This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer File: qeq8JGURbtEdbIza4gESN88fWd8.cer (raw, json) Hash identifier: W4SDL3jxDiHBrbP7NvyyhQPvwKOgvcE/dnp8Az5pk2o= Subject key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0285BD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 01:47:20 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 59203 AS: 139009 IP: 14.1.100.0/22 IP: 103.124.110.0/23 IP: 103.126.148.0/22 IP: 103.129.209.0/24 IP: 103.150.18.0/23 IP: 103.161.168.0/23 IP: 202.173.120.0/22 IP: 2407:d40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165309 (0x285bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 13 01:47:20 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:91:b2:03:e7:38:43:88:09:62:25:bb:82:a6: e6:49:2e:3f:4c:20:07:72:aa:ea:95:3f:7a:3a:ea: 6f:ce:b0:d7:31:d8:f0:25:24:2a:f8:80:06:0f:88: 8a:4e:38:5d:02:62:aa:e3:e6:5a:3c:93:d9:55:dc: 94:c3:b6:21:16:6d:03:10:8b:04:23:9f:63:d5:16: 4f:fc:8f:dc:b9:9e:56:b3:b5:01:48:ce:ed:c9:0e: 60:80:b0:11:b5:29:5b:cb:84:3c:a0:47:0b:f8:c4: 7b:0e:f2:5e:b9:83:58:c0:2c:79:c5:ec:a8:27:73: 66:fa:33:20:47:7c:3a:30:17:a5:b8:dd:ed:6f:0c: 6b:3d:6c:4d:c4:18:1b:02:3b:18:9b:4b:98:63:85: 9c:1f:96:6f:02:5e:1c:fb:97:af:96:a8:8d:75:a3: 6c:7a:25:bd:4f:a9:3c:bf:af:eb:7d:98:94:22:cc: 12:a9:1a:3f:7b:ef:55:de:04:b5:10:b0:eb:a4:57: 80:34:d7:db:6c:ca:17:ac:62:22:2d:73:f1:56:a6: 71:91:2a:60:6c:e5:42:bc:fa:3d:eb:fb:79:e0:6b: b7:e8:d3:1f:77:53:ed:77:8e:2d:4a:5b:fa:76:0d: be:47:2d:a1:4a:fb:94:3b:29:0b:3b:37:cd:dc:2a: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59203 139009 sbgp-ipAddrBlock: critical IPv4: 14.1.100.0/22 103.124.110.0/23 103.126.148.0/22 103.129.209.0/24 103.150.18.0/23 103.161.168.0/23 202.173.120.0/22 IPv6: 2407:d40::/32 Signature Algorithm: sha256WithRSAEncryption 89:ad:8d:13:63:b9:ce:11:0f:d9:0e:a9:70:81:4d:67:df:6c: c4:1e:bd:03:90:cd:a6:e1:5d:e7:ac:a8:c9:23:0b:a5:fa:b0: 94:b7:51:39:85:4a:c9:06:52:dc:39:05:b3:80:cc:44:cc:52: de:1f:75:68:1d:48:0a:68:b4:c5:59:b5:4e:77:a4:96:f0:b8: 68:f4:1c:1b:a2:10:21:81:9b:af:65:34:4b:57:a9:0f:e6:f9: 50:24:56:67:e4:f3:f0:72:a2:74:8a:0e:37:a3:c9:db:57:09: b4:8a:55:5e:ca:16:ae:83:69:45:c9:1f:02:7d:71:05:7d:b4: 0e:61:58:6c:a0:96:8c:8b:36:a1:32:de:06:51:83:7e:56:df: 47:c3:93:8e:c5:d7:2f:8e:9b:a7:6d:5c:4d:44:ac:07:35:6a: 0b:c3:5f:27:26:6c:84:0e:55:86:2c:9b:a1:45:81:38:9d:f9: f0:0d:f1:44:31:f9:94:ae:29:96:f6:51:2c:b6:8c:7e:6e:03: 90:73:e9:d6:3b:1a:4a:f2:56:e8:b7:fb:bf:a4:08:ef:04:78: 71:df:3e:df:df:1d:1a:ca:97:80:f4:5c:e8:f3:2e:b9:b0:ff: 7c:45:d3:4a:a5:a2:45:fa:a7:4d:51:1c:dd:9c:ee:46:dd:f6: 0c:1c:d9:e8 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIDAoW9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMzAxNDcyMFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENE QUUyMDExMjM3Q0YxRjU5REYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpkbID5zhDiAliJbuCpuZJLj9MIAdyquqVP3o66m/OsNcx2PAlJCr4gAYPiIpO OF0CYqrj5lo8k9lV3JTDtiEWbQMQiwQjn2PVFk/8j9y5nlaztQFIzu3JDmCAsBG1 KVvLhDygRwv4xHsO8l65g1jALHnF7Kgnc2b6MyBHfDowF6W43e1vDGs9bE3EGBsC OxibS5hjhZwflm8CXhz7l6+WqI11o2x6Jb1PqTy/r+t9mJQizBKpGj9771XeBLUQ sOukV4A019tsyhesYiItc/FWpnGRKmBs5UK8+j3r+3nga7fo0x93U+13ji1KW/p2 Db5HLaFK+5Q7KQs7N83cKnMNAgMBAAGjggNHMIIDQzAdBgNVHQ4EFgQUqeq8JGUR btEdbIza4gESN88fWd8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3MUMyL0RFNjE2NjY4NTVBOTExRUI5OUFGREE1REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdV UmJ0RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAOdDAgMCHwEwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAIOAWQD BAFnfG4DBAJnfpQDBABngdEDBAFnlhIDBAFnoagDBALKrXgwDQQCAAIwBwMFACQH DUAwDQYJKoZIhvcNAQELBQADggEBAImtjRNjuc4RD9kOqXCBTWffbMQevQOQzabh XeesqMkjC6X6sJS3UTmFSskGUtw5BbOAzETMUt4fdWgdSApotMVZtU53pJbwuGj0 HBuiECGBm69lNEtXqQ/m+VAkVmfk8/ByonSKDjejydtXCbSKVV7KFq6DaUXJHwJ9 cQV9tA5hWGygloyLNqEy3gZRg35W30fDk47F1y+Om6dtXE1ErAc1agvDXycmbIQO VYYsm6FFgTid+fAN8UQx+ZSuKZb2USy2jH5uA5Bz6dY7GkryVui3+7+kCO8EeHHf Pt/fHRrKl4D0XOjzLrmw/3xF00qlokX6p01RHN2c7kbd9gwc2eg= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:24 2026 by rpki-client