This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer File: toWM6JkRXyxWHHZl74vgaIBoEJw.cer (raw, json) Hash identifier: QLrqcI2se1S1QB2umWCMxoLtV3Ox67ZL+4TiKp7fJJE= Subject key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284C7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 14:17:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 45504 AS: 45578 IP: 43.254.60.0/22 IP: 103.22.156.0/22 IP: 103.253.184.0/22 IP: 113.212.176.0/21 IP: 123.255.224.0/21 IP: 203.148.92.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165063 (0x284c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 8 14:17:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:96:5e:50:7c:36:95:05:05:5f:f7:4a:cf: b2:23:7d:31:52:04:36:d3:c3:05:24:0d:b7:dc:62: 78:b3:3c:b8:61:10:fa:d2:a3:e4:4f:dd:b2:1c:b5: 10:9b:c3:b3:23:80:1a:c6:9c:da:8b:5b:bf:50:d8: 2c:ab:b3:05:da:a8:7d:4f:6a:5a:62:c6:d3:b1:4c: 0f:64:57:10:06:e5:e6:74:e6:fe:50:02:79:96:52: 23:7b:86:06:16:b9:46:4a:3e:1a:e6:f8:8c:5a:5f: 49:74:a3:91:63:72:19:83:85:08:c1:da:4e:84:8d: ec:9e:01:3e:de:72:2c:4e:cc:cb:d6:90:f0:5a:48: 27:92:47:6c:18:39:a0:c1:55:a9:1e:ce:4f:c1:00: 5f:e0:91:be:22:79:e4:9a:2d:e5:66:52:bd:75:6e: 8e:64:64:6f:81:8d:9d:92:09:90:8f:a4:24:96:6a: 9c:fc:d6:04:32:a6:12:b6:75:15:7c:73:78:97:3d: 6a:af:eb:e3:8e:3b:d0:25:fc:df:13:81:fc:b7:be: e3:bd:4e:cf:f1:37:19:67:bb:8a:e6:1d:ed:f8:ea: 0b:78:d6:55:77:8f:d4:52:80:dd:ce:c4:13:c7:19: be:a6:cd:39:96:ed:f2:a1:98:74:b9:26:c5:9d:24: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45504 45578 sbgp-ipAddrBlock: critical IPv4: 43.254.60.0/22 103.22.156.0/22 103.253.184.0/22 113.212.176.0/21 123.255.224.0/21 203.148.92.0/24 Signature Algorithm: sha256WithRSAEncryption 65:6c:3e:99:04:00:d7:e3:a5:6e:fc:f7:d4:23:1b:4d:6d:e2: 1e:84:8c:ac:44:9e:38:26:ab:e9:68:8f:97:36:40:7c:68:2e: f3:c1:74:b3:cb:b6:c4:4a:d5:d7:3d:7f:e6:52:06:14:f5:d1: 1e:81:cc:c8:a0:58:81:20:5e:20:0f:67:5c:bb:34:89:fd:e7: bc:ac:61:f6:38:cc:66:3a:69:8b:18:9d:8d:c3:a7:e6:47:3d: cf:65:16:3e:a0:05:22:a7:a6:14:b0:61:a0:ba:f8:08:9a:e5: fc:97:07:3a:bd:75:e6:81:5f:63:bb:64:1d:05:69:fd:81:b5: f0:f3:ac:48:dd:ec:5a:1c:2f:cf:b8:ba:c4:cd:c9:98:59:0c: df:4c:3f:aa:cb:2e:54:46:2d:e1:6f:83:13:d4:a4:89:a6:52: e9:6b:be:2f:73:fa:8a:08:ef:17:56:1a:a3:2b:f3:19:ad:f4: d5:35:77:f8:b6:f3:11:3d:7c:21:ac:65:e7:fb:9a:88:d7:76: 7a:c8:e8:d8:cd:80:ad:95:82:f4:df:b5:43:d6:e5:76:dc:83: 64:13:aa:01:06:f3:88:2a:30:79:87:d2:9f:38:4a:ea:6f:9a: 05:ef:90:6e:78:c0:d3:43:66:8d:1e:1d:6f:8d:00:63:8d:a4: 0e:3f:0a:96 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgIDAoTHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwODE0MTcxM1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2 NUVGOEJFMDY4ODA2ODEwOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMvpZeUHw2lQUFX/dKz7IjfTFSBDbTwwUkDbfcYnizPLhhEPrSo+RP3bIctRCb w7MjgBrGnNqLW79Q2CyrswXaqH1PalpixtOxTA9kVxAG5eZ05v5QAnmWUiN7hgYW uUZKPhrm+IxaX0l0o5FjchmDhQjB2k6EjeyeAT7ecixOzMvWkPBaSCeSR2wYOaDB Vakezk/BAF/gkb4ieeSaLeVmUr11bo5kZG+BjZ2SCZCPpCSWapz81gQyphK2dRV8 c3iXPWqv6+OOO9Al/N8Tgfy3vuO9Ts/xNxlnu4rmHe346gt41lV3j9RSgN3OxBPH Gb6mzTmW7fKhmHS5JsWdJO7RAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUtoWM6JkR XyxWHHZl74vgaIBoEJwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQxMjBELzUxRTgwRTk4QTZFMTExRUE4MDQyNDE2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkpr Ulh5eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDALHAAgMAsgowPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAIr/jwD BAJnFpwDBAJn/bgDBANx1LADBAN7/+ADBADLlFwwDQYJKoZIhvcNAQELBQADggEB AGVsPpkEANfjpW7899QjG01t4h6EjKxEnjgmq+loj5c2QHxoLvPBdLPLtsRK1dc9 f+ZSBhT10R6BzMigWIEgXiAPZ1y7NIn957ysYfY4zGY6aYsYnY3Dp+ZHPc9lFj6g BSKnphSwYaC6+Aia5fyXBzq9deaBX2O7ZB0Faf2BtfDzrEjd7FocL8+4usTNyZhZ DN9MP6rLLlRGLeFvgxPUpImmUulrvi9z+ooI7xdWGqMr8xmt9NU1d/i28xE9fCGs Zef7mojXdnrI6NjNgK2VgvTftUPW5Xbcg2QTqgEG84gqMHmH0p84SupvmgXvkG54 wNNDZo0eHW+NAGONpA4/CpY= -----END CERTIFICATE-----Generated at Sun Jan 25 01:17:56 2026 by rpki-client