This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer (raw, json) Hash identifier: H/o0jw9gyrhxzLX7yrRFxwO260iymak0YuCrkGr9CIc= Subject key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02868F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 13:54:53 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149026 IP: 103.176.218.0/23 IP: 2400:35e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165519 (0x2868f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 13:54:53 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:53:dc:a8:1e:05:77:06:e6:2d:6a:a3:58: 70:c5:2a:e8:f7:ff:62:6f:28:bc:8c:ad:2c:42:5d: 9c:1e:0f:1e:e6:37:50:02:63:a0:dc:96:42:d8:94: 27:47:8c:1f:4b:d5:a5:37:11:6b:1b:59:5b:98:47: be:28:fa:8e:87:18:17:65:81:fd:ef:ac:cb:22:e8: 4a:c7:08:e1:1d:b2:5a:17:8a:8b:48:01:8e:16:e4: 03:0e:40:8a:9f:71:53:71:f1:31:34:ea:6e:bc:b2: 9f:04:1f:46:d9:4d:0e:07:c5:fe:3d:25:5a:b9:16: cc:f6:45:8f:4a:b2:55:da:32:17:13:97:68:06:63: 5d:60:22:3c:47:7c:df:2f:b7:4d:70:69:5a:3f:b6: 48:c0:17:a5:46:83:8d:82:a3:fe:5d:85:1a:0a:ec: 04:47:b1:0e:d9:91:09:60:35:47:b5:ea:c4:d1:3a: a5:ea:94:00:13:8c:d9:94:06:f6:df:13:45:17:e2: 45:d4:d6:e2:bf:69:e1:0c:6a:c4:98:99:d1:9d:af: fe:d5:c9:0c:6e:8b:d3:4d:e1:aa:b5:5b:06:4b:e9: 24:a3:d8:48:0d:b2:3d:52:d9:1a:88:d5:b4:02:24: 63:ab:6d:1e:e8:e6:37:73:59:e8:85:37:c7:95:3d: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149026 sbgp-ipAddrBlock: critical IPv4: 103.176.218.0/23 IPv6: 2400:35e0::/32 Signature Algorithm: sha256WithRSAEncryption d5:ba:4e:c7:57:e9:12:b8:69:bf:54:35:aa:e6:af:71:01:18: 0c:ae:45:28:81:db:7c:41:0f:9f:77:b0:5b:90:11:07:1f:5a: 70:3e:91:3e:81:55:72:b4:0b:54:e7:8c:47:c4:b8:7f:e2:2e: ae:1c:d2:17:bc:e0:c9:ef:a8:3e:0b:2b:12:d1:cf:5b:3e:58: 23:95:27:65:a4:ff:89:a4:8d:3c:ff:f8:22:16:3f:e8:82:6d: b4:f4:dd:cc:f1:b6:65:39:48:d8:d7:2a:34:cf:e9:3d:9d:7a: 18:c3:85:27:69:c4:d8:d4:08:43:43:76:13:70:af:21:cd:50: df:2e:88:4a:ad:33:40:07:37:ae:b8:8b:98:c3:8d:cd:25:f7: bb:01:5e:17:11:02:81:59:01:6e:c5:8b:c6:0a:a6:89:89:69: a2:10:49:7c:da:08:f9:b7:40:82:63:8a:0a:80:f0:bf:52:4d: a8:03:6c:68:57:f5:ef:7c:87:76:4f:cb:ca:56:26:83:1e:21: 55:73:ca:d0:2b:e4:de:8c:9f:08:36:88:06:57:1c:fc:fc:70: 49:59:c5:38:dc:7b:20:a3:6f:c7:85:41:e1:d4:87:46:da:d5: fb:1f:57:a6:bf:38:cb:b4:ce:0b:f1:23:f6:f1:21:3b:18:c0: 8f:c4:79:df -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoaPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTEzNTQ1M1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlD RThENDgzQkQ5QkQxQUUzM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0xFPcqB4FdwbmLWqjWHDFKuj3/2JvKLyMrSxCXZweDx7mN1ACY6DclkLYlCdH jB9L1aU3EWsbWVuYR74o+o6HGBdlgf3vrMsi6ErHCOEdsloXiotIAY4W5AMOQIqf cVNx8TE06m68sp8EH0bZTQ4Hxf49JVq5Fsz2RY9KslXaMhcTl2gGY11gIjxHfN8v t01waVo/tkjAF6VGg42Co/5dhRoK7ARHsQ7ZkQlgNUe16sTROqXqlAATjNmUBvbf E0UX4kXU1uK/aeEMasSYmdGdr/7VyQxui9NN4aq1WwZL6SSj2EgNsj1S2RqI1bQC JGOrbR7o5jdzWeiFN8eVPaLFAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUlT7Cob5w JZ5qL9nOjUg72b0a4z8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIwNzVCLzQ0QTEzQjRFNEMxMDExRUNBNUQyQTk0RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1 d0paNXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYiMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7DaMA0EAgAC MAcDBQAkADXgMA0GCSqGSIb3DQEBCwUAA4IBAQDVuk7HV+kSuGm/VDWq5q9xARgM rkUogdt8QQ+fd7BbkBEHH1pwPpE+gVVytAtU54xHxLh/4i6uHNIXvODJ76g+CysS 0c9bPlgjlSdlpP+JpI08//giFj/ogm209N3M8bZlOUjY1yo0z+k9nXoYw4UnacTY 1AhDQ3YTcK8hzVDfLohKrTNABzeuuIuYw43NJfe7AV4XEQKBWQFuxYvGCqaJiWmi EEl82gj5t0CCY4oKgPC/Uk2oA2xoV/XvfId2T8vKViaDHiFVc8rQK+TejJ8INogG Vxz8/HBJWcU43Hsgo2/HhUHh1IdG2tX7H1emvzjLtM4L8SP28SE7GMCPxHnf -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:51 2026 by rpki-client