This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer File: pGM3j5KTiRbgseQTrw8MinPCH08.cer (raw, json) Hash identifier: fOBXYewAlE0eCxSYjmcWemKFXiBVClWxMhfV2DodZCc= Subject key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282E2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft caRepository: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 13:21:55 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.24.129.0 -- 203.24.130.255 IP: 203.31.23.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164578 (0x282e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 13:21:55 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:01:4c:be:6d:f1:eb:44:5c:3f:b2:06:74: 5b:e4:34:9b:77:13:5e:a5:8c:f4:2d:70:7a:fc:28: 4d:10:f0:cd:6e:b2:49:de:05:16:6d:2b:70:12:84: 81:5c:fe:54:70:3b:83:8f:87:73:72:14:45:4c:dc: 65:57:a2:90:1b:68:ab:f1:77:a7:cc:e2:28:4f:40: 99:37:e9:3b:e3:d9:88:b4:98:1b:e1:bb:ac:85:95: c4:67:71:c8:77:86:7c:65:ad:9c:ce:47:a4:9f:c8: 65:3b:87:08:71:b4:bd:13:8a:b4:9f:24:6d:7e:78: 65:d3:8a:1e:d7:ce:f1:45:b7:5d:7e:df:20:71:b0: 69:75:3d:5f:15:f1:74:69:d7:88:7f:55:af:e1:ee: 15:bf:66:32:9c:16:d9:e9:c4:f2:34:32:12:0d:46: bb:d3:03:e9:91:69:a0:53:68:06:48:7c:e8:18:5c: 3c:50:9a:16:c5:1a:2a:7d:89:ec:f4:e5:63:bc:a9: 50:b9:b8:1d:4e:a4:21:00:0b:d2:73:ae:0b:65:0e: 43:af:8f:bd:28:3a:8d:98:fd:71:a9:dc:c0:be:91: ea:66:29:5e:cc:b4:62:1d:05:77:69:28:9a:11:c5: 4b:f0:27:8d:d4:3b:9e:a8:10:38:6e:70:db:57:1e: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.129.0-203.24.130.255 203.31.23.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:a1:6c:92:e8:42:dd:3e:6d:04:74:87:9b:bd:91:57:d7:7d: e3:37:b4:f2:70:7e:0e:db:2a:bc:44:45:cc:0d:cd:8e:b9:97: cc:82:2f:85:2a:ef:2e:80:2a:23:1a:72:1a:22:73:27:70:a5: 0a:21:63:fe:6d:7c:4e:80:4d:3b:af:3c:85:7a:23:7c:ed:9e: eb:b4:1f:f1:a9:2a:e5:6e:6b:ce:ca:b7:16:a1:50:69:ed:44: b8:c8:87:3e:ae:a4:88:32:b7:69:5d:a7:d7:b6:6f:fd:cd:1b: 3a:c2:90:0a:25:3a:34:5c:bf:5c:be:9f:30:6a:20:ae:cf:0d: e1:02:7c:a2:cc:21:04:81:ed:bf:07:60:50:7c:12:9d:a7:98: dc:75:8d:4b:48:a2:81:70:0c:60:53:ad:f3:8a:80:00:e0:c1: 88:20:d6:33:5a:54:5c:29:fb:e9:a8:8e:97:15:f8:5c:62:fd: ad:97:f0:f0:3a:f9:df:e0:6a:cf:30:73:07:94:da:5c:10:1e: ff:fe:b9:d9:49:fb:c3:c9:e8:a0:62:6e:3b:1e:21:5b:86:e3: c0:5c:66:0f:5c:d4:9f:74:f6:61:50:a9:ad:4c:74:e6:26:48: 0b:c5:1c:8d:d9:e2:40:38:fb:dd:b6:41:a1:ab:3a:91:89:f6: 71:d5:28:91 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgIDAoLiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTEzMjE1NVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxN0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQx M0FGMEYwQzhBNzNDMjFGNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrCQFMvm3x60RcP7IGdFvkNJt3E16ljPQtcHr8KE0Q8M1uskneBRZtK3AShIFc /lRwO4OPh3NyFEVM3GVXopAbaKvxd6fM4ihPQJk36Tvj2Yi0mBvhu6yFlcRncch3 hnxlrZzOR6SfyGU7hwhxtL0TirSfJG1+eGXTih7XzvFFt11+3yBxsGl1PV8V8XRp 14h/Va/h7hW/ZjKcFtnpxPI0MhINRrvTA+mRaaBTaAZIfOgYXDxQmhbFGip9iez0 5WO8qVC5uB1OpCEAC9JzrgtlDkOvj70oOo2Y/XGp3MC+kepmKV7MtGIdBXdpKJoR xUvwJ43UO56oEDhucNtXHgUrAgMBAAGjggMBMIIC/TAdBgNVHQ4EFgQUpGM3j5KT iRbgseQTrw8MinPCH08wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdDM0E3L0U0MUZGMEE2NTMyODExRUM4MzUyRDI0NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVL VGlSYmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8EHjAc MBoEAgABMBQwDAMEAMsYgQMEAMsYggMEAMsfFzANBgkqhkiG9w0BAQsFAAOCAQEA aqFskuhC3T5tBHSHm72RV9d94ze08nB+DtsqvERFzA3NjrmXzIIvhSrvLoAqIxpy GiJzJ3ClCiFj/m18ToBNO688hXojfO2e67Qf8akq5W5rzsq3FqFQae1EuMiHPq6k iDK3aV2n17Zv/c0bOsKQCiU6NFy/XL6fMGogrs8N4QJ8oswhBIHtvwdgUHwSnaeY 3HWNS0iigXAMYFOt84qAAODBiCDWM1pUXCn76aiOlxX4XGL9rZfw8Dr53+BqzzBz B5TaXBAe//652Un7w8nooGJuOx4hW4bjwFxmD1zUn3T2YVCprUx05iZIC8Ucjdni QDj73bZBoas6kYn2cdUokQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:05 2026 by rpki-client