This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer (raw, json) Hash identifier: 286OK8fS2yxeTRHBdk7JyI0xnVxgoR9HZJcMRPOlQn8= Subject key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028463 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft caRepository: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:11:57 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 55863 IP: 49.128.104.0/22 IP: 2405:8d00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164963 (0x28463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 7 13:11:57 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:17:8c:69:79:b0:21:36:00:01:e6:ca:f2:83: 62:38:f6:05:a5:ee:bc:c3:b6:4a:50:cd:a1:2f:99: a5:88:a8:89:ce:bd:de:f8:97:51:47:ce:e1:8c:1d: 7d:3d:48:db:7b:0b:b2:ab:ab:1b:8a:30:34:e5:4d: e2:85:27:f2:e4:7c:a5:74:06:76:0a:49:b1:07:ff: 31:d2:89:bb:c6:6b:37:70:b5:da:72:b3:28:fd:bc: 0b:59:0d:76:a0:c0:80:53:1b:47:01:2b:71:77:39: 51:a3:71:58:f5:7d:82:da:89:67:70:d2:65:a4:16: 47:46:3c:30:0f:7e:4d:9e:4d:25:87:d8:d5:ce:74: 7c:59:89:40:2c:5c:f4:61:1d:ab:8d:13:1b:74:c9: 01:e3:64:9b:27:4c:9b:ef:a7:68:88:f0:a7:c4:82: ea:87:d1:ef:09:a5:49:3a:cf:49:2d:14:af:58:89: c2:df:ff:cf:a3:08:22:a4:ce:a6:f7:91:6b:c5:d2: d1:bf:47:55:ce:85:b9:d7:27:b5:65:43:3f:0e:6a: 61:f6:5e:24:47:b0:24:fd:7d:85:c3:ad:b9:fc:2f: c3:9c:7e:03:82:23:8a:01:1d:39:3f:75:51:8c:7d: 67:d1:c2:e5:c2:65:19:ab:17:a2:5f:5a:eb:ff:1d: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55863 sbgp-ipAddrBlock: critical IPv4: 49.128.104.0/22 IPv6: 2405:8d00::/32 Signature Algorithm: sha256WithRSAEncryption 5c:7e:f9:fa:e9:8b:e5:f7:5d:ae:e1:8f:da:84:3f:ad:52:e6: 85:a7:73:61:ff:cc:4d:33:36:60:60:51:85:7f:d3:3b:ca:0c: d3:44:00:4a:6f:26:91:c7:94:10:58:f8:7f:4c:30:db:16:90: 71:0b:96:0f:fb:3a:30:7c:ea:c4:2a:21:60:2a:2d:8e:c9:f8: a4:ef:61:c2:b1:ad:8e:a6:b8:47:38:d2:41:29:ad:0e:bb:0e: 00:c5:d2:5e:ad:b7:99:53:89:3f:63:0e:57:b3:27:1e:13:4f: ac:1e:66:16:a1:c8:d9:39:30:b9:35:d4:04:44:47:97:32:45: 3c:22:2f:d0:48:c7:e2:48:1a:c0:91:7e:0b:80:bd:e8:74:8a: 94:76:f3:a1:d9:c7:a6:d2:99:74:42:37:41:65:53:07:5a:4a: 09:18:c7:95:fe:40:91:a3:8e:2f:38:4b:c4:20:aa:27:9e:e8: c3:9e:4e:39:5e:51:52:b6:0a:3d:a5:43:b2:16:95:ad:42:d9: 7f:03:3b:9f:f8:4a:a5:6d:27:81:8e:f3:b6:a5:3e:c1:fb:c7: 61:66:d6:2f:9e:90:f9:08:d3:0a:72:f7:e0:75:a5:fc:ae:6a: 6c:74:41:95:10:14:78:2e:40:ec:ef:b6:2d:3a:37:7d:b3:63: 8d:2e:5d:b6 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoRjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNzEzMTE1N1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2 QjM0RjFGM0JENjgxQTUzRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrF4xpebAhNgAB5sryg2I49gWl7rzDtkpQzaEvmaWIqInOvd74l1FHzuGMHX09 SNt7C7KrqxuKMDTlTeKFJ/LkfKV0BnYKSbEH/zHSibvGazdwtdpysyj9vAtZDXag wIBTG0cBK3F3OVGjcVj1fYLaiWdw0mWkFkdGPDAPfk2eTSWH2NXOdHxZiUAsXPRh HauNExt0yQHjZJsnTJvvp2iI8KfEguqH0e8JpUk6z0ktFK9YicLf/8+jCCKkzqb3 kWvF0tG/R1XOhbnXJ7VlQz8OamH2XiRHsCT9fYXDrbn8L8OcfgOCI4oBHTk/dVGM fWfRwuXCZRmrF6JfWuv/HX8DAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUmXb7cW0v o5u9RzxrNPHzvWgaU+cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVGNTk4LzNFMUQxQjIyMjMzMzExRTI4NThDQkNDNTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cw dm81dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANo3MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCMYBoMA0EAgAC MAcDBQAkBY0AMA0GCSqGSIb3DQEBCwUAA4IBAQBcfvn66Yvl912u4Y/ahD+tUuaF p3Nh/8xNMzZgYFGFf9M7ygzTRABKbyaRx5QQWPh/TDDbFpBxC5YP+zowfOrEKiFg Ki2Oyfik72HCsa2OprhHONJBKa0Ouw4AxdJerbeZU4k/Yw5XsyceE0+sHmYWocjZ OTC5NdQEREeXMkU8Ii/QSMfiSBrAkX4LgL3odIqUdvOh2cem0pl0QjdBZVMHWkoJ GMeV/kCRo44vOEvEIKonnujDnk45XlFStgo9pUOyFpWtQtl/Azuf+EqlbSeBjvO2 pT7B+8dhZtYvnpD5CNMKcvfgdaX8rmpsdEGVEBR4LkDs77YtOjd9s2ONLl22 -----END CERTIFICATE-----Generated at Sun Jan 25 02:52:47 2026 by rpki-client