7f:c4:ff:07:54:9f:98:a9:35:d3:5b:88:bd:bb:99:7b:aa: f5:c0:d8:5a:97:61:57:96:4e:f5:d6:3d:b3:4b:67:eb:e7:a1: c8:b2:04:1e:5f:99:36:5d:1b:bc:92:05:fd:1e:76:38:91:a7: b6:53:ce:90:0c:02:e2:f9:3d:7e:70:71:fc:f0:0b:a8:b0:22: 8d:0d:41:80:62:9f:10:64:22:96:49:4f:06:e0:f1:05:ee:3e: 28:51:a1:dc:0a:5b:05:ef:12:bc:75:0b:95:62:ff:56:9a:ad: e6:ba:7b:cf:20:ad:cd:4e:94:42:2d:5a:a9:c1:d5:77:24:99: ec:a2:eb:f8:e7:c6:b8:0b:8e:19:d5:75:58:0b:98:74:82:e5: c7:39:55:81:1d:94:2a:5c:18:69:98:9b:4c:0f:06:7a:87:44: 06:6b:77:a6:f8:7f:a5:c5:95:0b:18:12:8e:c2:5a:f2:23:21: 9d:99:80:e4:ae:04:13:ba:aa:aa:bc:08:b7:8a:9c:b7:1a:78: 41:00:f4:9b -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAobeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNjE0MTY1OFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJG RUI1Q0RBNTc4MkQ0QzJEODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPjxqai3QsZ77aTimOnfVTcWw0mdb+QJqxfqp6fzxJRqhjxXGTnq8D3bS7uBEr CkZWsSg33pZKI+Mh0C+bncv4Xv4RLdFkQcNqqrGnUSbHY7KDw7FG0DNLhykgUiHg CYYJ52Ung6uzi09B1lNMgh4FFd8pUI/dXOs+403LMf5Uts9Jyw9JB3rPguK6y6Q4 NL53XYHoG06iY4LC4fm4c99pzqdLjd2cdJw5gsftoB+ebnY8FHdh4wdJKu5i5bU4 6Dv5EohO7lMeEKJJqoBhmy6Ogev49DosZkOCV5nJtkraghVA2dJQKWh/7jSoU4GL ysFebcuQ5rGhnxTuX8MjP/bnAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUlFlKrsbt ZqaAoVv+tc2leC1MLYgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUyRUY5LzgwNEQ2QkYwNjA1MjExRUZCMjg2RkQyMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNi dFpxYUFvVnYtdGMybGVDMU1MWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlSjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ338MA0EAgAC MAcDBQAkA/9AMA0GCSqGSIb3DQEBCwUAA4IBAQBfEDdnwWCWhrkTTco5MHxV7U4L TfGotvNOCFYcG1N9prxDFiBQw/MOZYp+BkLselMA2oN9MI2wf8T/B1SfmKk101uI vbuZe6r1wNhal2FXlk711j2zS2fr56HIsgQeX5k2XRu8kgX9HnY4kae2U86QDALi +T1+cHH88AuosCKNDUGAYp8QZCKWSU8G4PEF7j4oUaHcClsF7xK8dQuVYv9Wmq3m unvPIK3NTpRCLVqpwdV3JJnsouv458a4C44Z1XVYC5h0guXHOVWBHZQqXBhpmJtM DwZ6h0QGa3em+H+lxZULGBKOwlryIyGdmYDkrgQTuqqqvAi3ipy3GnhBAPSb -----END CERTIFICATE-----Generated at Sun Jan 25 04:25:51 2026 by rpki-client