This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer File: sxbAG3t1QxTi8Y9zen19iayrfmg.cer (raw, json) Hash identifier: y8UFEwLdiV4iPVomOlvUOYEdGyhU53A3r9uL8lcaGaU= Subject key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028750 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 23:21:59 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 55913 AS: 58750 AS: 136036 AS: 136203 IP: 103.21.48.0/22 IP: 103.80.102.0/23 IP: 103.83.125.0/24 IP: 202.74.61.0/24 IP: 2001:df6:ee00::/48 IP: 2001:df6:f500::/48 IP: 2001:df7:ea00::/48 IP: 2403:ecc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165712 (0x28750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 23:21:59 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:d0:70:35:05:c6:3d:49:df:d4:6e:a2:8f: 7a:e5:a5:8f:64:9c:16:37:e5:8a:90:99:05:ad:af: fb:02:38:9d:6e:7f:d6:f8:68:af:b8:0b:f8:5d:34: 3b:51:f3:12:e4:cd:07:bc:a9:2b:90:e8:e1:8c:13: ba:fd:77:6e:88:3e:4f:ad:95:dd:85:5b:71:3f:18: fc:ac:5c:a5:e3:a3:a4:23:08:35:45:f3:0e:38:12: 51:84:2a:eb:c3:b4:dc:98:9e:d5:7e:b1:6a:4b:78: 4b:bf:76:dc:e2:83:27:cf:d8:ad:ce:c6:e4:5c:60: 4c:20:aa:76:13:14:5f:fc:6b:9a:07:e5:1d:31:b1: 77:7e:05:dd:a6:f4:b7:8e:6a:4d:ca:f9:29:8b:36: 3e:d5:e2:de:af:47:f2:01:ad:8a:54:ac:6e:58:15: 83:ff:e7:73:25:2e:55:0f:7d:1b:1f:04:e0:ef:5a: 3b:88:1d:9b:b4:79:05:5d:98:64:94:87:26:6e:d7: 92:f4:d6:56:e9:06:74:d5:b2:0a:64:b4:89:f8:aa: 68:c0:c7:6d:04:96:ec:97:b2:ad:05:89:3d:bd:69: 6f:cd:b5:99:a4:8a:c1:fe:9b:d8:81:08:ba:a6:1d: 80:a3:ae:25:77:53:ef:b7:b3:fe:8a:69:c8:2e:1f: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55913 58750 136036 136203 sbgp-ipAddrBlock: critical IPv4: 103.21.48.0/22 103.80.102.0/23 103.83.125.0/24 202.74.61.0/24 IPv6: 2001:df6:ee00::/48 2001:df6:f500::/48 2001:df7:ea00::/48 2403:ecc0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:03:98:5f:68:2e:77:9b:d8:34:19:03:40:6b:0a:cd:1c:7d: 63:66:df:94:15:54:86:f0:99:be:76:3c:c3:30:0d:57:59:52: 33:7f:97:a7:c9:28:5f:8b:80:50:3f:db:41:5e:6f:e5:e7:bc: 7c:c7:5b:62:03:f0:4c:30:bb:82:93:0a:28:57:a4:26:33:ef: e7:6e:a7:0e:6b:ad:ba:30:c2:dc:e0:49:8a:09:7d:5b:ea:86: 7e:ba:3a:ae:50:13:5f:3b:f7:dd:4d:ea:aa:4d:fa:ad:f5:7d: 11:95:a0:51:ca:fa:b7:8e:bf:2b:85:9f:f4:ee:ac:2e:9a:4a: c5:47:f7:64:59:81:62:59:34:40:d2:84:11:01:40:cc:42:2e: 08:a5:66:17:58:ea:c8:8e:0f:97:0f:bd:0e:56:2b:e6:99:09: 9a:87:28:84:ec:a2:8d:b4:ea:7d:87:f9:52:c9:41:17:cc:17: 3d:72:2d:1c:d7:f6:0c:3c:96:8e:28:83:cf:10:c8:6a:a7:ba: e6:39:52:aa:85:38:54:c9:91:a3:3f:ae:54:18:f4:c9:30:cd: 3c:3b:9f:46:5f:4e:00:ef:af:3c:15:78:ee:34:3c:ed:cc:5c: f2:65:5e:03:48:6d:0d:d4:e8:60:67:96:a2:7d:8b:11:e8:88: 33:06:e0:d3 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIDAodQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTIzMjE1OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDk4M0IxMTAvBgNVBAUTKEIzMTZDMDFCN0I3NTQzMTRFMkYxOEY3 MzdBN0Q3RDg5QUNBQjdFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6NtBwNQXGPUnf1G6ij3rlpY9knBY35YqQmQWtr/sCOJ1uf9b4aK+4C/hdNDtR 8xLkzQe8qSuQ6OGME7r9d26IPk+tld2FW3E/GPysXKXjo6QjCDVF8w44ElGEKuvD tNyYntV+sWpLeEu/dtzigyfP2K3OxuRcYEwgqnYTFF/8a5oH5R0xsXd+Bd2m9LeO ak3K+SmLNj7V4t6vR/IBrYpUrG5YFYP/53MlLlUPfRsfBODvWjuIHZu0eQVdmGSU hyZu15L01lbpBnTVsgpktIn4qmjAx20EluyXsq0FiT29aW/NtZmkisH+m9iBCLqm HYCjriV3U++3s/6KacguH+EDAgMBAAGjggNaMIIDVjAdBgNVHQ4EFgQUsxbAG3t1 QxTi8Y9zen19iayrfmgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ5ODNCL0RGQUY5OTkyQ0MwMzExRjBCMUUyNUI0MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEOTgzQi9ERkFGOTk5MkNDMDMxMUYwQjFFMjVCNDFDNEY5QUUwMi9zeGJBRzN0 MVF4VGk4WTl6ZW4xOWlheXJmbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQgBAf8EGjAY oBYwFAIDANppAgMA5X4CAwITZAIDAhQLMFsGCCsGAQUFBwEHAQH/BEwwSjAeBAIA ATAYAwQCZxUwAwQBZ1BmAwQAZ1N9AwQAyko9MCgEAgACMCIDBwAgAQ327gADBwAg AQ329QADBwAgAQ336gADBQAkA+zAMA0GCSqGSIb3DQEBCwUAA4IBAQA8A5hfaC53 m9g0GQNAawrNHH1jZt+UFVSG8Jm+djzDMA1XWVIzf5enyShfi4BQP9tBXm/l57x8 x1tiA/BMMLuCkwooV6QmM+/nbqcOa626MMLc4EmKCX1b6oZ+ujquUBNfO/fdTeqq Tfqt9X0RlaBRyvq3jr8rhZ/07qwumkrFR/dkWYFiWTRA0oQRAUDMQi4IpWYXWOrI jg+XD70OVivmmQmahyiE7KKNtOp9h/lSyUEXzBc9ci0c1/YMPJaOKIPPEMhqp7rm OVKqhThUyZGjP65UGPTJMM08O59GX04A7688FXjuNDztzFzyZV4DSG0N1OhgZ5ai fYsR6IgzBuDT -----END CERTIFICATE-----Generated at Sun Jan 25 01:24:20 2026 by rpki-client