This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer File: pTZ74UJBVZweuH0NXqPuxZPtz-w.cer (raw, json) Hash identifier: RCmhKI62BC1wD4kWu8YoIiI4p0XxkIFZ4QXZZv3Gm44= Subject key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028222 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft caRepository: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 12:38:53 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 24556 IP: 103.199.108.0/22 IP: 137.59.48.0/22 IP: 202.191.120.0/21 IP: 2404:3f80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164386 (0x28222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 12:38:53 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:4d:0a:b3:19:8f:b8:25:d6:74:f6:c0:21: f9:cd:e8:8a:91:d6:40:1d:4e:d1:13:69:24:fd:65: 2f:a9:60:94:8f:ef:ed:29:96:3a:b9:23:3e:00:23: 70:a3:82:b5:af:d8:d8:8c:1e:ff:15:7c:65:df:08: 51:57:5a:03:4e:79:47:fb:ca:a2:83:f9:38:fe:84: bb:41:0c:b9:18:15:5d:d7:26:13:54:98:99:85:bb: 23:af:70:bb:ee:43:4c:4d:b3:c1:d9:13:77:a0:1e: 2d:ea:7a:10:61:01:e6:49:24:5d:71:12:b0:46:dc: ef:b2:71:66:1d:ee:0c:36:07:26:87:b1:5f:52:9e: 87:f7:df:f6:09:d4:25:f2:f5:89:6e:85:a3:ef:cb: bb:8c:86:a4:68:8d:f2:b6:e2:9e:43:d0:73:81:67: ee:c4:54:e9:c2:49:ac:24:14:ec:d2:07:93:c5:e0: 0f:7d:cd:7d:ce:c6:23:fd:f8:16:6c:b3:ec:5c:6b: 1c:e5:53:f8:e7:4a:9f:22:aa:f2:ae:1e:9a:87:67: f0:92:03:97:ce:45:f1:a0:bf:23:3c:91:4a:4b:33: 8a:21:b2:75:9d:6b:d9:2b:93:2d:7a:0d:40:c2:5c: 70:b7:e2:f8:02:63:12:31:c6:04:80:bf:cb:27:d9: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24556 sbgp-ipAddrBlock: critical IPv4: 103.199.108.0/22 137.59.48.0/22 202.191.120.0/21 IPv6: 2404:3f80::/32 Signature Algorithm: sha256WithRSAEncryption 92:43:23:4d:ec:d9:a8:c0:20:13:a7:3c:c5:d8:0e:f2:37:bf: 93:58:6e:1a:bf:7d:8a:59:4d:2b:45:8b:c2:2f:29:de:ca:87: 51:89:19:23:4e:24:19:d8:c5:bf:45:6e:ab:87:36:50:aa:80: fb:14:b6:3d:32:58:04:00:5c:2f:77:ce:2f:a6:6e:4f:73:e8: 73:c4:29:3b:4d:20:2d:90:78:37:63:5a:88:4a:39:5f:79:ea: 8d:62:bb:8e:6e:81:7c:1b:92:e3:0a:71:5a:fb:10:c5:a7:a4: af:54:66:4d:69:37:fd:7a:bc:73:46:ba:98:e6:38:b5:47:23: 25:de:e0:4b:5c:49:bb:02:88:1a:b1:a9:4c:9c:87:cb:fb:f5: 71:f9:87:b2:9a:ef:61:d7:1d:b7:72:2e:fa:30:f7:03:b4:99: b5:74:db:73:8c:4e:aa:8b:18:97:ad:f1:ad:4b:78:14:11:40: 2b:c1:d4:54:db:fc:5c:6a:0b:91:61:65:6e:52:93:33:3a:a2: 2e:cd:c0:7a:57:1f:5b:77:8a:f8:fd:03:18:bb:11:b9:84:c0: 8a:05:da:93:c6:c1:bb:99:9a:6a:fd:35:5e:59:ef:b9:53:ee: d1:34:7a:15:94:06:7e:50:c5:69:26:f6:da:0c:9b:2f:c2:6b: b3:9a:ea:4a -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAoIiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTEyMzg1M1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0Qw RDVFQTNFRUM1OTNFRENGRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7f00KsxmPuCXWdPbAIfnN6IqR1kAdTtETaST9ZS+pYJSP7+0pljq5Iz4AI3Cj grWv2NiMHv8VfGXfCFFXWgNOeUf7yqKD+Tj+hLtBDLkYFV3XJhNUmJmFuyOvcLvu Q0xNs8HZE3egHi3qehBhAeZJJF1xErBG3O+ycWYd7gw2ByaHsV9Snof33/YJ1CXy 9YluhaPvy7uMhqRojfK24p5D0HOBZ+7EVOnCSawkFOzSB5PF4A99zX3OxiP9+BZs s+xcaxzlU/jnSp8iqvKuHpqHZ/CSA5fORfGgvyM8kUpLM4ohsnWda9krky16DUDC XHC34vgCYxIxxgSAv8sn2SJ/AgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUpTZ74UJB VZweuH0NXqPuxZPtz+wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJCQUE1L0U2N0Y2MzY0MUQ4RjExRTJCNTRFNDNFRjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyQkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVK QlZad2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICX+wwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJnx2wDBAKJOzAD BAPKv3gwDQQCAAIwBwMFACQEP4AwDQYJKoZIhvcNAQELBQADggEBAJJDI03s2ajA IBOnPMXYDvI3v5NYbhq/fYpZTStFi8IvKd7Kh1GJGSNOJBnYxb9FbquHNlCqgPsU tj0yWAQAXC93zi+mbk9z6HPEKTtNIC2QeDdjWohKOV956o1iu45ugXwbkuMKcVr7 EMWnpK9UZk1pN/16vHNGupjmOLVHIyXe4EtcSbsCiBqxqUych8v79XH5h7Ka72HX HbdyLvow9wO0mbV023OMTqqLGJet8a1LeBQRQCvB1FTb/FxqC5FhZW5SkzM6oi7N wHpXH1t3ivj9Axi7EbmEwIoF2pPGwbuZmmr9NV5Z77lT7tE0ehWUBn5QxWkm9toM my/Ca7Oa6ko= -----END CERTIFICATE-----Generated at Sun Jan 25 01:16:33 2026 by rpki-client