This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer File: xL9bEU_BXXDIgNvBbowaMCo6LyE.cer (raw, json) Hash identifier: lUX67yqGoSS+sJouQPecL0YjOeXgH1MCA/Exr6JjABU= Subject key identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283F8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 05:09:05 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: IP: 103.153.128.0/23 IP: 2406:bdc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164856 (0x283f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 6 05:09:05 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A9192920, serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:5f:19:20:a4:a8:51:2b:1a:ff:85:a9:2b: f5:52:53:90:f3:cb:53:2f:4c:8e:fb:0c:ee:91:17: a3:b7:0b:22:fb:59:02:3c:62:e8:01:de:0e:6b:54: 4e:10:1f:0e:9f:9f:1a:80:9a:d6:92:02:09:53:e1: 06:1b:f8:36:15:6b:44:1c:fd:f7:fc:7c:4f:7b:44: b7:45:62:29:81:df:84:3d:2a:8a:16:9f:d8:70:d4: 6c:5a:0c:07:ff:d8:72:c4:19:94:77:f7:b4:d4:1a: f8:98:a2:22:40:a5:3b:6b:8c:42:fc:9c:fe:d1:5a: 55:2f:fe:8e:82:42:d1:b2:54:cb:b2:81:8d:64:64: 47:56:f1:ee:27:6e:6e:ec:4b:c7:bf:73:b6:68:7e: 82:18:c1:7e:90:77:82:6a:5f:0c:c3:63:01:53:5f: eb:44:4b:19:8b:e6:38:dd:3b:43:ec:7f:3b:19:a7: 54:73:0c:6d:b7:de:32:b2:61:f7:51:b4:e2:bb:95: 76:72:91:4d:a3:7e:b5:fd:e2:af:9a:99:a3:ec:dd: 84:03:94:fd:65:46:ed:ef:9b:2a:72:48:3c:fd:e5: 06:8c:5d:b0:fc:c9:38:0b:c2:c6:11:80:0f:a6:cb: 52:92:ac:62:71:2d:96:d8:33:a2:2f:e1:07:c6:f9: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.128.0/23 IPv6: 2406:bdc0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:70:a0:11:ec:78:2b:72:6f:4a:46:a0:87:e6:08:ad:3e:4a: 75:d6:0b:6d:9b:e5:e3:84:61:3b:b1:86:76:a0:3c:34:28:87: 56:15:b9:fb:d9:2a:70:60:a3:9a:51:0b:bd:26:d3:ee:d8:2c: d4:0c:1e:a6:2b:32:3f:d8:ff:99:7a:ba:f6:b3:d4:ce:71:09: f5:a6:44:65:41:e3:0b:9a:a1:f3:fd:df:51:15:2b:00:a6:11: 27:66:c3:29:0a:06:2e:8e:07:d9:26:2b:ff:6f:61:2b:70:f4: 3b:dc:24:6e:45:96:57:3d:19:15:01:1e:51:11:4e:68:31:4f: 45:d6:95:24:36:7c:83:be:78:4a:4d:3b:af:ff:21:cc:e3:93: 2b:50:9e:f7:8d:ea:7e:3b:f2:42:1e:00:83:4d:17:13:41:18: af:93:05:5c:b3:92:3a:64:6b:3f:57:ba:25:fb:c0:ad:58:f3: 2f:8d:23:77:26:6f:b1:b3:1d:db:c3:42:aa:b6:d6:48:05:7f: fc:51:4c:59:8b:07:30:17:19:3d:82:8e:1a:df:b5:37:5d:e9: 6a:32:e2:c4:96:01:66:99:a1:81:71:60:e0:b1:49:5c:9f:aa: 5c:13:f1:a2:41:51:9d:b4:7d:52:64:44:7c:17:9a:1f:a2:bb: 68:9c:b9:02 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAoP4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNjA1MDkwNVoXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTI5MjAxMTAvBgNVBAUTKEM0QkY1QjExNEZDMTVENzBDODgwREJD MTZFOEMxQTMwMkEzQTJGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs0l8ZIKSoUSsa/4WpK/VSU5Dzy1MvTI77DO6RF6O3CyL7WQI8YugB3g5rVE4Q Hw6fnxqAmtaSAglT4QYb+DYVa0Qc/ff8fE97RLdFYimB34Q9KooWn9hw1GxaDAf/ 2HLEGZR397TUGviYoiJApTtrjEL8nP7RWlUv/o6CQtGyVMuygY1kZEdW8e4nbm7s S8e/c7ZofoIYwX6Qd4JqXwzDYwFTX+tESxmL5jjdO0PsfzsZp1RzDG233jKyYfdR tOK7lXZykU2jfrX94q+amaPs3YQDlP1lRu3vmypySDz95QaMXbD8yTgLwsYRgA+m y1KSrGJxLZbYM6Iv4QfG+Wy7AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUxL9bEU/B XXDIgNvBbowaMCo6LyEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkyOTIwLzcwQzA0NDI2MjdFQjExRUI4MkYyNzA0N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi94TDliRVVf QlhYRElnTnZCYm93YU1DbzZMeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAFnmYAwDQQCAAIwBwMFACQGvcAwDQYJKoZIhvcNAQELBQADggEB AA9woBHseCtyb0pGoIfmCK0+SnXWC22b5eOEYTuxhnagPDQoh1YVufvZKnBgo5pR C70m0+7YLNQMHqYrMj/Y/5l6uvaz1M5xCfWmRGVB4wuaofP931EVKwCmESdmwykK Bi6OB9kmK/9vYStw9DvcJG5Fllc9GRUBHlERTmgxT0XWlSQ2fIO+eEpNO6//Iczj kytQnveN6n478kIeAINNFxNBGK+TBVyzkjpkaz9XuiX7wK1Y8y+NI3cmb7GzHdvD Qqq21kgFf/xRTFmLBzAXGT2CjhrftTdd6Woy4sSWAWaZoYFxYOCxSVyfqlwT8aJB UZ20fVJkRHwXmh+iu2icuQI= -----END CERTIFICATE-----Generated at Sun Jan 25 05:52:13 2026 by rpki-client