This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer (raw, json) Hash identifier: 62yAg2soxWMuIxoFnYD7AAJMdroqyEH/mzJuEf9f4eQ= Subject key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028238 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 13:58:47 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138437 IP: 103.125.120.0/22 IP: 2403:f340::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164408 (0x28238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 13:58:47 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:2a:a2:21:6c:a1:ed:00:f3:01:d5:7a:8a: 46:a7:da:ad:b7:3b:f5:a7:a0:78:d8:20:ba:59:37: 61:30:5e:77:f1:0f:5b:19:8e:c5:08:4d:22:fa:10: df:8b:62:a3:6e:3c:a4:8f:35:c9:57:65:c9:f8:eb: ee:88:b7:61:97:f2:18:de:2a:62:98:10:6d:e9:e3: 13:17:2f:fd:d9:a8:08:17:4a:a6:e7:da:43:3b:51: c9:6f:0d:c8:c4:fb:ef:d7:42:6d:54:d8:42:17:3c: c6:2e:7e:94:b6:ed:b7:48:22:c3:6d:cf:88:81:57: 72:f3:4f:93:f3:79:83:53:97:c8:d1:92:c9:33:c1: 8b:ba:4c:bd:6b:6d:c0:ee:70:d7:35:bc:07:b5:8a: b0:e8:fb:9c:71:66:3b:fd:d3:9b:9f:a0:be:d0:95: ce:36:ec:f9:3f:a7:19:a5:4f:14:52:b6:de:18:a6: b3:03:94:db:35:03:5e:53:37:58:94:2d:92:58:d2: 21:b8:0b:93:36:56:9e:8a:e4:aa:0d:c2:3a:c0:6d: 4b:81:71:bb:b0:10:c2:b8:bd:df:c3:8f:69:9a:8c: 01:08:28:bd:9d:1b:2c:c1:3c:d0:58:f9:de:c6:ea: a2:3f:ba:f7:98:a7:89:5c:11:81:ce:d1:9d:b8:f0: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138437 sbgp-ipAddrBlock: critical IPv4: 103.125.120.0/22 IPv6: 2403:f340::/32 Signature Algorithm: sha256WithRSAEncryption 9b:3f:d2:78:cc:be:86:9b:cd:1b:e8:11:e5:6c:5f:90:a2:24: c1:a6:9c:3a:bb:c8:ca:1d:85:2a:88:f1:a5:1b:43:a5:20:ec: 71:cd:6c:5e:2e:37:91:8f:b4:81:32:ef:86:cf:ad:bd:fe:11: 6b:c6:16:da:be:5a:e4:5d:62:8a:3b:e1:61:10:ce:a7:c8:ca: f0:77:bf:02:51:e5:41:2f:cb:a1:40:e5:11:fc:58:99:4c:df: 33:33:c2:0f:98:28:6e:5b:3f:e7:89:2c:d6:12:a9:e7:38:93: 2e:03:75:ca:4b:8c:d9:6e:08:13:9e:ab:89:08:99:35:e9:f4: 19:d3:64:27:f5:76:e6:29:1b:4a:bb:cd:1b:ca:fe:c8:4f:29: c2:8e:d7:69:80:69:96:6e:5f:a7:0a:6c:a5:96:b3:75:f1:b3: fc:23:cb:59:5f:29:d6:f1:b2:3b:e9:d7:c4:30:96:05:e4:aa: b9:a3:fb:71:46:8e:8e:80:d3:34:da:32:d5:29:ca:1c:b4:6b: 40:19:89:4a:1b:e6:50:f2:73:6c:35:d5:93:ef:96:46:85:0d: 3f:fd:10:fc:84:cb:f3:92:7b:9d:c7:8f:d4:c2:2b:bd:39:ae: fd:0d:c4:15:69:a9:32:69:0c:1f:a5:f4:74:fe:b5:4b:f0:f7: 76:42:b4:32 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoI4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTEzNTg0N1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFF MDNFM0NDOUFDNDY2MEQ5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSRiqiIWyh7QDzAdV6ikan2q23O/WnoHjYILpZN2EwXnfxD1sZjsUITSL6EN+L YqNuPKSPNclXZcn46+6It2GX8hjeKmKYEG3p4xMXL/3ZqAgXSqbn2kM7UclvDcjE ++/XQm1U2EIXPMYufpS27bdIIsNtz4iBV3LzT5PzeYNTl8jRkskzwYu6TL1rbcDu cNc1vAe1irDo+5xxZjv905ufoL7Qlc427Pk/pxmlTxRStt4YprMDlNs1A15TN1iU LZJY0iG4C5M2Vp6K5KoNwjrAbUuBcbuwEMK4vd/Dj2majAEIKL2dGyzBPNBY+d7G 6qI/uveYp4lcEYHO0Z248P4jAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUrT2HA4UL EnHo8xrgPjzJrEZg2UIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI5N0RCLzRFNDEwQUNFMEY2RjExRUFBQjBBREI2NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCOTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRV TEVuSG84eHJnUGp6SnJFWmcyVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhzFMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ314MA0EAgAC MAcDBQAkA/NAMA0GCSqGSIb3DQEBCwUAA4IBAQCbP9J4zL6Gm80b6BHlbF+QoiTB ppw6u8jKHYUqiPGlG0OlIOxxzWxeLjeRj7SBMu+Gz629/hFrxhbavlrkXWKKO+Fh EM6nyMrwd78CUeVBL8uhQOUR/FiZTN8zM8IPmChuWz/niSzWEqnnOJMuA3XKS4zZ bggTnquJCJk16fQZ02Qn9XbmKRtKu80byv7ITynCjtdpgGmWbl+nCmyllrN18bP8 I8tZXynW8bI76dfEMJYF5Kq5o/txRo6OgNM02jLVKcoctGtAGYlKG+ZQ8nNsNdWT 75ZGhQ0//RD8hMvzknudx4/Uwiu9Oa79DcQVaakyaQwfpfR0/rVL8Pd2QrQy -----END CERTIFICATE-----Generated at Sun Jan 25 04:21:21 2026 by rpki-client