This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer (raw, json) Hash identifier: t39sDGWOa3YoYwmqi1v06aZxAVIBUcbripDetgKheww= Subject key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283EB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 22:06:21 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 133148 IP: 103.66.228.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164843 (0x283eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 5 22:06:21 2026 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:bc:75:9f:3a:9e:9a:ef:0a:ed:f9:10:fc: ca:c2:90:ec:b0:ea:d7:e6:9a:c9:d7:4d:80:e7:f1: 54:46:1a:aa:7e:ce:b1:28:8a:5a:11:65:64:0f:c5: 71:55:9e:66:d8:19:da:2e:9f:e6:b0:53:3c:8e:aa: e4:cf:89:41:71:dc:5c:6d:bb:1b:04:da:80:19:48: 16:77:fc:3e:62:d6:5d:99:a9:a1:fe:17:dd:7a:64: 93:de:0e:d2:18:a1:ad:ce:31:72:bd:df:41:db:61: 86:18:f0:89:00:7b:8f:08:2a:70:18:05:d4:9d:13: 48:3d:62:52:83:6d:79:fa:a0:04:15:e6:3a:60:d1: 90:26:c5:87:bc:1d:03:01:d2:62:05:a8:b0:67:51: 49:ae:3e:11:a8:a8:8f:2e:c8:41:57:26:cf:eb:28: 15:61:79:12:ab:1f:a9:9a:b4:c6:a5:f7:e6:49:f4: 1a:9c:1d:61:84:ec:b0:21:c8:04:20:a8:ea:dd:6e: 2a:e8:4c:f8:94:e1:26:85:6f:7c:97:d3:46:02:ed: f9:94:87:d7:1e:72:0a:b0:04:22:83:08:3f:9a:a3: 1f:f1:b1:e7:57:5e:ed:1c:b2:43:1f:8a:39:b9:8c: 28:73:06:cf:19:ce:9b:ca:f2:ab:83:8d:5a:11:a6: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133148 sbgp-ipAddrBlock: critical IPv4: 103.66.228.0/23 Signature Algorithm: sha256WithRSAEncryption b1:01:82:33:40:59:cc:0d:40:06:68:f1:6a:39:81:61:22:57: d0:46:54:1e:62:d9:9f:5c:b3:b3:f5:ca:53:1c:85:8d:be:ae: 70:20:01:d8:d9:49:3b:94:7b:ff:e8:10:ce:8a:8b:4e:f4:02: 44:50:a5:56:b1:80:24:8c:b9:53:2f:4f:90:85:73:76:72:92: 03:18:d1:64:c2:e2:0d:8c:fb:4d:ca:e1:9d:08:a4:ca:60:7a: 97:39:73:46:7d:07:c9:e8:e6:f3:d5:6a:49:88:4d:47:3c:a9: 92:94:f5:68:12:48:eb:38:45:63:8f:11:9b:30:26:0d:8c:00: b7:f2:99:06:44:10:21:66:29:f2:cc:3e:aa:2b:8a:d9:7f:2e: 1b:d7:1a:e2:f5:47:59:e3:53:82:f2:5e:2e:a3:14:06:80:72: 9c:61:ef:fc:ee:07:b6:01:08:91:90:10:71:c2:5f:d2:5d:67: f3:f1:39:a7:ff:0d:81:40:ae:cd:d9:1b:2c:27:d6:f6:08:7a: 47:d6:5d:c2:d8:cb:63:eb:2e:88:c0:af:df:6c:19:16:4f:b2: af:3d:dc:ea:70:29:5a:0e:bc:5f:d5:a3:49:32:f0:44:5f:93: 62:a6:0d:86:6d:ea:11:f7:ab:26:89:29:c5:f2:2a:d4:3f:1a: f1:37:a5:a2 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAoPrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNTIyMDYyMVoXDTI2MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRkQ2NEQxMTAvBgNVBAUTKEI0QjE4QTI1M0ZCNjI5MzQzNzExNjYz NUREREQxOTk0MjhCNjhENUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLCrx1nzqemu8K7fkQ/MrCkOyw6tfmmsnXTYDn8VRGGqp+zrEoiloRZWQPxXFV nmbYGdoun+awUzyOquTPiUFx3FxtuxsE2oAZSBZ3/D5i1l2ZqaH+F916ZJPeDtIY oa3OMXK930HbYYYY8IkAe48IKnAYBdSdE0g9YlKDbXn6oAQV5jpg0ZAmxYe8HQMB 0mIFqLBnUUmuPhGoqI8uyEFXJs/rKBVheRKrH6matMal9+ZJ9BqcHWGE7LAhyAQg qOrdbiroTPiU4SaFb3yX00YC7fmUh9cecgqwBCKDCD+aox/xsedXXu0cskMfijm5 jChzBs8ZzpvK8quDjVoRpkLFAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUtLGKJT+2 KTQ3EWY13d0ZlCi2jVswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZENjRELzM3MDc4NkM4OTk5NDExRUQ4NTY3MzExRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRDY0RC8zNzA3ODZDODk5OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQt MktUUTNFV1kxM2QwWmxDaTJqVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAggcMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0LkMA0GCSqG SIb3DQEBCwUAA4IBAQCxAYIzQFnMDUAGaPFqOYFhIlfQRlQeYtmfXLOz9cpTHIWN vq5wIAHY2Uk7lHv/6BDOiotO9AJEUKVWsYAkjLlTL0+QhXN2cpIDGNFkwuINjPtN yuGdCKTKYHqXOXNGfQfJ6Obz1WpJiE1HPKmSlPVoEkjrOEVjjxGbMCYNjAC38pkG RBAhZinyzD6qK4rZfy4b1xri9UdZ41OC8l4uoxQGgHKcYe/87ge2AQiRkBBxwl/S XWfz8Tmn/w2BQK7N2RssJ9b2CHpH1l3C2Mtj6y6IwK/fbBkWT7KvPdzqcClaDrxf 1aNJMvBEX5Nipg2GbeoR96smiSnF8irUPxrxN6Wi -----END CERTIFICATE-----Generated at Sun Jan 25 01:15:18 2026 by rpki-client