This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer File: nTQUKDsie49RLzBfKs20PN6eTRI.cer (raw, json) Hash identifier: GAl0jCSXTyVJCN9VzA+bpp9UtTXyfuRSFst6AS/d708= Subject key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028367 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft caRepository: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 03 Jan 2026 02:49:41 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136593 AS: 137043 AS: 152166 IP: 36.50.84.0/23 IP: 103.47.186.0/24 IP: 103.53.80.0/23 IP: 103.79.76.0/22 IP: 103.79.118.0/24 IP: 103.91.144.0/23 IP: 103.94.185.0/24 IP: 103.99.115.0/24 IP: 103.99.178.0/23 IP: 103.216.162.0/23 IP: 202.91.32.0/22 IP: 2401:5a20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164711 (0x28367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 3 02:49:41 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:65:7b:aa:53:d0:70:d8:e7:84:16:ab:ef: 9c:22:3c:37:15:18:e1:51:d9:41:a1:12:92:9b:d8: 88:3c:0f:2b:c4:0d:1b:f0:f6:17:c4:47:93:57:fb: c1:31:78:63:61:6b:9a:14:24:88:78:8e:70:6b:95: 95:06:21:ee:bf:02:0f:05:23:08:6b:a4:e4:34:f4: 53:e9:ef:cb:d4:de:11:d9:7a:02:fc:2a:aa:7d:62: ef:39:32:c9:f3:b9:b2:81:99:77:44:f8:39:73:a1: da:00:f9:1f:42:dd:db:3a:2a:cd:b0:e4:3e:c9:18: 81:f6:08:d6:3f:a2:14:c7:60:88:a6:4b:65:70:f1: 05:41:51:fa:0c:5f:84:47:d4:e3:12:8b:a0:98:62: 51:05:53:56:5a:c1:20:5b:24:cb:ca:8e:b4:e0:9b: 3c:3d:5a:6e:6b:15:a2:59:b6:cf:22:9a:64:b8:85: 65:cb:6d:23:a2:96:d2:dd:67:90:11:bc:d9:48:7d: d5:57:89:72:6d:a0:ab:89:03:d4:7c:aa:3e:d0:ee: ca:f3:6c:19:f3:3c:49:5f:bb:72:32:b6:11:20:a0: c5:f2:5e:40:39:c9:ca:46:fd:8c:af:72:e5:8c:ef: b7:0f:19:ff:7a:14:03:a5:01:86:c2:b1:98:61:16: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136593 137043 152166 sbgp-ipAddrBlock: critical IPv4: 36.50.84.0/23 103.47.186.0/24 103.53.80.0/23 103.79.76.0/22 103.79.118.0/24 103.91.144.0/23 103.94.185.0/24 103.99.115.0/24 103.99.178.0/23 103.216.162.0/23 202.91.32.0/22 IPv6: 2401:5a20::/32 Signature Algorithm: sha256WithRSAEncryption 56:87:77:2a:7a:53:6d:90:40:b2:83:97:8e:4c:ac:ac:ff:68: 1a:3a:3d:ad:ba:a9:9e:ce:48:0f:66:b7:d9:1e:b7:e9:40:71: b5:6a:1d:fb:e4:83:66:20:7c:a9:72:75:ff:6d:a7:f8:ca:40: 26:12:76:3f:90:c4:08:f3:35:62:7b:de:9c:93:84:ab:c0:2b: e1:1e:40:64:18:f1:17:94:8e:6f:0a:45:d0:f3:3b:42:63:e7: e2:0b:15:ee:18:a9:aa:6c:bd:cd:23:88:c3:94:bf:29:7b:4b: 57:1f:6f:4c:88:84:38:5c:e2:6a:bf:40:d9:38:ef:31:7f:20: e4:4a:db:9a:f3:9e:8d:f3:e5:8d:1c:3a:60:74:a6:d8:67:f3: ce:40:07:f1:fe:67:1f:e1:74:30:c7:79:b9:b0:22:a3:7b:a2: a4:a5:49:f9:79:d7:10:5c:5a:a4:e2:3e:4d:b5:f6:13:27:b7: 91:2b:f5:0e:0a:78:33:6a:10:36:02:53:31:ff:db:3d:54:c8: 78:5b:85:17:5b:a5:f3:79:3a:73:51:a7:69:31:21:f1:db:04: 56:49:52:3d:c4:31:96:8b:88:a5:1a:69:b2:b9:e3:6b:9c:7e: 1b:0c:7a:dc:52:0b:b2:ee:54:07:19:41:e5:e9:70:45:bf:f8: aa:50:b2:f9 -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIDAoNnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMzAyNDk0MVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1 RjJBQ0RCNDNDREU5RTREMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3R2V7qlPQcNjnhBar75wiPDcVGOFR2UGhEpKb2Ig8DyvEDRvw9hfER5NX+8Ex eGNha5oUJIh4jnBrlZUGIe6/Ag8FIwhrpOQ09FPp78vU3hHZegL8Kqp9Yu85Msnz ubKBmXdE+DlzodoA+R9C3ds6Ks2w5D7JGIH2CNY/ohTHYIimS2Vw8QVBUfoMX4RH 1OMSi6CYYlEFU1ZawSBbJMvKjrTgmzw9Wm5rFaJZts8immS4hWXLbSOiltLdZ5AR vNlIfdVXiXJtoKuJA9R8qj7Q7srzbBnzPElfu3IythEgoMXyXkA5ycpG/YyvcuWM 77cPGf96FAOlAYbCsZhhFrvrAgMBAAGjggNkMIIDYDAdBgNVHQ4EFgQUnTQUKDsi e49RLzBfKs20PN6eTRIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFFRDJDLzAwMzczQzZDOUJCQzExRUU4NTFBREQ1MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0Rz aWU0OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAhWRAgMCF1MCAwJSZjBqBggrBgEFBQcBBwEB/wRbMFkwSAQCAAEwQgME ASQyVAMEAGcvugMEAWc1UAMEAmdPTAMEAGdPdgMEAWdbkAMEAGdeuQMEAGdjcwME AWdjsgMEAWfYogMEAspbIDANBAIAAjAHAwUAJAFaIDANBgkqhkiG9w0BAQsFAAOC AQEAVod3KnpTbZBAsoOXjkysrP9oGjo9rbqpns5ID2a32R636UBxtWod++SDZiB8 qXJ1/22n+MpAJhJ2P5DECPM1YnvenJOEq8Ar4R5AZBjxF5SObwpF0PM7QmPn4gsV 7hipqmy9zSOIw5S/KXtLVx9vTIiEOFziar9A2TjvMX8g5ErbmvOejfPljRw6YHSm 2GfzzkAH8f5nH+F0MMd5ubAio3uipKVJ+XnXEFxapOI+TbX2Eye3kSv1Dgp4M2oQ NgJTMf/bPVTIeFuFF1ul83k6c1GnaTEh8dsEVklSPcQxlouIpRppsrnja5x+Gwx6 3FILsu5UBxlB5elwRb/4qlCy+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 06:17:07 2026 by rpki-client