This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer File: qrDiti9jQ4lXMMBUiOf8TibFGmw.cer (raw, json) Hash identifier: MDxhe+csQ64n+UNXr2ZizfaPxhsQ5KGMApV1OlXHz4Y= Subject key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0287A0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 21 Jan 2026 00:12:53 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 37971 AS: 38235 AS: 139797 IP: 103.90.148.0/22 IP: 103.120.132.0/22 IP: 103.141.164.0/23 IP: 103.206.76.0/22 IP: 116.212.128.0/19 IP: 150.107.4.0/22 IP: 160.202.32.0/22 IP: 202.37.179.0/24 IP: 202.57.208.0/22 IP: 203.147.128.0/20 IP: 203.171.252.0/22 IP: 203.176.128.0/20 IP: 210.247.192.0/20 IP: 2001:deb:4000::/48 IP: 2001:df2:a980::/48 IP: 2405:da00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165792 (0x287a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 21 00:12:53 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:8d:ff:8d:13:e3:50:e2:de:96:6e:df:b8: d4:4e:06:18:eb:93:9b:0e:8f:f8:e2:b8:fa:78:a1: c5:21:41:d2:48:c4:f0:5d:01:30:65:83:86:2e:e5: ce:2a:f8:88:03:6d:09:9d:45:67:28:f2:6b:45:e7: 75:ca:af:ae:34:54:c4:5c:72:ae:53:31:e9:f1:91: 49:24:cb:ad:58:2e:43:5f:de:c6:c2:9e:2d:71:c2: e6:21:57:a8:cd:c6:77:8a:7e:b3:40:63:e6:89:5b: ce:e8:18:da:c5:35:98:24:52:38:23:e9:c8:f6:23: b2:74:8f:7b:ad:99:07:83:f7:d4:3b:d6:77:f5:71: 11:51:37:e0:90:a1:90:ff:15:a2:b4:8f:ec:7a:67: ee:fa:62:a5:74:28:b6:65:db:92:69:6b:7d:44:05: d9:5e:3d:dc:2d:41:1d:d8:ab:92:2c:ba:2b:eb:bc: d9:13:b2:26:30:24:3b:c8:2e:5b:11:54:3c:d2:71: a8:50:72:0b:43:58:29:0e:7f:85:c6:d9:ab:55:4c: 36:d3:7b:dc:c4:6a:88:28:91:37:18:4b:53:25:b6: 5c:47:a4:47:55:6e:3a:03:de:3e:d5:10:5e:a4:d4: 4e:2a:29:35:96:a7:ad:af:95:9e:c9:00:43:51:b9: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 37971 38235 139797 sbgp-ipAddrBlock: critical IPv4: 103.90.148.0/22 103.120.132.0/22 103.141.164.0/23 103.206.76.0/22 116.212.128.0/19 150.107.4.0/22 160.202.32.0/22 202.37.179.0/24 202.57.208.0/22 203.147.128.0/20 203.171.252.0/22 203.176.128.0/20 210.247.192.0/20 IPv6: 2001:deb:4000::/48 2001:df2:a980::/48 2405:da00::/32 Signature Algorithm: sha256WithRSAEncryption 11:b6:2b:76:35:50:dd:54:f4:88:97:82:41:ac:1c:23:ac:29: c0:fc:71:f5:8a:a2:00:25:cd:a0:22:79:c9:38:c7:fa:0b:25: 6c:a6:2a:f2:8f:04:82:2e:96:48:7d:b7:41:1f:06:0d:c5:64: fe:b8:71:98:e6:3e:fa:6a:93:7d:c9:07:f7:e4:68:b7:87:47: 68:ea:f0:f0:a6:bb:a4:08:5c:84:05:a7:0e:22:53:0f:9b:63: a8:ef:93:71:38:0f:70:8c:37:95:eb:7f:92:20:b9:7e:5e:e3: 76:6a:1d:29:6b:1d:0e:4f:b1:ec:bb:db:4a:9b:bb:eb:84:d0: 3b:d4:22:07:7a:03:ab:a4:2d:7c:c0:e6:78:a0:eb:f4:4a:92: b9:86:ed:89:a9:bc:48:90:34:0b:db:aa:ae:18:3e:42:9e:0f: 74:18:a9:5a:8c:64:b1:ab:ea:bf:43:9b:6b:be:9c:17:65:8f: b5:06:ef:d9:21:e2:99:94:18:b9:04:66:68:bb:9d:52:a6:a1: 7e:ed:ba:d5:c5:5d:7f:f9:cd:ba:79:8b:d5:83:af:93:75:18: 73:54:cc:88:c7:6c:63:a4:dd:60:b4:cd:08:b7:68:9d:39:d4: 4f:07:69:36:61:de:fd:ed:91:d4:8a:ea:53:3e:21:af:5c:40: 42:3d:e3:83 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIDAoegMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMTAwMTI1M1oXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1 NDg4RTdGQzRFMjZDNTFBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+io3/jRPjUOLelm7fuNROBhjrk5sOj/jiuPp4ocUhQdJIxPBdATBlg4Yu5c4q +IgDbQmdRWco8mtF53XKr640VMRccq5TMenxkUkky61YLkNf3sbCni1xwuYhV6jN xneKfrNAY+aJW87oGNrFNZgkUjgj6cj2I7J0j3utmQeD99Q71nf1cRFRN+CQoZD/ FaK0j+x6Z+76YqV0KLZl25Jpa31EBdlePdwtQR3Yq5IsuivrvNkTsiYwJDvILlsR VDzScahQcgtDWCkOf4XG2atVTDbTe9zEaogokTcYS1MltlxHpEdVbjoD3j7VEF6k 1E4qKTWWp62vlZ7JAENRuRbHAgMBAAGjggODMIIDfzAdBgNVHQ4EFgQUqrDiti9j Q4lXMMBUiOf8TibFGmwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURDQUU4LzhCNkFERTE0MUQ5MzExRTI5MkNCMjNGNzA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQ0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5 alE0bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAJRTAgMAlVsCAwIiFTCBiAYIKwYBBQUHAQcBAf8EeTB3MFQEAgABME4D BAJnWpQDBAJneIQDBAFnjaQDBAJnzkwDBAV01IADBAKWawQDBAKgyiADBADKJbMD BALKOdADBATLk4ADBALLq/wDBATLsIADBATS98AwHwQCAAIwGQMHACABDetAAAMH ACABDfKpgAMFACQF2gAwDQYJKoZIhvcNAQELBQADggEBABG2K3Y1UN1U9IiXgkGs HCOsKcD8cfWKogAlzaAieck4x/oLJWymKvKPBIIulkh9t0EfBg3FZP64cZjmPvpq k33JB/fkaLeHR2jq8PCmu6QIXIQFpw4iUw+bY6jvk3E4D3CMN5Xrf5IguX5e43Zq HSlrHQ5Psey720qbu+uE0DvUIgd6A6ukLXzA5nig6/RKkrmG7YmpvEiQNAvbqq4Y PkKeD3QYqVqMZLGr6r9Dm2u+nBdlj7UG79kh4pmUGLkEZmi7nVKmoX7tutXFXX/5 zbp5i9WDr5N1GHNUzIjHbGOk3WC0zQi3aJ051E8HaTZh3v3tkdSK6lM+Ia9cQEI9 44M= -----END CERTIFICATE-----Generated at Sun Jan 25 01:15:46 2026 by rpki-client