This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer (raw, json) Hash identifier: SOO8TcAe+Mw8s61PbA0NV3kYlAziUxWQLXiwzgktpBM= Subject key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281D8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 13:40:58 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 24492 AS: 55559 AS: 139821 IP: 27.111.8.0/22 IP: 43.245.216.0/22 IP: 49.156.32.0/20 IP: 103.17.212.0/22 IP: 116.206.16.0/22 IP: 119.15.80.0/20 IP: 202.79.24.0/21 IP: 218.100.71.0/24 IP: 2405:1a00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164312 (0x281d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 13:40:58 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:d3:a7:84:98:b4:96:80:a4:e7:72:2a:54: b3:05:c5:cf:fa:6c:95:05:46:53:70:b0:40:87:3d: ad:9a:72:ee:2e:56:c9:fe:6a:87:bd:9b:08:3d:62: f0:a1:5c:ee:f3:2d:2a:da:62:8f:9b:d9:7c:a0:5d: da:a4:5b:35:22:9f:78:93:f8:c5:14:9c:34:25:08: ba:91:04:a6:d6:a8:10:a6:72:b4:65:a6:45:7f:3a: e4:f3:c5:06:01:1d:ed:78:f9:95:b8:f6:9a:42:a8: 0c:32:8d:f0:3f:2d:17:7b:8b:a9:2f:8f:56:98:e3: d4:db:7e:ad:60:c2:ce:24:af:5b:20:b5:c1:81:a9: 61:63:b9:f9:90:5f:a0:eb:72:11:6e:bf:3c:c8:35: 19:80:8e:57:84:bd:f4:64:13:f0:ca:b2:35:a4:f9: 51:93:32:27:61:ee:6b:b9:a5:13:01:1d:b6:df:ec: 58:2f:6c:17:26:20:58:7b:e7:eb:d6:35:4b:95:be: 0d:ca:cf:1f:42:d9:21:c6:be:43:90:bc:a6:93:35: 00:23:84:cf:31:6a:42:8d:c7:bf:39:d2:eb:e0:1c: b8:0c:95:1d:be:56:21:83:c5:99:d4:7b:e2:63:19: 1c:fe:5a:65:1f:29:87:d3:be:65:69:91:fd:e8:24: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24492 55559 139821 sbgp-ipAddrBlock: critical IPv4: 27.111.8.0/22 43.245.216.0/22 49.156.32.0/20 103.17.212.0/22 116.206.16.0/22 119.15.80.0/20 202.79.24.0/21 218.100.71.0/24 IPv6: 2405:1a00::/32 Signature Algorithm: sha256WithRSAEncryption d5:44:0b:a9:ee:bc:84:cd:6a:0e:59:f1:24:31:ae:54:91:dc: 76:c4:8e:0c:c9:52:2e:ce:0a:d9:da:39:d9:18:d1:e7:ad:b5: 47:1e:48:1f:c7:57:8d:68:c2:ad:48:df:f5:65:8e:b7:6a:ff: ed:05:5b:a5:e3:e2:7b:93:8d:66:5a:37:67:d5:cb:4d:51:b0: ad:c2:e8:55:d2:07:92:6b:a0:c5:69:c1:ca:3f:dc:42:be:61: f2:88:1c:41:40:ab:51:ea:1c:1d:67:82:4b:6f:13:2c:9b:17: a5:91:39:ab:64:26:28:e1:96:7a:72:0e:8f:ce:66:35:a2:d0: 45:2c:d9:42:43:b4:6c:62:45:05:43:45:c9:17:7f:3a:51:0c: 34:66:0b:88:c3:84:2d:4a:8e:ff:99:de:8d:e3:56:f3:9a:c6: 8e:7a:c8:ca:60:61:8f:9e:85:83:c8:26:3e:51:0e:ed:89:9b: e0:cc:1b:73:c1:40:bb:fc:d8:f3:0e:1e:bb:68:d1:e4:63:9d: ee:44:4b:44:e7:da:7b:9a:72:13:a3:9c:a8:63:3f:12:90:c5: 5d:4c:fa:20:2f:4c:32:8c:2f:6f:3c:bb:9f:e0:24:b7:b6:3c: 51:c6:8a:35:f5:97:99:14:d8:cb:ea:20:5c:83:48:ee:8f:59: ed:1c:d0:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIDAoHYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDEzNDA1OFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NF QkUyNkFFMTRGOEIwNjdDODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhCtOnhJi0loCk53IqVLMFxc/6bJUFRlNwsECHPa2acu4uVsn+aoe9mwg9YvCh XO7zLSraYo+b2XygXdqkWzUin3iT+MUUnDQlCLqRBKbWqBCmcrRlpkV/OuTzxQYB He14+ZW49ppCqAwyjfA/LRd7i6kvj1aY49Tbfq1gws4kr1sgtcGBqWFjufmQX6Dr chFuvzzINRmAjleEvfRkE/DKsjWk+VGTMidh7mu5pRMBHbbf7FgvbBcmIFh75+vW NUuVvg3Kzx9C2SHGvkOQvKaTNQAjhM8xakKNx7850uvgHLgMlR2+ViGDxZnUe+Jj GRz+WmUfKYfTvmVpkf3oJHj1AgMBAAGjggNRMIIDTTAdBgNVHQ4EFgQUrPLI0Nz7 p0UWszzr4mrhT4sGfIAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkxQTA5LzRBQ0ZGMzYwMUQ5MDExRTJCODdDRjJFRjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56 N3AwVVdzenpyNG1yaFQ0c0dmSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICX6wCAwDZBwIDAiItMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQC G28IAwQCK/XYAwQEMZwgAwQCZxHUAwQCdM4QAwQEdw9QAwQDyk8YAwQA2mRHMA0E AgACMAcDBQAkBRoAMA0GCSqGSIb3DQEBCwUAA4IBAQDVRAup7ryEzWoOWfEkMa5U kdx2xI4MyVIuzgrZ2jnZGNHnrbVHHkgfx1eNaMKtSN/1ZY63av/tBVul4+J7k41m Wjdn1ctNUbCtwuhV0geSa6DFacHKP9xCvmHyiBxBQKtR6hwdZ4JLbxMsmxelkTmr ZCYo4ZZ6cg6PzmY1otBFLNlCQ7RsYkUFQ0XJF386UQw0ZguIw4QtSo7/md6N41bz msaOesjKYGGPnoWDyCY+UQ7tiZvgzBtzwUC7/NjzDh67aNHkY53uREtE59p7mnIT o5yoYz8SkMVdTPogL0wyjC9vPLuf4CS3tjxRxoo19ZeZFNjL6iBcg0juj1ntHNAM -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:57 2026 by rpki-client