This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer File: v7abwiV2uVe6tf8za36DWNy3Cio.cer (raw, json) Hash identifier: bLCMeohQ/wV2NyHhYVfyF3M8z4kLkCKPqJ820Z/ShRo= Subject key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02824A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 14:17:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 55915 AS: 136776 IP: 43.231.208.0/22 IP: 45.64.160.0/22 IP: 45.123.220.0/22 IP: 49.236.212.0/22 IP: 103.1.92.0/22 IP: 103.51.16.0/22 IP: 103.192.76.0/22 IP: 202.94.66.0/24 IP: 2407:5200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164426 (0x2824a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 14:17:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:ee:05:d0:d1:88:c8:9d:fa:b9:da:62:06: 24:4f:7d:d6:ad:6c:eb:36:a3:80:7a:13:89:05:bd: 5b:13:32:7d:ea:75:1d:d5:e1:37:90:92:83:8c:e2: f4:95:c5:27:44:fc:f6:68:4b:d6:23:f9:9a:f4:84: a0:d8:a4:45:f6:c1:54:21:be:ae:f1:09:e7:12:98: 13:65:5d:12:72:41:89:f4:87:5a:44:3e:0f:47:4a: 66:de:ba:b9:20:61:72:d3:36:3e:68:f1:32:3f:ab: 2c:26:58:96:f9:17:da:6e:71:95:ac:fe:d1:db:a6: d6:e1:39:e9:a9:ed:bb:78:9f:73:f8:2d:ac:af:8c: 58:0c:d8:2c:2a:7e:36:88:32:92:c8:f0:04:d9:4f: 92:d2:bc:d8:03:9a:2c:51:45:8e:05:d4:c9:95:03: a9:8a:1a:75:9f:b5:ec:95:05:48:34:3a:d7:24:27: 4c:99:98:14:99:05:e3:14:85:02:41:d6:21:b3:d0: 41:df:64:e4:e7:09:9d:6b:fe:1c:f9:39:4a:65:6c: ae:e8:f8:e2:f0:18:aa:6a:a0:df:4e:e2:40:ff:a4: 4e:43:d0:ed:0a:0b:90:62:8a:07:ea:b5:7c:f7:b2: 6a:13:a7:af:7c:b1:3e:c0:3c:c3:2a:1f:43:74:86: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55915 136776 sbgp-ipAddrBlock: critical IPv4: 43.231.208.0/22 45.64.160.0/22 45.123.220.0/22 49.236.212.0/22 103.1.92.0/22 103.51.16.0/22 103.192.76.0/22 202.94.66.0/24 IPv6: 2407:5200::/32 Signature Algorithm: sha256WithRSAEncryption ce:b2:7f:f3:ea:15:2c:a0:12:80:35:2d:71:3d:ae:5d:7d:34: e6:8c:0a:39:49:fb:cc:77:dd:63:41:f5:2b:f1:34:08:c0:06: 51:44:3b:23:97:ae:88:7c:46:ca:62:80:3f:6b:ed:ec:aa:ee: f1:8a:48:a2:d5:1e:79:9d:8f:ab:69:9a:2b:93:55:34:d5:d8: ea:20:f0:b5:e4:23:be:5d:5e:e8:79:d4:4e:3f:4b:de:5d:16: 69:8a:be:7f:f0:1b:44:18:f7:fb:4d:b7:5e:ea:84:c3:2d:0f: 97:15:ff:3f:1a:5b:6b:e8:54:70:be:fa:e2:cf:67:4f:2e:28: 59:69:f7:4a:02:e9:bd:31:76:ca:90:c5:b9:f8:9c:17:85:96: 08:e1:36:3f:84:bc:d0:d5:7e:9f:73:7e:fd:dc:13:bf:a8:a4: f9:60:28:31:d4:63:0b:ea:84:e8:0d:7b:f8:47:78:b6:20:f9: cf:15:c5:cd:e4:e4:78:8c:3e:20:66:a3:d7:41:99:37:06:aa: c2:20:dd:90:f7:aa:00:8c:0f:1d:f0:27:6d:e1:50:97:da:b4: 07:48:aa:08:74:1e:32:63:b5:53:53:40:4a:39:73:b7:1a:62: c8:9e:13:65:49:f6:a9:b6:7a:ee:73:4a:c3:73:9c:64:37:6f: a4:85:5c:92 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIDAoJKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE0MTcwM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYz MzZCN0U4MzU4RENCNzBBMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIN+4F0NGIyJ36udpiBiRPfdatbOs2o4B6E4kFvVsTMn3qdR3V4TeQkoOM4vSV xSdE/PZoS9Yj+Zr0hKDYpEX2wVQhvq7xCecSmBNlXRJyQYn0h1pEPg9HSmbeurkg YXLTNj5o8TI/qywmWJb5F9pucZWs/tHbptbhOemp7bt4n3P4LayvjFgM2CwqfjaI MpLI8ATZT5LSvNgDmixRRY4F1MmVA6mKGnWfteyVBUg0OtckJ0yZmBSZBeMUhQJB 1iGz0EHfZOTnCZ1r/hz5OUplbK7o+OLwGKpqoN9O4kD/pE5D0O0KC5BiigfqtXz3 smoTp698sT7APMMqH0N0hpR/AgMBAAGjggNNMIIDSTAdBgNVHQ4EFgQUv7abwiV2 uVe6tf8za36DWNy3CiowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ1QkZCL0RGMkUwMTNFRDlGQjExRTU4NEQxMUE3NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lW MnVWZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDANprAgMCFkgwWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDADBAIr59AD BAItQKADBAIte9wDBAIx7NQDBAJnAVwDBAJnMxADBAJnwEwDBADKXkIwDQQCAAIw BwMFACQHUgAwDQYJKoZIhvcNAQELBQADggEBAM6yf/PqFSygEoA1LXE9rl19NOaM CjlJ+8x33WNB9SvxNAjABlFEOyOXroh8RspigD9r7eyq7vGKSKLVHnmdj6tpmiuT VTTV2Oog8LXkI75dXuh51E4/S95dFmmKvn/wG0QY9/tNt17qhMMtD5cV/z8aW2vo VHC++uLPZ08uKFlp90oC6b0xdsqQxbn4nBeFlgjhNj+EvNDVfp9zfv3cE7+opPlg KDHUYwvqhOgNe/hHeLYg+c8Vxc3k5HiMPiBmo9dBmTcGqsIg3ZD3qgCMDx3wJ23h UJfatAdIqgh0HjJjtVNTQEo5c7caYsieE2VJ9qm2eu5zSsNznGQ3b6SFXJI= -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:42 2026 by rpki-client