This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer File: sQtPQ0P6rissTT3WYGS-km7HTJ8.cer (raw, json) Hash identifier: fTDUXuvW9eWze2IlTRw2D6E7cgpnY08k2xomYS8P8kE= Subject key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028324 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft caRepository: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 13:15:35 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 9483 AS: 150454 IP: 202.50.109.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164644 (0x28324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 13:15:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:47:c1:2e:20:66:0f:7d:9e:83:ff:0b:43: 84:43:ed:6d:83:5f:33:08:0a:b0:3a:8e:67:d4:68: 21:3f:63:be:d0:8c:17:6e:d8:d8:36:07:aa:f9:a9: 62:73:f2:94:ff:5c:99:7b:07:a1:ce:a9:64:0f:74: 62:20:42:c3:76:d2:06:eb:c8:56:99:0e:2c:b6:36: 21:32:2c:e0:f2:fb:2b:f2:39:64:f8:62:a5:fe:8a: d5:72:33:4f:a6:1d:de:25:a7:09:5a:b9:0a:19:95: 94:5c:f1:01:04:da:00:4d:b9:16:9b:68:a4:46:07: bb:13:7e:b4:2e:18:57:be:d0:a5:37:d2:9f:94:1d: 98:07:95:82:85:be:11:3a:46:f6:b2:b2:dd:07:18: 90:79:41:2c:fe:88:96:a7:36:e6:90:bf:79:a5:76: 45:69:4d:f1:16:a2:f9:6b:07:e4:14:02:5d:64:c1: 91:09:c3:04:ab:f5:d4:c0:37:49:a4:2f:48:4c:16: 6f:ea:fe:9b:4e:32:f4:ed:03:b9:78:d0:80:38:99: b2:c6:22:e4:4b:10:d7:bd:7f:24:dd:c4:70:cd:36: 35:ca:e0:74:2c:f5:d3:bf:24:c7:13:2c:b1:07:ab: 9d:e5:93:b9:22:3b:51:da:e3:9c:99:f1:ce:fa:61: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9483 150454 sbgp-ipAddrBlock: critical IPv4: 202.50.109.0/24 Signature Algorithm: sha256WithRSAEncryption 27:1d:55:25:ec:2d:06:b3:ff:b1:1b:fe:74:36:51:e1:2b:83: 65:a2:e5:be:70:ba:9c:f4:2c:cf:cd:ac:d7:64:76:16:a8:0d: b1:19:8f:34:43:7d:87:ea:13:18:75:93:ee:c1:de:4d:ab:e3: 82:e3:63:20:75:c3:91:81:b4:28:88:81:90:fa:61:9c:c2:7c: c4:ed:7b:79:b6:55:2a:7b:07:91:a7:9b:07:6a:2d:79:0c:2b: 53:30:4b:ac:71:19:11:6b:51:61:47:e3:e1:57:b6:a8:05:3b: 54:19:77:1a:41:6d:5b:c2:40:01:a1:c6:b9:9b:d9:be:30:60: d1:84:9d:a8:c6:00:87:ba:fb:43:01:d5:8c:8b:c3:db:fc:d3: ce:82:4d:31:d8:d8:11:20:11:07:8a:33:90:ed:d1:64:56:10: 6b:8d:27:63:31:f7:c6:91:af:36:13:2e:8b:51:a6:59:93:7c: db:e4:64:55:29:86:40:e9:8c:15:cf:e7:55:15:0e:2b:07:bc: 54:ab:1f:f0:b3:ba:cc:93:0a:94:c4:a9:4b:30:04:51:7e:f4: fc:b3:53:b9:ea:b6:e2:a1:27:64:4d:a7:69:69:81:8b:ed:da: b6:c4:f8:42:ba:76:e0:f9:a4:7d:d2:9e:4d:bb:a6:e4:43:1d: 88:aa:83:4b -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgIDAoMkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjEzMTUzNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RE NjYwNjRCRTkyNkVDNzRDOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSqkfBLiBmD32eg/8LQ4RD7W2DXzMICrA6jmfUaCE/Y77QjBdu2Ng2B6r5qWJz 8pT/XJl7B6HOqWQPdGIgQsN20gbryFaZDiy2NiEyLODy+yvyOWT4YqX+itVyM0+m Hd4lpwlauQoZlZRc8QEE2gBNuRabaKRGB7sTfrQuGFe+0KU30p+UHZgHlYKFvhE6 Rvayst0HGJB5QSz+iJanNuaQv3mldkVpTfEWovlrB+QUAl1kwZEJwwSr9dTAN0mk L0hMFm/q/ptOMvTtA7l40IA4mbLGIuRLENe9fyTdxHDNNjXK4HQs9dO/JMcTLLEH q53lk7kiO1Ha45yZ8c76YX5xAgMBAAGjggMTMIIDDzAdBgNVHQ4EFgQUsQtPQ0P6 rissTT3WYGS+km7HTJ8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVDRTJGLzBCREVBNTI4NzBFMzExRURCNTc3MDQzRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQ NnJpc3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICJQsCAwJLtjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoybTAN BgkqhkiG9w0BAQsFAAOCAQEAJx1VJewtBrP/sRv+dDZR4SuDZaLlvnC6nPQsz82s 12R2FqgNsRmPNEN9h+oTGHWT7sHeTavjguNjIHXDkYG0KIiBkPphnMJ8xO17ebZV KnsHkaebB2oteQwrUzBLrHEZEWtRYUfj4Ve2qAU7VBl3GkFtW8JAAaHGuZvZvjBg 0YSdqMYAh7r7QwHVjIvD2/zTzoJNMdjYESARB4ozkO3RZFYQa40nYzH3xpGvNhMu i1GmWZN82+RkVSmGQOmMFc/nVRUOKwe8VKsf8LO6zJMKlMSpSzAEUX70/LNTueq2 4qEnZE2naWmBi+3atsT4Qrp24PmkfdKeTbum5EMdiKqDSw== -----END CERTIFICATE-----Generated at Sun Jan 25 04:28:52 2026 by rpki-client