This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer File: waLHH9itWCWJ8EkC3a-DmIXf0zc.cer (raw, json) Hash identifier: ADYM5PSkrE6b+sqaGf1IKkGcavd2Wq1jWyPcSzexe6Y= Subject key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028102 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 26 Dec 2025 13:43:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 135005 AS: 137901 AS: 139836 IP: 103.146.8.0/23 IP: 2001:df2:3880::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164098 (0x28102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 26 13:43:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:32:40:f7:e4:76:54:79:79:01:72:02:01: dd:bb:72:e6:32:94:66:7e:7e:7b:0e:3e:f2:04:4b: 43:e2:b4:28:9d:9b:26:0d:36:0b:4c:9c:40:97:fa: 3b:43:8e:17:10:9f:e4:a9:46:55:ee:61:8c:88:bb: 6a:58:21:62:8c:90:a6:ef:94:bd:a2:e8:92:2d:fd: 52:43:7e:9a:bd:0f:22:3e:49:27:59:92:b9:4c:10: 05:ee:80:57:f4:ca:44:cb:09:53:dc:60:a0:61:6e: c4:91:60:24:79:1b:3d:8a:26:aa:61:a9:7f:8e:6c: 8c:74:01:4c:30:f5:a0:96:dc:81:5b:c3:37:18:37: 84:0c:1c:19:a8:a6:2c:74:f6:05:3c:a9:34:0b:ca: 7e:77:02:29:3b:6a:4c:6d:72:dd:07:9c:00:a7:dd: 1f:d4:e8:a4:cf:d8:56:9f:4f:5f:bb:37:cb:bc:2c: ef:1a:96:31:2a:dd:fd:7a:c4:c7:e8:b4:09:eb:dd: 22:80:80:29:a4:14:70:45:bd:cc:9e:71:2f:ee:b1: 44:3e:7e:d0:db:1c:73:73:fc:0f:82:b4:3f:85:ed: 65:38:23:b5:18:f8:b5:c2:31:70:2a:d0:d6:ef:9e: c9:f2:43:01:6a:5b:41:73:54:8b:5b:da:96:a3:35: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135005 137901 139836 sbgp-ipAddrBlock: critical IPv4: 103.146.8.0/23 IPv6: 2001:df2:3880::/48 Signature Algorithm: sha256WithRSAEncryption 25:bc:26:f0:7f:3d:7a:92:6d:fe:68:b0:75:a1:bb:84:eb:bd: 09:ac:e4:f5:96:1a:6f:54:15:ea:ab:53:42:f8:d9:b5:fa:8c: 95:3b:65:56:c0:56:18:1e:34:09:53:87:8e:35:04:3d:dc:d3: 54:f3:0a:c9:10:6b:e7:d9:62:fd:e2:03:18:27:77:5f:1e:2d: 5c:04:ae:4e:8b:0b:d3:fe:0e:fd:0c:b6:5f:40:e2:2b:85:23: 3a:b2:f0:56:e5:cd:7d:be:72:8e:f7:f7:9f:6a:5a:83:92:3f: d4:6c:92:07:c8:75:48:1b:83:0a:d5:3b:3f:15:4e:f9:8a:ee: 68:23:8d:7b:14:73:0e:74:a2:d6:69:1f:69:d0:17:dd:9c:68: 68:8e:3b:fa:db:b6:e1:46:ec:17:1b:ce:07:ee:8a:fd:d7:47: 9b:a9:de:26:fe:73:a1:e5:05:ff:d9:0e:bb:08:6e:ce:6c:5f: a8:1c:6d:47:30:b9:c7:2b:45:fa:ce:18:55:8c:af:68:9f:2f: 8f:ba:24:61:03:8c:d7:1f:39:d1:9f:bf:5b:86:7b:ab:2a:7a: a2:87:ac:c9:24:5f:a4:0d:b6:e0:32:a1:03:69:c6:d0:9a:f1: 98:9d:77:72:45:6c:0b:1e:d2:e4:51:2a:44:aa:dc:c1:f7:c5: a7:59:61:b5 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAoECMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNjEzNDMxMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkw MkREQUY4Mzk4ODVERkQzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMNDJA9+R2VHl5AXICAd27cuYylGZ+fnsOPvIES0PitCidmyYNNgtMnECX+jtD jhcQn+SpRlXuYYyIu2pYIWKMkKbvlL2i6JIt/VJDfpq9DyI+SSdZkrlMEAXugFf0 ykTLCVPcYKBhbsSRYCR5Gz2KJqphqX+ObIx0AUww9aCW3IFbwzcYN4QMHBmopix0 9gU8qTQLyn53Aik7akxtct0HnACn3R/U6KTP2FafT1+7N8u8LO8aljEq3f16xMfo tAnr3SKAgCmkFHBFvcyecS/usUQ+ftDbHHNz/A+CtD+F7WU4I7UY+LXCMXAq0Nbv nsnyQwFqW0FzVItb2pajNZSVAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUwaLHH9it WCWJ8EkC3a+DmIXf0zcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE4N0FCL0YwOTZEQ0M0RTQ0QjExRUJCMkM4MUU4MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlp dFdDV0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAg9dAgMCGq0CAwIiPDAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgME AWeSCDAPBAIAAjAJAwcAIAEN8jiAMA0GCSqGSIb3DQEBCwUAA4IBAQAlvCbwfz16 km3+aLB1obuE670JrOT1lhpvVBXqq1NC+Nm1+oyVO2VWwFYYHjQJU4eONQQ93NNU 8wrJEGvn2WL94gMYJ3dfHi1cBK5OiwvT/g79DLZfQOIrhSM6svBW5c19vnKO9/ef alqDkj/UbJIHyHVIG4MK1Ts/FU75iu5oI417FHMOdKLWaR9p0BfdnGhojjv627bh RuwXG84H7or910ebqd4m/nOh5QX/2Q67CG7ObF+oHG1HMLnHK0X6zhhVjK9ony+P uiRhA4zXHznRn79bhnurKnqih6zJJF+kDbbgMqEDacbQmvGYnXdyRWwLHtLkUSpE qtzB98WnWWG1 -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:27 2026 by rpki-client