This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer File: nkKx9pFGDihG-nHwbcib8sdB25o.cer (raw, json) Hash identifier: fqy7XZnyGZH9C4EDhbHaDYrX+0l5bXuYPrLbANstZjE= Subject key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286E7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft caRepository: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 17 Jan 2026 02:38:08 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152115 IP: 203.145.38.0/24 IP: 2001:df3:26c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165607 (0x286e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 17 02:38:08 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:a3:ab:ac:06:fd:6b:00:f6:eb:b2:84:6a: 4f:79:05:44:e5:27:88:49:c9:9f:3c:22:5b:5a:04: d7:41:47:fc:47:86:f8:60:83:c5:e9:2e:de:1b:89: a0:a0:da:31:80:dc:14:0c:69:85:aa:c5:ea:c0:57: 83:59:db:48:1c:16:fb:95:b5:f2:e0:29:b4:67:bf: d0:3b:3a:84:ce:72:b7:65:09:2a:af:56:3c:6c:18: 0a:d7:8f:61:df:c9:38:f5:a1:61:4c:b2:19:07:54: 3f:14:e8:c1:5a:36:2d:b5:cf:dc:3d:8f:f2:b7:c2: e3:49:3d:83:38:07:eb:b4:2a:15:8f:5a:15:20:82: 0d:38:2c:ad:fe:ea:ea:af:30:d5:24:cb:37:e1:21: e9:ee:f1:55:c1:9a:a9:df:21:87:b7:e5:37:85:40: 35:08:13:64:f2:65:2a:08:63:cd:18:2b:83:e6:eb: fd:8c:14:97:9a:da:7e:f4:2e:10:fa:06:85:02:16: 05:85:85:82:69:00:a1:b9:f5:ba:a3:36:03:3a:15: 34:b9:9c:a3:ac:4a:12:a0:15:f5:6d:32:81:45:30: 20:ff:d3:5a:8a:1b:cb:1e:c7:85:74:fe:68:b3:d8: 3f:0e:f8:54:d8:b5:a4:1b:5a:6a:cf:15:82:7c:90: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152115 sbgp-ipAddrBlock: critical IPv4: 203.145.38.0/24 IPv6: 2001:df3:26c0::/48 Signature Algorithm: sha256WithRSAEncryption c9:1a:97:71:6f:bd:0a:6d:26:fa:5c:13:25:fe:30:d7:49:0c: 85:b1:ff:70:8e:9b:ca:c7:53:8f:b8:91:5d:07:da:0b:ef:e4: 33:dd:40:ba:f0:a3:03:f3:96:c4:bd:40:2b:cc:35:81:42:84: ad:9e:68:e3:87:a7:18:8b:fb:25:44:86:c5:58:93:f4:4c:4a: d0:f6:7f:43:5f:1b:b9:ea:68:5c:4d:f8:a6:d5:ad:e2:47:98: e6:b9:9b:ec:7d:bc:46:0e:8c:10:cf:e7:df:33:ed:d9:8c:29: 75:d2:45:9a:3b:39:e9:bf:a3:bd:6d:70:ab:9c:85:f3:3e:68: 67:8a:81:33:ff:1b:4f:53:6c:77:ee:ab:7e:6b:84:f1:ec:82: 27:8c:6b:43:06:cc:35:ee:4a:1c:dc:99:02:5a:a1:c2:7f:6b: c2:b6:e8:99:0f:0a:46:2c:96:84:8f:53:3a:fe:df:9b:a7:4f: 34:88:8a:a4:7f:05:05:ad:a4:83:93:d0:d7:58:06:43:22:9d: fa:57:09:ed:ea:19:9d:17:94:59:81:6a:70:02:47:83:84:8c: 0c:9b:a4:48:85:88:b3:9a:26:5e:32:9a:7a:1c:83:1f:ba:e8: c5:22:d0:7f:69:39:e4:a4:df:04:8b:d5:16:ee:c8:db:1c:12: 6e:92:15:b5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAobnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNzAyMzgwOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFG MDZEQzg5QkYyQzc0MURCOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk7qOrrAb9awD267KEak95BUTlJ4hJyZ88IltaBNdBR/xHhvhgg8XpLt4biaCg 2jGA3BQMaYWqxerAV4NZ20gcFvuVtfLgKbRnv9A7OoTOcrdlCSqvVjxsGArXj2Hf yTj1oWFMshkHVD8U6MFaNi21z9w9j/K3wuNJPYM4B+u0KhWPWhUggg04LK3+6uqv MNUkyzfhIenu8VXBmqnfIYe35TeFQDUIE2TyZSoIY80YK4Pm6/2MFJea2n70LhD6 BoUCFgWFhYJpAKG59bqjNgM6FTS5nKOsShKgFfVtMoFFMCD/01qKG8sex4V0/miz 2D8O+FTYtaQbWmrPFYJ8kAwZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUnkKx9pFG DihG+nHwbcib8sdB25owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCQ0RELzM0OEFEOEFDODYxMzExRUVBOEM5NTA0MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBG R0RpaEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlIzMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAy5EmMA8EAgAC MAkDBwAgAQ3zJsAwDQYJKoZIhvcNAQELBQADggEBAMkal3FvvQptJvpcEyX+MNdJ DIWx/3COm8rHU4+4kV0H2gvv5DPdQLrwowPzlsS9QCvMNYFChK2eaOOHpxiL+yVE hsVYk/RMStD2f0NfG7nqaFxN+KbVreJHmOa5m+x9vEYOjBDP598z7dmMKXXSRZo7 Oem/o71tcKuchfM+aGeKgTP/G09TbHfuq35rhPHsgieMa0MGzDXuShzcmQJaocJ/ a8K26JkPCkYsloSPUzr+35unTzSIiqR/BQWtpIOT0NdYBkMinfpXCe3qGZ0XlFmB anACR4OEjAybpEiFiLOaJl4ymnocgx+66MUi0H9pOeSk3wSL1RbuyNscEm6SFbU= -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:38 2026 by rpki-client