This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer File: tw3qbHe56OzOWDkTKBnvkTc_xSc.cer (raw, json) Hash identifier: w05+LpE1IOFe/Qmot/IycYxnE7eD2uaOPywLN+CpQbM= Subject key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284E9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft caRepository: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 03:47:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 131268 IP: 103.35.92.0/22 IP: 202.4.188.0/24 IP: 2001:df3:6f00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165097 (0x284e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 03:47:13 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:c3:53:61:92:4e:7f:2a:52:76:10:c6:3a: 9c:78:e8:96:2b:e7:45:99:94:98:4e:2d:cf:1d:02: d6:92:46:45:5d:28:b7:7e:bc:b6:73:b8:71:a0:6a: 54:86:46:d9:4f:e7:6f:2c:00:3e:6d:e8:e0:69:1c: 22:e9:2a:a9:6d:82:36:40:b6:9d:66:ff:dd:28:4e: b4:52:3e:fb:49:de:6d:b9:3b:0d:80:7b:3e:55:bc: 76:3f:73:a8:2a:92:45:7e:bf:45:4c:95:48:c8:d9: 0b:de:4f:57:73:1c:10:ef:0e:54:03:d8:47:db:ce: 02:85:4f:0d:1b:fc:bf:0f:18:e9:31:cb:35:de:74: 45:7a:17:f4:f9:15:48:b0:0f:74:f3:3a:cd:9a:e7: 8e:9c:67:d6:1b:11:a8:21:5b:8f:81:f3:4d:e0:da: 40:49:61:7a:9c:1d:9e:1b:09:5d:38:21:7e:24:e2: 7f:24:b3:b3:19:1a:bd:e1:eb:65:5f:bc:75:0a:57: 31:ea:27:f8:1c:a0:85:c6:79:d3:63:76:83:aa:ca: ec:a7:de:53:f0:eb:61:e2:9c:f2:62:e0:9e:c4:58: 40:dd:64:db:c0:b6:94:9a:b0:08:a3:22:4b:8f:40: c7:e6:b3:4d:3b:85:5b:95:44:8a:ea:c7:50:91:61: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131268 sbgp-ipAddrBlock: critical IPv4: 103.35.92.0/22 202.4.188.0/24 IPv6: 2001:df3:6f00::/48 Signature Algorithm: sha256WithRSAEncryption a0:f5:5c:81:50:25:95:82:28:19:d9:f5:82:01:63:cf:96:58: 8f:75:05:57:8f:11:93:7c:0e:94:36:a3:ce:f7:44:2a:a5:f6: b3:49:87:5b:4d:7f:4e:10:86:97:6c:9c:2c:31:ab:dc:e8:1b: 94:2e:6e:87:13:28:59:52:84:21:e5:29:ce:21:84:c9:56:ce: e0:56:1f:c7:e0:d9:e2:d0:0e:83:05:19:cd:fe:69:63:0a:8f: c2:4c:62:ea:ef:ea:75:90:5b:9b:06:cf:47:1a:d8:f0:fc:28: 17:08:8d:cb:f6:2f:46:b5:19:1f:b7:58:83:3a:13:48:8d:f8: 13:a4:42:65:38:7e:81:c9:26:22:a8:c9:f9:a6:98:cf:14:fe: a6:0d:46:d3:ce:68:3f:2a:6c:65:62:98:31:f9:0c:a2:8d:6c: 68:52:7c:36:d5:42:13:c9:58:90:a5:06:50:83:11:8f:ad:ec: 1b:07:19:c9:13:00:07:19:ad:45:93:6e:74:28:8d:02:6e:73: f6:58:65:98:1d:dd:a6:63:0b:7d:43:07:dc:0d:bf:e0:e9:89: c6:d9:7a:fe:cb:d8:87:ac:0a:f7:03:a8:89:b0:75:e2:46:c2: c8:72:10:ee:70:32:7d:24:f1:5d:cb:e4:21:cf:93:9b:60:2f: f3:da:73:c1 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAoTpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTAzNDcxM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEUyQjIxMTAvBgNVBAUTKEI3MERFQTZDNzdCOUU4RUNDRTU4Mzkx MzI4MTlFRjkxMzczRkM1MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9dMNTYZJOfypSdhDGOpx46JYr50WZlJhOLc8dAtaSRkVdKLd+vLZzuHGgalSG RtlP528sAD5t6OBpHCLpKqltgjZAtp1m/90oTrRSPvtJ3m25Ow2Aez5VvHY/c6gq kkV+v0VMlUjI2QveT1dzHBDvDlQD2EfbzgKFTw0b/L8PGOkxyzXedEV6F/T5FUiw D3TzOs2a546cZ9YbEaghW4+B803g2kBJYXqcHZ4bCV04IX4k4n8ks7MZGr3h62Vf vHUKVzHqJ/gcoIXGedNjdoOqyuyn3lPw62HinPJi4J7EWEDdZNvAtpSasAijIkuP QMfms007hVuVRIrqx1CRYVarAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUtw3qbHe5 6OzOWDkTKBnvkTc/xScwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFMkIyLzJCNDZFQTU4MERFMzExRUY4MDNGNkYwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RTJCMi8yQjQ2RUE1ODBERTMxMUVGODAzRjZGMEVDNEY5QUUwMi90dzNxYkhl NTZPek9XRGtUS0JudmtUY194U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgDEMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCZyNcAwQAygS8 MA8EAgACMAkDBwAgAQ3zbwAwDQYJKoZIhvcNAQELBQADggEBAKD1XIFQJZWCKBnZ 9YIBY8+WWI91BVePEZN8DpQ2o873RCql9rNJh1tNf04QhpdsnCwxq9zoG5QubocT KFlShCHlKc4hhMlWzuBWH8fg2eLQDoMFGc3+aWMKj8JMYurv6nWQW5sGz0ca2PD8 KBcIjcv2L0a1GR+3WIM6E0iN+BOkQmU4foHJJiKoyfmmmM8U/qYNRtPOaD8qbGVi mDH5DKKNbGhSfDbVQhPJWJClBlCDEY+t7BsHGckTAAcZrUWTbnQojQJuc/ZYZZgd 3aZjC31DB9wNv+DpicbZev7L2IesCvcDqImwdeJGwshyEO5wMn0k8V3L5CHPk5tg L/Pac8E= -----END CERTIFICATE-----Generated at Sun Jan 25 01:13:58 2026 by rpki-client